Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203437303635.roa
File: 323630323a663833643a3a2f34302d3438203d3e203437303635.roa (raw, json)
Hash identifier: NiUXZScRxAZ11NIlQLnmg+uIJREnEfA5/TQI8O5FNg0=
Subject key identifier: DB:5B:B6:EF:D3:31:5B:26:32:A2:C9:A9:16:F6:C8:28:39:03:56:CF
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 04E558458A2CDCBD27188C71B06E51067D33E63C
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203437303635.roa
Signing time: Tue 07 Jan 2025 04:22:05 +0000
ROA not before: Tue 07 Jan 2025 04:17:05 +0000
ROA not after: Tue 06 Jan 2026 04:22:05 +0000
asID: 47065
IP address blocks: 2602:f83d::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e5:58:45:8a:2c:dc:bd:27:18:8c:71:b0:6e:51:06:7d:33:e6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Jan 7 04:17:05 2025 GMT
Not After : Jan 6 04:22:05 2026 GMT
Subject: CN=DB5BB6EFD3315B2632A2C9A916F6C828390356CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:00:84:23:be:02:6a:5a:c0:f4:38:79:2b:
1d:e1:c7:4a:8e:eb:44:fb:e8:a3:ed:1e:4f:8d:8e:
dd:62:1a:d2:6a:05:7a:c3:9d:47:aa:2b:0e:6e:ce:
8e:97:03:78:3b:b9:68:60:f5:da:fa:55:29:22:1c:
b5:42:e2:39:d6:50:3b:6e:59:cb:9a:74:81:92:3f:
6e:2c:7d:88:54:f4:3f:b5:93:65:dd:d5:b5:70:b5:
26:82:2b:f9:3f:1f:d5:2b:79:40:e8:26:4f:2e:c2:
e4:93:1e:5b:64:e1:d6:87:bf:08:8d:88:5c:62:92:
00:b8:ff:d9:22:ca:fc:eb:37:9b:e2:d4:71:13:a7:
68:0b:e3:ee:07:32:e6:37:d1:a7:70:68:2c:4c:1f:
26:a3:44:9d:39:45:fe:b7:7d:6e:a2:86:7d:84:59:
06:50:1e:bc:8b:31:86:01:5d:88:03:76:b5:f2:2a:
af:36:0f:86:bb:ad:ac:f3:29:fe:17:45:90:41:5b:
f1:a9:0c:40:7a:b1:cf:e1:57:2d:27:5e:63:d8:24:
96:54:95:4c:be:33:88:c1:5a:0a:48:25:d6:85:43:
a0:75:88:12:63:00:73:3f:95:13:7d:48:0c:4b:0c:
c1:8e:e5:a3:31:fe:74:69:fa:57:5a:f2:46:d9:fe:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5B:B6:EF:D3:31:5B:26:32:A2:C9:A9:16:F6:C8:28:39:03:56:CF
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/40
Signature Algorithm: sha256WithRSAEncryption
5f:a2:b8:83:2d:5d:74:9c:d4:06:6e:5d:a6:76:a5:ad:47:46:
42:4e:2e:f8:c2:93:0f:f9:04:88:0d:b7:42:0c:30:5e:4b:d2:
97:86:d7:c9:33:58:99:1e:cb:76:6b:23:be:39:c4:63:cf:a9:
f1:a2:0c:0b:38:2f:7b:19:5f:41:b6:7e:88:60:4a:7e:28:aa:
8f:79:49:db:2b:e2:5b:6a:0a:3c:98:03:9a:18:d1:b3:86:94:
56:70:d5:0e:28:e8:db:8c:df:99:e1:02:1b:ff:3f:f8:ea:30:
1e:fb:20:32:1a:c7:2c:fd:65:e1:9e:21:64:e7:7d:ed:f4:e3:
62:25:fc:fa:1e:c4:01:ee:75:26:46:f8:cd:3c:ae:66:f7:bb:
d3:02:a8:a2:82:4b:e3:26:4e:9e:2e:33:bc:08:ad:50:8a:ac:
2b:9c:b7:96:42:e9:9c:0d:76:ca:9f:d9:3f:a6:c2:d3:9f:5d:
f1:92:ee:67:fc:fd:e5:53:fa:38:14:fa:ac:3a:a5:01:39:ce:
d3:10:68:79:a5:cb:83:eb:44:18:cb:99:2a:1d:cc:1e:07:79:
b0:d2:05:dc:74:21:3f:de:40:10:7b:bd:9a:3f:f1:9e:b6:5b:
a1:e5:c9:f3:7f:b8:57:1d:19:91:13:e5:f1:ba:26:1f:fa:1b:
7b:61:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:46:44 2025 by rpki-client