
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209022.roa
File: AS209022.roa (raw, json)
Hash identifier: jvo7fUtnXNH9CTlyGmEh9EfQ8QpZJZlRDMDmICPHq/0=
Subject key identifier: 3B:60:E1:07:0B:9A:63:10:64:29:77:C8:CD:04:8B:F0:5A:75:7E:4A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7E4576DA0F709BF07B1B53F7C7079E0FF517CE14
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209022.roa
Signing time: Tue 11 Feb 2025 20:47:29 +0000
ROA not before: Tue 11 Feb 2025 20:42:29 +0000
ROA not after: Tue 10 Feb 2026 20:47:29 +0000
asID: 209022
IP address blocks: 185.121.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:45:76:da:0f:70:9b:f0:7b:1b:53:f7:c7:07:9e:0f:f5:17:ce:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 11 20:42:29 2025 GMT
Not After : Feb 10 20:47:29 2026 GMT
Subject: CN=3B60E1070B9A6310642977C8CD048BF05A757E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:57:a9:ab:4a:47:dc:de:14:35:26:62:dc:
9b:5e:80:2f:29:5b:8f:95:f2:f0:75:a1:36:fd:b7:
f9:ad:5f:bc:0e:c2:69:20:f7:64:c6:01:b8:27:9c:
86:65:b9:b9:1c:16:0e:10:1a:c0:55:ea:b6:de:b3:
d4:c4:da:a6:ff:c8:f2:3f:e4:ae:36:98:07:7c:23:
c2:83:e3:0b:58:45:25:e7:49:d0:2a:9d:51:12:e5:
06:77:70:4f:45:1b:8e:88:ae:ec:66:1b:88:2d:ec:
9e:94:53:f2:84:f5:c9:0b:85:c5:b7:15:07:9b:d3:
dc:8f:62:e9:d5:52:aa:ed:8a:cc:37:71:51:eb:be:
27:dc:63:cf:e5:7d:22:50:e1:79:03:53:84:5c:b1:
fc:d1:9e:0f:75:7a:7b:99:b3:0d:45:7d:ae:80:92:
8c:5d:5f:48:d9:77:f6:52:02:04:f9:d8:eb:d6:bb:
ec:61:71:4c:54:06:e0:1c:58:b4:b6:a4:5c:d3:93:
1b:70:91:f6:46:d0:0e:f7:b3:aa:ba:bd:51:4d:42:
62:f0:5a:44:84:c0:b6:55:0e:71:b3:2a:5e:2a:a1:
f0:fb:59:6a:dd:ce:d3:b1:4f:37:ab:1b:03:34:92:
bc:49:31:b1:fa:46:e7:91:36:ec:eb:ad:2e:fc:e7:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:E1:07:0B:9A:63:10:64:29:77:C8:CD:04:8B:F0:5A:75:7E:4A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.169.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6b:07:36:95:75:dc:de:19:01:48:96:14:e1:e0:1b:6f:a4:
8b:33:f6:d0:17:17:ee:dd:91:38:8e:62:cb:3c:20:7c:78:20:
fb:c8:ea:88:72:25:50:08:4c:46:63:d5:d7:f9:9a:4e:f0:df:
aa:92:b8:c6:a4:12:e2:1a:05:e6:82:bc:8d:fd:75:18:a0:3d:
a8:fc:b5:94:bf:53:c8:23:bd:c2:55:fb:46:a2:17:75:69:8e:
94:2c:cc:14:03:92:35:c6:bf:21:aa:0d:3e:8c:04:87:8d:ba:
4a:1d:67:f8:bf:79:3f:87:8b:14:ca:79:62:2c:b5:1d:af:48:
c4:f7:85:9b:22:a1:b7:3d:32:31:20:20:f3:af:f4:d4:dd:dd:
e4:38:84:66:18:d7:33:c5:95:d3:57:16:21:e3:14:be:4f:41:
6b:3d:ee:65:e3:51:f8:de:6d:4a:ae:de:b4:cc:be:a2:b3:8d:
02:89:f8:a8:68:ac:56:8a:68:76:aa:21:0a:d9:90:f2:df:91:
e5:ec:a5:b7:74:9e:0f:ec:51:a7:73:b8:13:3e:46:46:d3:b5:
24:d3:75:9e:26:88:85:23:69:23:19:96:43:92:66:0e:f3:56:
78:f8:4a:6a:98:fd:77:b3:cb:a5:10:22:9e:c3:53:88:84:e3:
77:22:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:55:41 2025 by rpki-client