Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS52210.roa
File: AS52210.roa (raw, json)
Hash identifier: 7CVfBzkkNk781Kp30DBVvSoOj4q+8lxqSvC5E403pRE=
Subject key identifier: 18:0D:15:FB:72:A0:A6:83:78:F6:70:77:44:F2:86:18:58:41:0F:5A
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 559B49264D805F47A0C34EEF4E94542EA29B83D4
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS52210.roa
Signing time: Tue 20 Aug 2024 02:31:54 +0000
ROA not before: Tue 20 Aug 2024 02:26:54 +0000
ROA not after: Tue 19 Aug 2025 02:31:54 +0000
asID: 52210
IP address blocks: 2a07:54c4:174b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9b:49:26:4d:80:5f:47:a0:c3:4e:ef:4e:94:54:2e:a2:9b:83:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Aug 20 02:26:54 2024 GMT
Not After : Aug 19 02:31:54 2025 GMT
Subject: CN=180D15FB72A0A68378F6707744F2861858410F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:62:d1:c7:3c:96:1b:1a:55:6d:98:30:d1:
0d:19:a8:f9:cf:92:d7:af:a7:dd:ea:98:70:16:65:
d5:a3:93:b5:11:0e:14:16:f7:19:f0:3d:7a:80:c6:
d4:34:f1:24:a8:db:5c:60:25:1e:eb:f3:f5:2e:1a:
4f:bb:0b:40:cc:9c:c4:53:39:49:b6:e3:25:91:48:
9a:72:7d:aa:54:34:50:8e:bb:fd:bb:2a:68:29:1b:
66:d9:b2:9b:9f:35:f2:a8:fd:c7:7a:a8:c4:05:96:
4a:f5:34:0b:03:fe:c5:5e:f5:3e:27:9e:a3:99:09:
23:fb:9e:a7:a5:f6:6d:36:dd:44:b9:c9:70:41:b7:
63:12:43:ef:82:73:8e:c5:d8:5d:0a:b6:ed:45:52:
ed:a8:06:1f:c9:14:af:e9:7b:15:54:08:ff:af:83:
9b:33:4d:72:82:c4:ca:62:52:73:13:af:d3:c6:bb:
24:ac:7b:62:f9:8f:0a:fe:f6:ba:5d:d5:03:27:77:
9a:cf:21:a3:2c:ff:83:d6:fa:ab:2e:c6:2d:1b:8e:
eb:28:5a:8c:78:e7:e1:2c:55:72:42:50:66:a5:0c:
16:01:95:35:dd:20:2f:48:39:e9:5b:6c:87:e2:f9:
69:3a:a8:c6:57:5f:fa:e6:b2:62:9a:2f:cf:26:b6:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:15:FB:72:A0:A6:83:78:F6:70:77:44:F2:86:18:58:41:0F:5A
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS52210.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c4:174b::/48
Signature Algorithm: sha256WithRSAEncryption
95:85:d6:e1:c5:5c:f3:bc:9f:41:b9:8b:7a:bc:33:04:49:3f:
aa:00:99:24:c8:22:64:b8:e6:5b:ad:9d:80:75:de:a8:57:b1:
87:64:8a:a7:e7:bb:6b:a0:e4:df:9e:6f:64:d8:ff:e6:8e:05:
40:74:fc:c9:10:c5:21:a8:01:39:d8:11:77:98:92:55:6e:f2:
70:12:bb:39:db:df:62:97:d8:84:ec:d6:3c:ea:ca:98:ee:a7:
01:45:2d:95:f4:0c:85:8c:20:bc:1c:a3:67:ed:04:2b:cc:a2:
de:f8:e5:4a:04:1f:5c:ca:4b:64:2c:9d:e4:ab:fb:cb:a3:45:
52:8d:19:1c:97:c7:3b:9b:db:94:9c:85:9a:ef:02:48:e6:47:
36:b5:f3:92:06:3b:ea:97:75:02:b7:c5:9c:28:36:c6:06:fb:
d8:a4:3b:c0:d3:5e:43:bc:8a:e5:64:e5:3e:26:08:a2:a3:a7:
5f:03:6c:09:de:77:a1:02:8a:1b:44:cf:ef:aa:d0:b1:20:c5:
7e:82:1a:20:66:9b:80:00:a7:8b:cf:e4:ea:7c:d7:3d:d3:72:
4f:08:a0:ac:d7:a5:46:3a:19:23:f5:da:24:0c:5d:4b:b8:2c:
78:68:f6:d0:71:71:ce:8d:33:ff:f8:11:b8:9c:8c:bc:16:22:
fc:c1:36:54
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVZtJJk2AX0egw07vTpRULqKbg9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw
RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTRaFw0yNTA4MTkwMjMxNTRaMDMxMTAvBgNV
BAMTKDE4MEQxNUZCNzJBMEE2ODM3OEY2NzA3NzQ0RjI4NjE4NTg0MTBGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3WLRxzyWGxpVbZgw0Q0ZqPnP
ktevp93qmHAWZdWjk7URDhQW9xnwPXqAxtQ08SSo21xgJR7r8/UuGk+7C0DMnMRT
OUm24yWRSJpyfapUNFCOu/27KmgpG2bZspufNfKo/cd6qMQFlkr1NAsD/sVe9T4n
nqOZCSP7nqel9m023US5yXBBt2MSQ++Cc47F2F0Ktu1FUu2oBh/JFK/pexVUCP+v
g5szTXKCxMpiUnMTr9PGuySse2L5jwr+9rpd1QMnd5rPIaMs/4PW+qsuxi0bjuso
Wox45+EsVXJCUGalDBYBlTXdIC9IOelbbIfi+Wk6qMZXX/rmsmKaL88mthljAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGA0V+3KgpoN49nB3RPKGGFhBD1owHwYDVR0j
BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF
MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTIyMTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TE
F0swDQYJKoZIhvcNAQELBQADggEBAJWF1uHFXPO8n0G5i3q8MwRJP6oAmSTIImS4
5lutnYB13qhXsYdkiqfnu2ug5N+eb2TY/+aOBUB0/MkQxSGoATnYEXeYklVu8nAS
uznb32KX2ITs1jzqypjupwFFLZX0DIWMILwco2ftBCvMot745UoEH1zKS2QsneSr
+8ujRVKNGRyXxzub25SchZrvAkjmRza185IGO+qXdQK3xZwoNsYG+9ikO8DTXkO8
iuVk5T4mCKKjp18DbAned6ECihtEz++q0LEgxX6CGiBmm4AAp4vP5Op81z3Tck8I
oKzXpUY6GSP12iQMXUu4LHho9tBxcc6NM//4EbicjLwWIvzBNlQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:47:26 2025 by rpki-client