Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: Kt2VhhK6aHDOTJC/g9sdAgjLvVW45Fj0lwn8HO4CslE=
Subject key identifier: 2B:D7:A6:4E:B2:26:7A:09:10:76:7F:97:9F:95:D8:73:5D:F8:5C:BA
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 0229711031EAABCA01692346BA966E16701C575C
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 07 Dec 2024 13:13:28 +0000
ROA not before: Sat 07 Dec 2024 13:08:28 +0000
ROA not after: Sat 06 Dec 2025 13:13:28 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:60::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:29:71:10:31:ea:ab:ca:01:69:23:46:ba:96:6e:16:70:1c:57:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 13:08:28 2024 GMT
Not After : Dec 6 13:13:28 2025 GMT
Subject: CN=2BD7A64EB2267A0910767F979F95D8735DF85CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:7d:d0:fd:68:04:1b:8d:74:4d:4b:79:fa:
50:e2:eb:61:46:bc:bd:da:81:1d:4d:4e:ee:a2:04:
bb:61:d9:a6:3c:a5:c4:a6:f3:40:68:7a:57:f0:23:
17:af:b4:e1:f8:e4:a0:de:f8:cb:ea:ae:d7:1b:ec:
32:d9:9d:3d:64:7e:e7:13:a1:7c:43:4b:76:7d:80:
69:0d:b3:5d:8a:12:0a:11:27:32:09:56:cf:81:a9:
78:f5:5c:39:0c:16:c9:be:dc:32:20:8d:57:a8:03:
02:d6:e6:ca:7c:64:20:38:2a:5b:5f:6e:cc:19:dd:
44:d4:b2:44:ef:1c:8b:4b:73:6e:1d:08:31:07:5f:
74:28:c2:da:6e:34:cf:ed:d2:aa:07:c8:20:56:b3:
55:ac:aa:c0:f5:c5:30:98:69:e2:e5:23:b6:b0:b1:
6e:e0:e8:f3:51:3f:a1:95:b9:28:f1:47:17:0e:09:
82:93:08:e9:ca:d7:2e:b2:13:5d:f8:96:e2:27:a3:
48:d2:77:2a:44:6e:36:7b:3f:85:01:00:be:4b:df:
25:98:5b:8e:7b:c4:20:ca:30:dc:37:e5:91:e3:75:
2e:e9:f6:43:92:dd:3e:60:a0:16:48:32:40:08:44:
73:57:08:70:0d:f7:cd:38:57:06:2a:9f:2d:72:6a:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:A6:4E:B2:26:7A:09:10:76:7F:97:9F:95:D8:73:5D:F8:5C:BA
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:60::/64
Signature Algorithm: sha256WithRSAEncryption
55:d3:da:da:9d:f2:c2:ec:c4:fe:89:d8:ff:09:aa:08:f1:15:
6f:1d:35:f5:c4:1c:12:3c:4a:45:0c:dc:b7:e7:9a:88:72:19:
28:97:66:5f:52:f1:df:1a:e9:bf:29:8e:4e:16:f1:24:00:70:
9c:2c:f0:ca:37:06:93:f3:98:d9:a0:df:5b:d7:81:d3:99:b7:
58:24:f8:78:78:53:ad:d2:c9:2e:df:ad:d5:09:da:0d:7b:18:
75:7a:5d:2b:56:b2:0d:65:95:7c:79:ff:ab:2b:de:ca:25:44:
f4:e6:7e:52:a2:3c:64:71:11:94:57:bb:88:f3:19:08:d8:56:
68:5b:53:f7:f3:2b:ce:ed:89:03:76:95:15:cf:d2:cb:6b:58:
5f:66:56:60:b0:8a:cb:d0:25:69:a8:17:db:72:2d:bd:16:47:
dd:79:09:27:52:f7:80:f4:c1:a8:c8:27:43:f2:89:dc:ce:6f:
63:27:6b:3c:ef:0b:04:1d:67:59:7a:29:b5:b6:12:94:be:37:
9f:7a:77:03:7e:9f:6f:54:ac:77:a2:1b:c3:64:77:86:01:58:
9d:75:a4:55:cf:17:3e:86:c6:f4:af:9f:77:85:c5:4e:ef:4c:
3c:0a:95:3f:90:bb:e5:d9:cc:35:f9:7b:bb:6b:eb:5b:74:85:
61:de:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:01 2025 by rpki-client