Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS47509.roa
File: AS47509.roa (raw, json)
Hash identifier: hkNaJziEReri/YVWP8lBfxZ0aFrzmMuz8ineGUBSTWw=
Subject key identifier: DB:71:5B:98:25:35:2F:0D:CA:66:E4:2D:4C:C6:8A:2D:73:0C:D3:AF
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0AB4D9554C87200B082D1EADF86116A18C96E474
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS47509.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 47509
IP address blocks: 2a14:7581:900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b4:d9:55:4c:87:20:0b:08:2d:1e:ad:f8:61:16:a1:8c:96:e4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=DB715B9825352F0DCA66E42D4CC68A2D730CD3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b4:ec:ee:31:49:bb:8a:1d:c6:02:7d:8a:65:
dc:53:39:69:80:d8:c7:57:09:57:89:0d:14:a6:06:
72:4a:48:6d:97:3f:1b:d0:17:c7:fc:04:1d:91:58:
20:e1:9d:8f:19:47:18:10:45:ba:c1:0d:31:48:a7:
c0:63:67:5e:b1:1d:0c:b1:b7:02:2c:83:c3:35:c1:
f5:60:75:14:a9:69:6d:a0:67:0e:9d:84:6c:ba:84:
1c:ad:b3:ac:bd:c5:5c:02:59:71:2e:3b:1e:2f:24:
d9:87:b9:7f:48:f1:fb:e5:53:8b:4a:2d:ee:b2:1b:
cc:11:b1:df:03:5c:ed:50:f1:75:63:cd:c9:19:c6:
77:bc:76:2e:ed:59:14:c2:0d:8b:a0:9a:1f:f8:7b:
1c:aa:be:08:ff:93:12:b9:ac:50:3b:dd:1c:f9:20:
52:69:d3:27:36:45:f6:20:43:f1:14:9b:e1:6b:a9:
a9:b4:36:97:47:22:fa:bc:19:83:d4:13:a9:74:78:
73:b5:a3:d7:1a:f1:8c:47:e9:e2:be:48:f3:ee:e2:
6f:35:79:11:93:f5:3a:2f:92:ec:97:17:40:b6:f9:
6c:ba:ad:e6:c3:57:f5:d9:af:44:e6:85:a1:33:96:
35:4d:84:6b:69:ce:52:01:9b:65:cc:b9:89:12:4d:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:71:5B:98:25:35:2F:0D:CA:66:E4:2D:4C:C6:8A:2D:73:0C:D3:AF
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS47509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:900::/40
Signature Algorithm: sha256WithRSAEncryption
73:32:31:1e:3e:34:c7:25:78:df:81:08:df:a9:50:92:b5:20:
9d:3e:8b:49:02:e5:23:8b:4b:ab:20:8f:cc:25:40:0e:f1:fb:
bc:7f:a8:e8:eb:0e:9b:97:78:e6:c5:5a:22:52:cc:d1:7b:16:
95:88:f3:af:29:05:ac:8f:cd:e1:2b:7a:76:bb:81:f1:43:da:
4e:00:dc:cb:ec:7c:97:8f:16:6f:4f:65:56:12:84:f5:22:e9:
71:a6:5c:c0:ce:0b:0b:97:08:5c:bd:7f:28:b7:85:62:df:1e:
c9:df:03:b7:c5:ab:46:40:5d:27:2b:80:f3:63:83:49:0b:2d:
07:88:ee:3c:30:a0:96:6f:66:0b:c6:3d:d1:fb:90:b8:35:a7:
f3:b0:87:e2:dc:49:22:67:43:37:91:71:79:ef:56:be:bd:42:
29:a2:4d:8f:52:30:e9:77:8c:e9:c4:e7:4e:0b:81:8d:ce:8a:
0f:5c:83:41:fd:3b:6a:a9:01:72:7a:da:80:1a:c3:dd:44:df:
de:c3:f1:c2:36:e5:ee:0a:d0:8f:09:c3:70:2c:4d:e2:46:5f:
3b:96:56:12:3c:41:1f:52:50:4e:e4:b8:18:92:d2:1b:35:85:
72:6e:70:4c:07:32:9e:c0:69:b3:47:18:90:dc:05:7e:7d:72:
cc:7e:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:00 2025 by rpki-client