Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a38393a3a2f34382d3438203d3e203437303635.roa
File: 323630323a663833643a38393a3a2f34382d3438203d3e203437303635.roa (raw, json)
Hash identifier: 9PWAd2bYL0yEA/4v+5Qx0KVxGYpLydzuoLnumBG11tw=
Subject key identifier: 93:79:0E:DF:BE:C5:1A:54:01:E9:E4:EC:89:AD:70:A4:A0:AD:5E:9A
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 2388848470354E087526E5D593A74B3C00DC3856
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a38393a3a2f34382d3438203d3e203437303635.roa
Signing time: Mon 30 Dec 2024 01:01:37 +0000
ROA not before: Mon 30 Dec 2024 00:56:37 +0000
ROA not after: Mon 29 Dec 2025 01:01:37 +0000
asID: 47065
IP address blocks: 2602:f83d:89::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:88:84:84:70:35:4e:08:75:26:e5:d5:93:a7:4b:3c:00:dc:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Dec 30 00:56:37 2024 GMT
Not After : Dec 29 01:01:37 2025 GMT
Subject: CN=93790EDFBEC51A5401E9E4EC89AD70A4A0AD5E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4f:72:0f:5c:1b:f9:53:cb:82:85:9a:70:60:
35:c5:2f:19:90:cf:ef:77:20:36:9e:3b:59:49:b9:
16:14:b4:46:a1:30:58:99:23:c2:1d:81:e1:8c:3c:
92:37:2a:2a:2f:3e:ec:c9:78:00:5e:24:4e:6c:29:
68:8d:56:fc:d0:80:2b:2c:eb:e6:14:2c:e6:46:18:
73:1b:e7:61:52:a2:65:ad:aa:76:12:bd:32:af:d1:
a4:cf:8f:ee:80:df:43:ad:be:cc:e7:36:2b:20:fc:
b2:5c:c0:c8:a8:a5:43:e4:42:8b:83:ed:6b:df:a8:
b7:0b:a3:13:a3:48:a7:0b:ed:0a:87:1b:48:96:80:
16:6c:e8:b3:20:cd:f3:cf:30:75:4d:5d:2d:ba:a4:
28:e3:d9:7c:d0:84:c8:be:9a:63:18:d2:54:87:de:
27:1b:65:7d:88:18:5d:bf:52:d5:fa:d8:a5:b5:25:
7a:3d:05:bd:9d:ec:5d:4d:3c:a6:a8:b7:64:14:be:
bf:41:ec:60:15:56:83:84:88:34:38:95:7d:06:b1:
df:2d:48:ac:a5:e1:d6:f1:0d:27:50:aa:fc:66:71:
73:e3:40:03:39:99:86:28:a7:8f:8f:75:7c:89:54:
e2:9d:34:e7:cd:29:87:b2:06:2b:3e:be:83:c1:6a:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:0E:DF:BE:C5:1A:54:01:E9:E4:EC:89:AD:70:A4:A0:AD:5E:9A
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a38393a3a2f34382d3438203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d:89::/48
Signature Algorithm: sha256WithRSAEncryption
09:a0:0e:45:35:f4:69:0f:e9:ee:47:10:45:ed:94:74:5e:e3:
26:22:13:7a:ef:e6:e7:00:d6:aa:73:2e:d4:7a:f9:59:e4:93:
72:1a:fe:d8:23:aa:79:2b:25:6c:d6:54:40:6a:35:b4:5a:5d:
8f:04:49:17:aa:6f:62:55:37:9f:36:9b:29:d2:60:c5:4a:7d:
c5:21:4b:fc:9f:90:f8:cc:86:d7:7e:7b:7e:0a:de:0b:08:7a:
cc:59:0e:64:e7:c2:c1:71:9e:c7:48:d3:69:54:16:5a:4e:75:
c9:eb:5e:87:b0:81:cd:a8:42:3f:d3:35:1b:a1:af:6a:0e:54:
96:c1:e1:81:b4:8f:3c:b5:cd:46:a4:8b:c3:76:b9:cc:f1:6b:
00:79:d9:51:0d:f2:26:2f:0e:29:de:41:34:c4:5f:47:43:08:
f0:02:3c:c2:62:f2:84:11:9b:bd:dd:a8:dd:63:5d:95:dd:db:
b7:60:29:ff:78:1f:3c:52:54:7e:b9:88:89:8b:a8:f5:39:70:
f1:49:37:8f:13:67:14:46:38:ca:d9:01:8b:c8:6b:df:47:5d:
c3:27:75:c7:eb:60:fb:9a:c8:18:9d:78:18:95:4f:94:82:9f:
0e:11:e4:54:b9:cd:04:d8:27:76:7c:3e:30:ec:c5:6e:bf:39:
cf:79:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:51:37 2025 by rpki-client