Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3434203d3e203133353237.roa
File: 323630323a663833643a3a2f34342d3434203d3e203133353237.roa (raw, json)
Hash identifier: lrX4+nGu1oWyiGobg3p1SRcyBMcNi9Qq5sx/3naxVqM=
Subject key identifier: E5:FF:3B:6C:A6:B1:14:FE:FE:F5:92:D5:FF:CF:93:A4:55:41:2C:07
Certificate issuer: /CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
Certificate serial: 60E0AC5998BBAD8FB0C1E0A5AD72804C3AF6BAD5
Authority key identifier: 98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3434203d3e203133353237.roa
Signing time: Tue 08 Oct 2024 18:49:11 +0000
ROA not before: Tue 08 Oct 2024 18:44:11 +0000
ROA not after: Tue 07 Oct 2025 18:49:11 +0000
asID: 13527
IP address blocks: 2602:f83d::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e0:ac:59:98:bb:ad:8f:b0:c1:e0:a5:ad:72:80:4c:3a:f6:ba:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
Validity
Not Before: Oct 8 18:44:11 2024 GMT
Not After : Oct 7 18:49:11 2025 GMT
Subject: CN=E5FF3B6CA6B114FEFEF592D5FFCF93A455412C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:86:8c:bc:a7:a6:03:b2:cd:54:e0:92:b3:
4e:27:a1:68:38:fb:d8:7d:14:37:8c:3d:64:8b:5b:
b8:b6:31:dc:55:6a:2f:3c:00:b3:c7:13:10:8a:3a:
4a:60:ad:0d:40:de:88:af:e5:99:3b:de:4f:08:f8:
22:92:86:3d:5d:93:ab:11:c7:c4:34:db:93:2c:85:
dd:19:a8:39:5a:53:0f:b9:7b:6b:31:7c:6a:24:7b:
25:9c:84:48:1c:45:a7:45:4c:41:6a:71:ed:b0:2f:
55:97:58:e6:be:5b:aa:8c:a1:6e:01:20:03:cb:59:
f6:29:a1:39:5f:15:fd:75:50:5d:d8:12:05:9f:a9:
40:be:5d:ae:02:0c:53:fe:09:89:03:7c:15:60:84:
79:4e:c5:2a:5b:46:e9:06:85:cb:5b:ba:98:b0:b1:
de:45:b3:90:50:53:6d:a4:df:96:33:e7:d0:0d:0f:
80:78:7f:15:b2:84:b2:7e:08:52:ec:b5:67:01:16:
c0:6a:be:04:28:03:69:d2:d2:08:6b:8c:b1:6b:6b:
98:47:42:c1:b4:99:01:59:7d:4a:00:9a:2f:eb:55:
e2:b3:32:5e:bc:9d:06:27:68:ed:02:4e:a6:17:43:
74:43:aa:45:78:94:7f:4e:a4:a6:d3:22:8d:e9:7c:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FF:3B:6C:A6:B1:14:FE:FE:F5:92:D5:FF:CF:93:A4:55:41:2C:07
X509v3 Authority Key Identifier:
keyid:98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/9875187C51B208933491438282FA25A7B3F5ABDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3434203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/44
Signature Algorithm: sha256WithRSAEncryption
4d:1f:52:42:74:e2:38:aa:a0:13:44:0b:84:93:7b:00:29:42:
21:ba:0b:8b:9d:7c:ec:ef:25:e8:be:fa:68:5b:da:ea:e5:2c:
b4:2f:05:39:03:9c:12:43:57:2e:f3:91:81:3a:83:d5:77:f3:
01:4c:bc:c0:36:bd:73:dd:8e:eb:3a:1c:8b:37:8a:09:06:29:
a3:d9:25:ee:b7:ff:17:26:97:66:22:84:d5:bb:70:24:40:4f:
81:e8:a6:a7:cb:f4:9f:44:8d:4f:86:b9:92:82:51:8b:34:92:
48:8b:29:67:c6:95:ee:a1:81:36:51:92:13:32:6b:d8:49:e7:
de:25:6a:9e:3b:09:ec:d7:ff:0e:40:79:17:ac:a2:80:07:7b:
d6:1a:ae:30:dd:7f:b3:33:42:ef:d4:b8:ef:b3:31:d1:f2:52:
82:ca:d0:f5:76:e1:47:81:50:36:d2:86:9d:8c:dc:0f:3e:cc:
e9:a0:1a:95:49:c0:5a:a3:5b:7f:b7:72:ac:53:dc:45:72:90:
74:dc:d2:33:ca:a3:03:81:68:51:c5:34:82:bf:a8:3d:18:4d:
86:7b:09:29:ae:88:f6:19:d2:e5:a5:a4:10:73:76:b5:1c:a2:
bf:fc:9c:85:0f:ee:25:08:83:14:48:2f:c6:be:02:e8:bf:60:
fc:b2:06:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 09:06:30 2024 by rpki-client on console-ams.rpki-client.org