Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
File: 323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier: l21M2v9CW09OTsPsok2VDG8aNVY8DcR+Ph1B2PtT5GI=
Subject key identifier: D1:47:83:BF:07:9D:BB:77:E8:D1:4F:49:E2:1D:E0:00:C0:54:74:75
Certificate issuer: /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial: 31BFF3EECF01EC8E384EF703E6C852AD3FDC3532
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access: rsync://rpki.co/repo/sky/1/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
Signing time: Mon 04 Nov 2024 20:23:42 +0000
ROA not before: Mon 04 Nov 2024 20:18:42 +0000
ROA not after: Mon 03 Nov 2025 20:23:42 +0000
asID: 10103
IP address blocks: 2607:74c0:130::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bf:f3:ee:cf:01:ec:8e:38:4e:f7:03:e6:c8:52:ad:3f:dc:35:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Validity
Not Before: Nov 4 20:18:42 2024 GMT
Not After : Nov 3 20:23:42 2025 GMT
Subject: CN=D14783BF079DBB77E8D14F49E21DE000C0547475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:fb:8d:26:42:5f:80:37:e0:f9:c5:f8:21:
ca:79:1b:e9:45:b2:9f:3f:43:68:5a:6b:4e:45:1d:
dd:90:25:9b:45:cc:95:b1:e0:25:bf:8b:53:b8:dc:
69:bf:df:1b:fc:6e:0e:00:a4:b3:39:24:24:dd:93:
e2:9f:cd:e3:41:5d:0a:21:99:30:ce:fa:d9:a3:e3:
2a:d9:ab:55:52:90:23:5c:48:d1:8b:2e:ad:35:b7:
c4:a1:d6:1b:1e:16:d7:1f:2c:ba:7e:90:9a:3f:b5:
08:71:40:18:25:db:3b:c4:24:52:5a:31:dc:6d:4b:
79:6e:e6:b9:01:98:98:81:af:2b:04:a1:11:44:a3:
b3:c3:ac:be:d0:f1:ee:ad:0d:21:8e:8c:89:f3:df:
4e:92:13:b0:15:e7:51:ab:aa:78:2f:8e:7e:96:e1:
c6:51:24:53:60:4c:ff:1f:04:ec:bf:2b:55:d0:d7:
6d:4c:fd:8e:fd:af:7c:82:02:65:69:91:35:74:bc:
6f:c8:14:30:93:c8:7b:74:41:46:d8:0e:d4:d8:93:
63:c7:b1:a1:e0:de:c7:c3:09:e1:79:0d:89:3d:7c:
f2:c6:d7:4e:47:31:ab:9a:3c:df:3b:ac:5e:9c:04:
af:d0:8f:8d:6c:32:e1:4a:9e:b0:45:ff:79:9f:cb:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:83:BF:07:9D:BB:77:E8:D1:4F:49:E2:1D:E0:00:C0:54:74:75
X509v3 Authority Key Identifier:
keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:74c0:130::/44
Signature Algorithm: sha256WithRSAEncryption
83:3a:30:53:08:07:2c:d7:dd:e3:a0:f4:38:70:9a:ee:6b:40:
19:40:d0:26:b4:97:85:20:83:93:fa:8f:88:c3:5e:dd:60:52:
55:e9:1e:db:f8:38:89:b4:d4:7e:8d:c3:71:00:88:b3:fd:9a:
38:21:04:11:63:3b:36:7d:b5:a8:bf:bf:44:6f:1f:a5:a1:94:
d6:88:6a:e9:9b:b1:86:f6:14:d6:13:a0:d7:c7:71:6b:5b:2e:
94:94:cd:46:34:85:96:0d:6d:49:8c:f8:64:c6:4a:e3:bf:8f:
05:38:a2:ab:b3:c2:f3:ff:c2:48:10:c8:17:97:10:d2:12:1f:
a3:73:de:33:ff:43:f4:d7:64:0f:7e:6a:f7:47:05:c5:6f:23:
e8:d4:bf:1f:45:e0:4b:38:b2:7d:10:69:7f:5f:00:4f:15:82:
17:b9:4f:fe:8c:ff:cb:24:50:92:55:50:58:75:20:d3:29:fc:
79:27:d4:dc:e6:b4:44:7d:af:f5:c8:4f:eb:f6:92:9e:e2:a4:
55:77:2e:58:ec:ed:60:6a:57:46:e9:e7:ad:d0:5a:cf:02:83:
36:d0:27:74:ce:41:f6:08:14:2a:c7:d7:69:e8:44:e4:59:2e:
d4:a7:22:f6:92:d0:d0:91:2b:3a:7a:72:33:b4:0d:5d:42:0b:
0b:78:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:07:11 2025 by rpki-client