Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS43260.roa
File: AS43260.roa (raw, json)
Hash identifier: +epNKOSz3qd6eluSzAAEQnMa0XM2HSIn3n5FXPyiaL0=
Subject key identifier: 2E:4F:35:B8:D8:11:F9:01:7A:8B:51:43:09:7B:6C:BF:2D:B9:3F:E3
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 152D0AE879DA5CC2656DBA5128EB5742C813D7B0
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS43260.roa
Signing time: Mon 28 Nov 2022 09:41:22 +0000
ROA not before: Mon 28 Nov 2022 09:36:22 +0000
ROA not after: Mon 27 Nov 2023 09:41:22 +0000
asID: 43260
IP address blocks: 216.122.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2d:0a:e8:79:da:5c:c2:65:6d:ba:51:28:eb:57:42:c8:13:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:22 2022 GMT
Not After : Nov 27 09:41:22 2023 GMT
Subject: CN=2E4F35B8D811F9017A8B5143097B6CBF2DB93FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:3b:83:08:5b:84:28:fa:d1:16:e7:ac:dc:
5d:4a:54:70:69:27:b2:53:1b:72:e7:b4:b0:b0:96:
1b:ab:65:48:2e:fb:89:9a:37:f8:15:17:8e:04:b5:
c2:d5:0c:36:11:4f:88:bd:27:2f:e3:47:78:d6:d7:
09:18:61:5f:66:45:ef:8a:31:17:d4:a9:06:1c:9c:
52:9f:bd:fa:41:3f:3c:61:7c:c3:fb:b4:bf:8c:dd:
4b:09:13:66:0f:a4:83:2b:41:3d:82:39:b4:56:ab:
1e:99:bc:2e:80:e2:32:af:70:fd:63:64:44:44:45:
e6:7f:7b:e2:b0:27:98:11:a6:b5:52:94:0b:aa:fe:
c6:3a:88:d1:c2:4f:40:0c:77:7f:15:fc:dc:38:78:
f7:dc:df:3e:52:84:04:e2:db:96:ff:de:62:9b:06:
86:43:ac:46:ca:d2:25:63:ae:4f:44:ad:1d:22:72:
4c:ed:e9:af:e3:d3:a9:dc:14:60:11:c7:c9:db:bb:
ca:82:9f:d2:b8:d6:b4:6a:ad:d7:1c:db:65:09:bc:
e9:d7:cd:01:50:80:13:34:9d:f3:cc:75:14:45:df:
2c:0e:86:9c:5b:43:3b:06:90:ab:0d:eb:23:a4:93:
09:5b:9a:dc:c9:c0:83:ce:86:a9:73:f5:b6:82:8e:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4F:35:B8:D8:11:F9:01:7A:8B:51:43:09:7B:6C:BF:2D:B9:3F:E3
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS43260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:01:b1:54:dc:f5:df:09:ac:0f:19:02:a6:87:38:6e:be:95:
65:86:3d:1e:6e:90:f8:d6:81:79:9a:70:4b:98:fe:a4:f6:70:
de:7b:16:b6:67:bf:5a:4d:5b:43:c3:d2:21:8a:5b:71:dc:ef:
52:64:e7:c1:a7:ed:cc:05:fc:18:57:9b:de:b3:14:ce:17:d7:
80:88:b7:8a:36:8e:10:30:19:82:3e:5f:22:f4:6b:3e:31:9f:
63:76:a9:9a:f6:91:7c:fd:52:1f:76:c9:b9:82:6a:c3:7b:f5:
de:75:4a:7a:c4:72:d4:1e:74:26:6a:17:71:89:39:74:9c:1f:
70:06:72:f8:8c:f3:67:3d:53:8c:10:fe:15:de:48:08:03:9f:
ce:9c:0c:42:fa:b4:63:51:5d:e6:b2:60:06:1e:fb:9f:a2:62:
1c:17:b9:fc:09:12:2f:0a:b4:b0:f1:39:bb:9f:66:ee:29:1f:
99:f2:9d:e3:73:b4:a0:82:17:ed:5e:a1:0b:28:11:59:bd:6d:
d2:98:6d:d4:d4:4c:89:17:bc:95:a9:be:04:21:44:56:25:f3:
68:3e:66:d0:af:63:3c:9f:95:78:57:e2:6b:58:16:d9:40:86:
c0:4b:a7:de:b9:f4:05:74:3b:7c:d8:be:cd:2d:b1:03:94:ee:
95:cc:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org