Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204901.roa
File: AS204901.roa (raw, json)
Hash identifier: jdLWRI735fzFBUdQoX4Qd/YU6UeVALjke74lfBNd5iw=
Subject key identifier: B0:0B:3D:3A:7C:37:40:48:CC:9B:86:75:80:92:02:78:E6:CB:54:98
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 19AB3BB1A1376520AAD41473E79CF24A49585E18
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204901.roa
Signing time: Tue 20 Aug 2024 02:31:54 +0000
ROA not before: Tue 20 Aug 2024 02:26:54 +0000
ROA not after: Tue 19 Aug 2025 02:31:54 +0000
asID: 204901
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ab:3b:b1:a1:37:65:20:aa:d4:14:73:e7:9c:f2:4a:49:58:5e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Aug 20 02:26:54 2024 GMT
Not After : Aug 19 02:31:54 2025 GMT
Subject: CN=B00B3D3A7C374048CC9B867580920278E6CB5498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:8b:9d:c1:cb:71:ec:5c:e9:75:c2:2a:e6:
c4:cd:47:e4:50:7c:61:41:12:4e:c4:47:e3:e0:c1:
b1:ec:4a:46:33:b8:ab:e4:b5:9a:7c:28:08:c2:f0:
d1:1a:e8:76:6a:59:4a:14:d0:9e:35:6b:6a:17:68:
21:56:49:78:06:3f:26:69:dc:7c:d0:57:83:0c:2f:
3a:4d:94:10:75:d4:d3:67:a5:2e:0b:f6:3b:52:d1:
8e:7c:74:6d:51:0b:f9:45:61:8d:40:a2:e5:9b:ac:
5f:47:19:ab:d7:27:1a:48:6a:db:02:47:40:d1:ad:
b9:bd:50:9d:64:a6:f1:8d:51:69:c2:bb:aa:ce:8f:
fb:24:ea:d8:eb:49:b1:9a:d7:a9:0d:66:b5:ea:1d:
39:5e:c5:43:fe:d0:a6:47:be:26:21:06:38:7b:ad:
5b:51:bd:24:60:d8:ee:54:ff:12:15:fd:50:23:83:
83:88:85:a1:38:f8:c8:41:1e:75:4c:73:69:c9:9c:
c6:e8:f7:ba:fd:a1:2f:07:a1:fe:b7:7d:da:03:bb:
32:8e:59:00:22:ea:8c:db:d6:47:1b:51:f2:d3:bb:
2c:36:59:30:23:e6:59:8b:bc:b1:af:87:28:57:58:
19:c1:f6:58:fc:96:9e:ca:fd:32:a0:82:7c:2e:3f:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:3D:3A:7C:37:40:48:CC:9B:86:75:80:92:02:78:E6:CB:54:98
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204901.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
7a:62:56:84:ba:1c:4c:03:cf:ce:e0:85:71:a4:c8:5e:6b:45:
6c:f7:b8:28:b6:7f:2b:4c:30:d9:6b:7f:df:df:1f:1e:c4:a2:
2c:4c:f7:45:80:fa:70:e3:65:c9:89:5e:ae:10:64:c7:0e:33:
e2:4d:ab:9b:57:b5:56:42:7a:52:ac:0a:e8:71:46:40:0f:94:
41:c6:b4:79:ff:22:ef:26:4d:a2:96:62:f9:7d:75:2c:38:0f:
00:69:7b:7e:c1:82:98:39:0b:2e:6f:38:32:93:b1:d6:d2:bf:
85:36:a2:f1:5c:55:51:3c:97:32:b2:e8:b3:7c:a7:ac:03:97:
52:71:96:06:9f:4d:bf:62:fa:c1:8f:ff:d2:47:4d:c5:5a:ae:
6d:4c:e9:a5:d1:ff:dd:7c:7d:c9:e6:d2:5f:80:86:03:79:5c:
22:86:a3:ae:bd:01:d4:24:3b:59:3f:08:65:f6:23:9b:96:9f:
31:92:9c:1f:86:7c:88:5c:cb:b1:92:a0:44:9d:b4:73:ed:76:
bf:29:94:56:0b:75:d9:02:b2:16:f5:7d:a7:f4:1a:3a:18:44:
34:bf:30:09:bd:3b:b4:f1:77:c4:68:28:04:0f:91:28:b8:14:
d9:77:c4:68:51:64:95:ae:5a:6c:00:a4:c3:b3:bc:d9:b4:f8:
49:30:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 01:21:01 2025 by rpki-client