Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203134363138.roa
File: 323630323a663833643a3a2f34302d3438203d3e203134363138.roa (raw, json)
Hash identifier: pVQqsoKHPx9IVf4EotId31Qyg0Gklq8fGKyp5kwCdr0=
Subject key identifier: CD:88:55:4F:5D:25:3F:FF:48:41:64:69:DD:33:AC:AC:F8:2E:C4:0A
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 67A7EB268704BF29AAF0585A266F75F06953075C
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203134363138.roa
Signing time: Mon 23 Dec 2024 15:39:31 +0000
ROA not before: Mon 23 Dec 2024 15:34:31 +0000
ROA not after: Mon 22 Dec 2025 15:39:31 +0000
asID: 14618
IP address blocks: 2602:f83d::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a7:eb:26:87:04:bf:29:aa:f0:58:5a:26:6f:75:f0:69:53:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Dec 23 15:34:31 2024 GMT
Not After : Dec 22 15:39:31 2025 GMT
Subject: CN=CD88554F5D253FFF48416469DD33ACACF82EC40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:8b:a1:72:09:e8:3b:a3:7d:e3:c1:17:92:
80:d2:61:92:80:a8:79:84:36:95:77:da:68:44:b8:
76:82:af:f2:5b:ab:2c:27:cc:3e:b2:5a:f4:0b:ab:
08:93:95:64:29:8d:a1:f1:42:bb:6f:05:96:ba:71:
63:b4:74:47:f1:5b:ff:5a:b1:db:57:bd:4f:1b:c5:
bb:d6:9e:3a:fb:69:29:66:d5:ef:c9:a2:b1:3a:46:
cf:c0:a3:80:9d:a3:56:ac:7e:b2:d4:70:9e:2a:b4:
97:a3:27:85:47:13:94:4e:65:11:c6:44:6b:9d:89:
e6:dc:50:d4:b4:8c:c5:72:63:ce:63:a0:6b:4a:9c:
82:7e:4b:ec:72:b6:7e:a9:f8:60:67:13:50:e1:2c:
96:7b:0e:3a:12:56:e4:91:64:b4:a8:d2:ab:74:f2:
d1:39:86:76:80:92:74:c5:86:69:ff:57:43:81:c7:
81:ce:4a:b5:11:0f:f7:7a:c2:14:e2:b1:2a:49:60:
32:ec:75:70:f1:64:22:69:c3:93:ea:b6:2e:b9:83:
47:67:bf:30:60:47:99:59:df:8e:a3:19:15:db:6c:
29:8b:83:77:43:b6:63:91:60:58:da:dc:b4:0a:46:
2b:ea:9e:f2:11:75:48:24:a4:3f:70:4e:14:e5:f9:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:55:4F:5D:25:3F:FF:48:41:64:69:DD:33:AC:AC:F8:2E:C4:0A
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/40
Signature Algorithm: sha256WithRSAEncryption
93:de:f8:c6:9c:7a:d2:1d:bb:8e:0b:a0:23:03:71:27:7a:2f:
cb:ac:13:d7:53:43:01:d8:36:2f:e7:68:f1:ff:bf:42:06:56:
13:24:24:4d:ef:2d:85:01:e2:22:b7:44:a4:55:3f:2b:c9:f7:
8c:fa:25:6d:75:1f:50:f7:55:f7:5e:55:fc:55:ce:21:c7:3b:
88:2b:c7:aa:1a:69:75:76:21:fb:5e:88:89:a9:cf:b6:89:e8:
37:f8:4e:02:20:ed:2b:b4:24:37:9e:bc:24:f9:dd:8f:b2:27:
c5:cf:99:15:6b:30:f5:71:dc:b0:bb:86:55:ea:43:e4:f4:52:
f4:5a:94:0d:d6:c6:90:75:71:02:21:82:d3:3c:12:c5:ca:dd:
df:d6:e2:68:ee:20:85:bc:3d:92:3b:d6:b0:c4:09:97:dd:7b:
27:38:67:6f:b2:4d:0d:2f:c5:f6:2c:2f:ab:de:10:3a:5d:fe:
59:b4:89:23:50:01:2f:7f:80:4d:2c:0c:eb:29:c6:e7:35:da:
83:6c:96:41:bb:fa:50:0f:12:64:dd:f8:91:1e:a4:b5:91:eb:
87:ed:0e:a7:fa:e6:2e:fd:d4:72:38:bd:0f:15:9e:68:15:18:
75:34:7e:94:74:c7:e4:e5:a6:dd:c5:93:9e:92:99:fd:09:4c:
e7:87:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:41:57 2025 by rpki-client