Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa
File: AS198342.roa (raw, json)
Hash identifier: Snuz+Gj5/JUEZb4alWhDCeZQw+t5TmE/SO3fcDF4gMg=
Subject key identifier: F5:97:86:3A:DA:04:E6:CF:04:76:51:FD:28:B4:0B:A5:63:E4:79:56
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 7241EEFD4D91D7D2A136F7E5B9E69CBED4EAAD1D
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa
Signing time: Thu 02 Jan 2025 01:30:34 +0000
ROA not before: Thu 02 Jan 2025 01:25:34 +0000
ROA not after: Thu 01 Jan 2026 01:30:34 +0000
asID: 198342
IP address blocks: 2a07:54c1:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:41:ee:fd:4d:91:d7:d2:a1:36:f7:e5:b9:e6:9c:be:d4:ea:ad:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Jan 2 01:25:34 2025 GMT
Not After : Jan 1 01:30:34 2026 GMT
Subject: CN=F597863ADA04E6CF047651FD28B40BA563E47956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:b7:d4:00:24:b1:a2:fc:99:88:3c:78:0d:
30:68:93:e8:4b:54:c8:a0:1d:df:e3:52:60:3e:53:
32:b1:49:2f:7f:6c:e9:48:28:80:d9:ab:55:7a:1c:
59:f1:99:b4:0e:97:3a:55:cd:3e:ae:b2:e5:a2:02:
12:fc:5c:6f:9f:a9:ea:98:e9:f1:a2:ae:e0:35:94:
af:5a:f7:5d:87:59:e8:b9:d3:e8:b0:3d:21:cb:c9:
52:f0:18:a7:dd:d9:9a:df:24:4d:46:31:86:36:8b:
aa:7c:43:de:fe:d9:76:e4:68:0d:56:c0:32:65:fd:
46:d3:08:7e:3a:58:29:57:c6:8f:8f:23:15:24:e2:
8c:30:b7:33:68:3f:82:61:0e:65:46:6a:9f:a5:fc:
57:17:bb:f4:3b:0d:55:eb:9c:a5:0e:8f:89:3c:6a:
57:da:a7:10:a1:39:c1:85:8b:81:0f:1a:7d:92:35:
82:c8:3a:64:09:9d:de:72:d7:08:54:dd:8e:b6:41:
2e:e2:ce:f6:5c:83:2d:ad:d7:1a:9f:f1:a5:77:e4:
db:ba:ed:ab:ad:82:9e:72:76:4f:86:5e:da:30:fd:
0f:b3:36:4b:64:47:57:f8:91:e8:e5:c8:74:a3:c2:
fd:25:fa:df:a5:32:e9:19:92:b3:8f:63:53:20:95:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:97:86:3A:DA:04:E6:CF:04:76:51:FD:28:B4:0B:A5:63:E4:79:56
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
75:b7:97:84:97:f3:61:c0:39:4b:31:6b:d7:eb:f6:34:d3:bc:
05:c9:56:e2:4a:cd:d0:2e:26:30:94:18:45:77:82:48:50:96:
fe:b5:f6:3b:67:c8:53:d5:8e:c1:83:7e:17:7b:e1:24:35:96:
16:09:92:30:7e:f6:f7:3d:8a:cf:ed:26:ac:6e:4f:b7:31:52:
02:f1:b1:bb:7f:ea:e6:4a:9c:ea:ba:20:4f:83:ca:00:b3:3f:
f4:8f:82:48:33:84:b4:9c:a4:71:01:79:44:90:57:a2:ab:5a:
cd:6b:31:2c:02:50:2a:9f:27:a8:2c:3b:92:5b:b7:4a:94:31:
09:26:94:f8:24:5f:df:ea:d1:9f:04:7a:70:94:ca:fe:ed:6e:
ec:be:40:24:58:88:79:fe:09:83:7a:b3:22:b5:6f:e4:5a:46:
0c:5a:41:98:8c:f6:c0:9e:07:41:02:e0:04:1a:3f:b1:95:6c:
c4:7c:02:36:76:20:8a:01:75:74:b1:13:f0:9e:2f:7f:29:43:
ff:ff:99:cc:d7:b4:d8:7f:33:65:aa:55:46:54:73:eb:b0:95:
7b:0a:47:0e:07:94:3c:5a:47:65:44:eb:34:aa:d8:ac:79:83:
f0:b3:21:19:c4:35:a7:2e:1e:ef:3a:60:a0:7e:3f:32:69:89:
b8:c5:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:05:58 2025 by rpki-client