Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS59678.roa
File: AS59678.roa (raw, json)
Hash identifier: Z3fSWH53XIP0Qw/OnwaIt0Wi9C4ozGtvgHMP8iKCMac=
Subject key identifier: 5D:A5:6E:20:60:C6:02:FF:08:FC:9B:59:71:3D:B8:20:90:C2:F1:B7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 10644B5A21E19715D5B88EB013EDC42F0CB57E1F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS59678.roa
Signing time: Thu 28 Nov 2024 16:40:12 +0000
ROA not before: Thu 28 Nov 2024 16:35:12 +0000
ROA not after: Thu 27 Nov 2025 16:40:12 +0000
asID: 59678
IP address blocks: 2a06:a005:2c60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:64:4b:5a:21:e1:97:15:d5:b8:8e:b0:13:ed:c4:2f:0c:b5:7e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 28 16:35:12 2024 GMT
Not After : Nov 27 16:40:12 2025 GMT
Subject: CN=5DA56E2060C602FF08FC9B59713DB82090C2F1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:f6:b4:3a:6f:a8:67:d1:4f:15:f0:29:b3:
7b:db:a0:4e:19:26:1a:3c:0a:38:ec:3f:b2:c9:77:
ad:8f:dc:3b:93:c4:b9:7b:a0:31:2d:51:1b:0e:09:
46:c4:28:96:2f:2c:18:bb:0a:2c:4d:42:d0:91:11:
06:c2:73:ee:13:1b:9b:24:71:b2:75:e1:20:fb:6d:
8c:48:12:de:ca:15:32:5f:45:36:8f:fd:53:18:17:
a9:aa:ec:79:6b:53:cd:6c:8f:35:b2:d7:3b:a7:d9:
34:42:f6:86:f4:d9:aa:1e:b3:d1:52:10:56:f6:1f:
43:f4:97:c8:b3:c5:dd:23:b0:c8:2d:1c:fa:95:1e:
89:55:31:72:12:94:57:62:28:be:d0:bb:99:0a:7f:
08:52:ae:4e:c8:be:9a:ad:3b:2b:bf:9e:10:ba:34:
0b:3f:53:14:8c:9a:54:10:c7:91:58:17:16:66:7b:
bb:87:24:bb:05:d6:d9:e4:5d:d2:8b:11:ee:51:42:
2d:6c:ef:89:47:11:b3:af:01:c8:79:42:30:72:37:
c0:2c:02:20:69:d6:f4:8c:aa:1b:8e:3f:5b:60:69:
46:e0:82:13:36:d7:96:e7:63:b1:11:fd:f7:db:13:
23:b9:6f:a0:3a:1a:ce:ff:e3:99:fb:61:70:ed:9c:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A5:6E:20:60:C6:02:FF:08:FC:9B:59:71:3D:B8:20:90:C2:F1:B7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS59678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c60::/44
Signature Algorithm: sha256WithRSAEncryption
77:f9:d8:06:1d:61:38:92:2c:58:3f:10:10:9d:fd:3f:e3:c2:
9b:6b:92:4d:94:0c:0b:84:af:66:28:ca:95:a2:3a:98:0d:b9:
cc:60:41:7c:cc:72:78:39:9c:af:db:1f:61:85:6c:52:07:00:
6f:64:78:7f:f4:ca:99:46:9a:f5:e0:3d:be:6c:b7:be:8e:09:
d8:ab:21:39:90:3f:45:00:80:a0:85:f8:50:77:fd:e5:11:54:
bc:83:d7:9f:9f:41:b4:5a:ed:ad:70:84:19:ff:15:d4:fb:16:
91:cf:64:d1:61:99:66:ec:06:4c:85:2b:fd:7d:e8:1d:4a:4d:
04:0c:f2:a2:5f:7e:cd:be:b4:c0:77:81:03:23:c5:98:71:8a:
82:e0:9b:44:f4:ca:f7:7a:39:0f:35:ba:0d:70:7d:a9:7e:9a:
c7:48:ba:61:dd:c9:c2:b7:55:98:82:b2:49:55:0f:0b:4d:c3:
d4:1e:2f:31:c4:53:ad:d2:d9:38:c0:5a:f0:83:0a:19:95:7b:
24:e8:dc:38:dd:21:81:20:93:47:ff:f0:be:61:cd:7c:44:ed:
64:69:a7:ff:7a:1f:d5:be:99:a0:4d:96:25:20:a0:94:50:15:
d1:05:df:eb:17:59:31:61:3d:ad:53:8e:ed:40:e0:72:11:eb:
8d:7e:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:06:14 2025 by rpki-client