Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: VedQQHaP4H4OFmT+zM3YOQCgL67HkR4SAIJjAaONki8=
Subject key identifier: 0F:C9:51:6E:7F:88:F0:57:35:3F:38:BE:89:26:0D:B6:9E:B7:43:DB
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2622F453A569F369CBAC834338401520CFC4DB6E
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 07 Dec 2024 13:13:28 +0000
ROA not before: Sat 07 Dec 2024 13:08:28 +0000
ROA not after: Sat 06 Dec 2025 13:13:28 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:61::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:22:f4:53:a5:69:f3:69:cb:ac:83:43:38:40:15:20:cf:c4:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 13:08:28 2024 GMT
Not After : Dec 6 13:13:28 2025 GMT
Subject: CN=0FC9516E7F88F057353F38BE89260DB69EB743DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:bd:0b:45:9f:fe:93:aa:83:0f:28:b6:3f:
13:42:82:dd:54:45:7a:31:31:ca:35:3d:6f:97:ac:
80:8a:55:12:84:15:42:d0:89:b8:15:c2:9c:af:d8:
0b:3e:80:1f:33:ad:20:c6:37:0f:9c:14:45:a1:ef:
20:5c:42:10:21:f5:ba:ad:16:4d:b9:33:92:93:6f:
39:f6:e1:80:d0:aa:f2:c2:dc:db:af:99:ac:75:f7:
09:93:bd:71:d4:50:cc:82:fd:a3:2b:69:d8:11:43:
3f:f3:7f:47:ff:89:70:7f:4c:5b:52:c0:8e:10:0f:
fd:f3:3f:25:8b:1e:ae:c9:22:db:75:bf:f7:61:ab:
6d:1a:63:fb:97:fe:c1:97:91:3e:85:3a:54:f0:d0:
00:9b:c9:6c:65:3e:f7:f9:e9:f8:f8:16:33:dc:16:
b9:0c:30:0c:30:1e:64:9c:1e:6a:b8:5c:bc:66:cb:
39:16:06:36:ca:12:a2:96:c8:49:fc:30:67:91:bf:
ec:91:40:24:4a:24:e8:72:67:52:ad:6b:c6:00:9c:
d4:06:62:89:8b:85:61:19:e1:47:c5:f4:f3:87:bb:
8e:d0:d8:62:3e:2c:fc:9b:86:e7:a9:9e:8d:35:cb:
11:a6:9d:27:51:0d:39:ab:89:49:8d:5c:a5:23:a2:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:51:6E:7F:88:F0:57:35:3F:38:BE:89:26:0D:B6:9E:B7:43:DB
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:61::/64
Signature Algorithm: sha256WithRSAEncryption
85:e7:e8:a2:5d:6d:83:df:e7:4c:a2:b4:bf:15:9e:23:86:17:
6e:da:e2:d9:7f:e7:57:33:7c:cd:3a:a8:00:13:90:e3:35:6e:
e4:88:4f:50:b7:16:be:8f:fe:31:12:c3:fb:ef:08:23:da:3c:
18:d1:15:82:18:53:f1:80:1d:60:cc:65:02:d6:f4:5d:b7:2d:
62:6c:8f:4b:85:ea:b0:93:6d:2a:fb:47:6e:49:e8:69:2c:8a:
19:ee:b1:df:3a:b8:d5:ff:d8:5d:b7:3c:af:ec:cb:12:ba:20:
a0:c1:42:d6:d0:b9:d8:8f:15:52:5a:03:2d:81:80:1e:ee:96:
c8:a4:3f:53:03:d0:9c:7d:9d:5b:09:e2:cb:a2:c0:c4:39:6f:
92:34:13:7b:2b:8e:38:ac:73:91:46:6a:ac:2c:2d:d6:45:e5:
1a:10:f4:62:ca:d7:d0:63:01:7f:cc:68:0d:9f:5d:c5:f9:fb:
d3:69:2b:b8:51:10:fc:3d:b9:cd:46:ef:d3:5d:eb:3a:0e:61:
4d:14:dd:b3:41:a7:6a:76:4b:fb:0d:3f:95:0e:1a:03:44:a8:
64:72:4b:65:58:6c:bd:59:60:95:0f:67:81:1e:63:75:cf:fa:
cd:85:20:f0:88:51:58:34:4e:6e:36:14:08:98:22:40:47:97:
f8:ac:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:41:40 2025 by rpki-client