Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa
File: 3137302e33392e3232342e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier: 1ndI3dQyzQdi0ltxelBySDs4T4iLZPIgBK+RdNgoBp4=
Subject key identifier: 0A:7B:D9:BB:B3:B1:65:89:48:DC:78:AE:B4:B8:F9:27:09:7F:FF:D2
Certificate issuer: /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial: 57CC9822C25223817763A4A503F3102D122B15DB
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa
Signing time: Sun 03 Nov 2024 22:30:22 +0000
ROA not before: Sun 03 Nov 2024 22:25:22 +0000
ROA not after: Sun 02 Nov 2025 22:30:22 +0000
asID: 57695
IP address blocks: 170.39.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:cc:98:22:c2:52:23:81:77:63:a4:a5:03:f3:10:2d:12:2b:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Validity
Not Before: Nov 3 22:25:22 2024 GMT
Not After : Nov 2 22:30:22 2025 GMT
Subject: CN=0A7BD9BBB3B1658948DC78AEB4B8F927097FFFD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:0d:83:c4:4e:eb:d7:5c:09:4e:59:83:82:
31:01:c4:8d:42:c4:ba:bd:24:f8:80:11:5d:c0:5b:
6d:78:26:48:75:26:59:cd:01:11:cf:87:3f:e8:6a:
7c:56:02:90:96:2d:dc:03:98:2c:6e:51:02:c9:b6:
80:9b:67:18:69:19:30:b4:42:8e:e6:8e:58:52:a6:
ef:5c:bb:9c:33:9e:83:af:16:ca:88:92:34:be:2b:
dc:c6:7c:2f:36:59:31:aa:e0:87:a1:fd:dd:38:bc:
19:39:ae:52:3c:1a:f3:2d:82:2a:b7:83:d1:0a:b7:
ed:79:d0:9d:dd:88:e6:71:54:30:a2:a3:e8:ea:e6:
18:1c:32:cb:38:ba:3a:d9:70:c6:a2:16:0d:1f:0a:
11:f1:2d:c5:26:13:21:fc:af:32:85:fc:12:10:4a:
3a:c7:ba:ff:87:2d:18:17:f3:da:01:d4:f1:01:d0:
30:bb:f8:bd:77:86:35:ec:16:52:d7:10:47:51:42:
f5:f2:3c:f1:f6:fe:dd:e6:ca:70:21:ef:cf:d9:04:
a6:fb:ec:6d:d9:dc:7b:e3:2a:41:19:25:af:1f:54:
7b:c5:74:e5:93:d1:b3:ca:4f:bd:57:28:8d:2a:b5:
cf:5f:9f:58:30:bb:f3:6f:77:f2:fe:fa:f1:ba:52:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:D9:BB:B3:B1:65:89:48:DC:78:AE:B4:B8:F9:27:09:7F:FF:D2
X509v3 Authority Key Identifier:
keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.39.224.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:e8:21:a2:7c:73:ea:5f:c6:1c:60:c0:07:e8:33:f7:86:11:
3c:63:7f:28:5c:9d:bf:f4:3b:a5:4a:0e:6f:5c:b2:75:71:5b:
82:50:dc:85:1c:4f:d7:ec:3c:be:62:a0:13:2f:a1:80:c8:32:
89:67:11:d9:dd:18:7c:ca:ab:b6:b4:4f:2b:7f:b9:21:ad:b0:
77:7e:c1:c8:77:ef:4b:2a:eb:47:21:d3:21:e3:d0:48:d3:9a:
b6:d7:63:96:cd:80:9b:f0:f7:58:a7:c0:bb:f8:98:9e:93:77:
72:92:0c:1c:df:6f:a3:f3:34:56:f0:1e:8a:28:9a:e3:74:67:
01:67:7f:b8:5e:26:1c:a9:ae:9b:d4:75:d7:c9:db:4d:95:32:
2e:5f:77:15:9b:5e:c6:74:07:50:39:14:c9:df:0c:4f:63:18:
15:6d:e7:8c:ae:ef:34:aa:c9:29:98:0b:34:f4:92:a0:27:b4:
5e:c8:ef:8b:fe:09:88:ec:79:74:6a:00:0e:c5:99:4d:45:d1:
69:04:fc:f8:5e:f9:19:66:85:17:df:a9:8c:33:25:ed:7f:1f:
18:3e:32:20:70:18:f6:57:a7:b7:38:d8:e8:ff:b5:0e:ac:db:
26:c9:06:da:63:be:3b:e6:bb:60:9c:4a:34:f3:1c:a1:1b:f0:
5c:72:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:53 2025 by rpki-client