Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54148.roa
File: AS54148.roa (raw, json)
Hash identifier: 0i2SWvL4xVODR1P57Yx4OZwelw5m8NkpwASaI99XFcc=
Subject key identifier: 4D:89:2B:17:6E:E3:B8:0F:8B:86:81:45:1D:D8:45:7B:7A:63:5E:EA
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 5D91B366D9669A0B816CB5A1FE362D1501CF692E
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54148.roa
Signing time: Sat 08 Feb 2025 22:41:23 +0000
ROA not before: Sat 08 Feb 2025 22:36:23 +0000
ROA not after: Sat 07 Feb 2026 22:41:23 +0000
asID: 54148
IP address blocks: 2a07:54c4:175b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:91:b3:66:d9:66:9a:0b:81:6c:b5:a1:fe:36:2d:15:01:cf:69:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Feb 8 22:36:23 2025 GMT
Not After : Feb 7 22:41:23 2026 GMT
Subject: CN=4D892B176EE3B80F8B8681451DD8457B7A635EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:5f:91:24:a2:00:87:46:a7:53:0b:bd:e3:
36:a9:10:80:7f:27:52:19:8b:03:2e:b7:7c:be:b0:
8a:99:7d:63:c0:02:bf:d6:d0:7a:03:91:84:ea:c9:
d7:80:f4:69:b7:d1:5d:bc:1e:9b:cb:a4:a5:aa:40:
24:18:f9:b2:ae:26:1f:ab:f7:96:ec:32:e9:5f:b5:
f0:90:e7:43:51:6b:c0:1b:f6:f6:78:3e:7a:5c:db:
e6:41:cb:bd:b4:b4:c8:2e:4e:45:2c:3c:88:68:62:
ee:b7:ab:bc:41:f6:84:8e:0d:1b:29:d3:b4:67:56:
b4:dc:57:33:dc:19:cc:1a:8f:b4:1e:fe:b7:89:66:
31:5d:dc:2b:a6:40:c1:84:65:d6:d1:2f:7f:e8:fb:
e0:29:8f:25:b7:b2:8a:6b:1b:3e:ed:47:6c:10:52:
a3:48:62:75:0b:c3:10:b3:da:68:20:2f:ff:25:42:
50:3f:89:1e:4d:03:cd:21:be:d2:75:51:dc:03:c5:
9b:63:14:cc:75:4b:c4:35:3b:b2:b9:c3:64:e8:f3:
50:80:39:20:ff:60:66:28:f3:2d:00:17:99:27:6c:
7c:8e:b6:0d:00:35:57:22:5d:3f:c5:51:70:d4:d5:
af:5e:b6:bc:d6:a4:04:f4:01:28:5a:68:86:cd:e5:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:2B:17:6E:E3:B8:0F:8B:86:81:45:1D:D8:45:7B:7A:63:5E:EA
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54148.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c4:175b::/48
Signature Algorithm: sha256WithRSAEncryption
2a:dd:ab:28:8d:8e:fc:2d:0c:75:00:ed:49:9e:57:ef:71:94:
f6:9a:a6:21:bc:c5:a4:3c:40:b8:00:eb:f3:89:82:49:07:ce:
12:a1:85:90:1e:8c:28:ee:7a:48:b7:2b:4e:0a:eb:f3:d9:c2:
65:ba:bf:b2:92:0c:85:07:03:d9:f0:ea:a6:7a:d3:71:60:d7:
7c:db:21:ca:db:c6:77:1a:f6:58:ed:e3:07:24:d0:38:db:4f:
cf:a3:33:f9:72:c5:f7:1c:87:d2:f9:ed:ca:33:8a:9e:bf:ca:
db:42:51:c1:66:83:4a:ae:62:8d:3c:27:ec:fb:1d:33:3f:f2:
af:57:99:a4:bb:3d:17:cf:78:49:9c:e6:8a:bc:8c:ce:f6:af:
1c:a4:12:37:0e:c9:ac:15:ec:79:29:ee:c8:6f:92:7b:b4:3f:
15:f6:d9:7e:ea:2a:51:1e:85:cf:1b:b6:9d:50:0f:ef:62:e7:
e9:ff:7e:6f:67:99:89:6b:b2:21:a3:22:07:bf:8b:88:9f:9a:
0c:e0:54:9e:da:91:1c:8f:37:63:49:e2:a7:95:5e:fd:64:99:
44:38:1b:7a:e8:3e:0f:dc:5f:fe:48:53:c1:5b:1f:92:65:90:
34:45:72:d2:a0:a5:49:c4:ac:5c:7f:b2:cc:14:ec:df:31:d6:
76:b4:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:05:27 2025 by rpki-client