Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
File: AS212995.roa (raw, json)
Hash identifier: WyFnvQwqX8F/GpajaWv+OhNd0IJvTZg2HJ8UsOCH5mo=
Subject key identifier: DB:91:29:4B:7A:FF:53:53:6A:38:4C:6D:E5:B3:90:FA:64:29:FB:BD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 225D0FD35CA269B0464EC94C3C3414AD4D2F80EE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
Signing time: Fri 13 Dec 2024 02:56:29 +0000
ROA not before: Fri 13 Dec 2024 02:51:29 +0000
ROA not after: Fri 12 Dec 2025 02:56:29 +0000
asID: 212995
IP address blocks: 2a06:a005:4a0::/44 maxlen: 48
2a06:a005:cd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5d:0f:d3:5c:a2:69:b0:46:4e:c9:4c:3c:34:14:ad:4d:2f:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:29 2024 GMT
Not After : Dec 12 02:56:29 2025 GMT
Subject: CN=DB91294B7AFF53536A384C6DE5B390FA6429FBBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:1d:57:ae:a5:6a:f0:2b:d4:46:2f:26:02:
25:3e:d2:a6:e0:ca:3c:f5:a5:ea:f2:f0:f4:77:9a:
32:92:00:e2:80:f1:24:5f:ec:87:ef:be:fb:08:0e:
34:98:f5:05:aa:a8:8c:9e:ad:6a:e8:f2:91:c9:d5:
52:76:68:bb:90:6c:06:e0:52:12:e5:6f:a6:85:8c:
40:84:67:29:88:7c:60:80:06:f4:1d:1d:97:8a:a7:
9b:3d:76:2d:89:d6:22:ea:bd:34:9f:4d:e3:58:73:
a7:e0:63:5d:f5:e5:88:ea:d6:7e:ed:0a:a8:5f:ab:
7b:58:ae:73:47:21:ef:17:c9:09:d5:a5:74:1c:d7:
5a:98:23:62:02:a8:8e:20:f8:dd:ef:b9:d8:0d:6d:
26:f5:8f:30:a8:5e:38:33:89:b7:e4:07:f0:41:e4:
d8:dd:fb:d8:c3:69:17:41:98:e7:dd:5d:bf:52:0f:
62:43:d1:3f:dd:c7:79:06:a3:db:1b:49:46:d3:e7:
f4:09:0c:92:ef:d5:3d:43:88:14:0b:1f:3e:9b:3e:
28:8f:c2:c3:71:c4:1e:72:71:db:7d:a5:1f:58:e2:
36:58:5c:5f:a6:62:e4:41:51:54:32:a2:29:7f:d9:
f3:61:6d:a1:7e:c2:2c:08:09:94:2e:d4:99:8a:b8:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:91:29:4B:7A:FF:53:53:6A:38:4C:6D:E5:B3:90:FA:64:29:FB:BD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4a0::/44
2a06:a005:cd0::/44
Signature Algorithm: sha256WithRSAEncryption
6d:e5:df:33:45:9b:25:d7:9e:4e:a3:3d:67:a0:ee:ff:f6:68:
af:3c:51:d7:6f:80:27:e5:81:4c:88:ec:7a:df:a0:ed:bb:1d:
52:36:73:90:92:b1:f7:9a:c7:4b:ad:b1:da:26:d7:f5:2a:86:
53:f5:1b:cb:e8:cd:54:f2:47:c4:30:0a:a1:5e:dd:68:14:22:
48:cb:79:f1:73:96:09:86:53:74:d2:52:29:33:05:41:1e:d1:
d8:0f:1b:4d:b9:3d:25:e2:bd:e5:1a:d4:90:7a:2a:c9:f8:e6:
22:de:66:bc:44:3c:87:da:84:bd:4c:6a:3d:1b:db:87:49:26:
c0:47:77:c8:5e:b9:37:90:c6:14:68:16:91:c6:87:ba:78:87:
c2:b7:89:b8:65:25:ee:7c:84:9a:41:71:eb:d0:b4:85:4b:16:
dd:bb:14:1b:2d:5d:97:03:86:29:ac:39:3b:b0:3a:1b:72:7d:
74:2d:a8:65:5d:30:ed:ec:7c:94:25:48:7e:54:b8:df:fb:99:
7e:16:f0:fd:50:dc:fa:32:c2:b1:3e:5a:5d:2b:19:eb:57:a2:
22:9b:0d:a1:89:a0:b9:95:d1:d5:b1:c2:b6:42:e5:05:d3:8e:
5d:4c:70:da:e4:31:9a:31:89:ef:d2:40:2c:fa:5e:55:7d:88:
01:cd:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:23 2025 by rpki-client