Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa
File: 323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa (raw, json)
Hash identifier: YktAMYDaizOrhtIbi6FyqR8pq1ZJ31Jt5TXz4Dzt+hc=
Subject key identifier: 94:1F:13:DC:49:61:AE:66:90:84:67:7F:C9:BB:01:A6:D3:9C:30:6B
Certificate issuer: /CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Certificate serial: 60DBB20C95EAD942CAB0BB7C8A57801D6BCACFFF
Authority key identifier: AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject info access: rsync://rpki.co/repo/AS945/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa
Signing time: Sat 01 Jun 2024 18:51:15 +0000
ROA not before: Sat 01 Jun 2024 18:46:15 +0000
ROA not after: Sat 31 May 2025 18:51:15 +0000
asID: 50058
IP address blocks: 2601:1d08:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:db:b2:0c:95:ea:d9:42:ca:b0:bb:7c:8a:57:80:1d:6b:ca:cf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Validity
Not Before: Jun 1 18:46:15 2024 GMT
Not After : May 31 18:51:15 2025 GMT
Subject: CN=941F13DC4961AE669084677FC9BB01A6D39C306B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:05:9f:33:34:79:f0:7d:60:3c:9f:9c:73:
18:09:21:ec:0f:2c:4f:b8:01:7f:6d:a9:89:ef:57:
2a:49:64:9c:08:9c:77:c3:b2:30:c6:ad:71:ff:fb:
3a:bc:a9:92:4b:e2:3b:7a:53:d7:d4:63:56:fb:3f:
59:48:22:e4:42:e9:0f:07:52:04:81:5b:5e:0a:ee:
88:69:3e:7a:03:b1:2a:e9:e0:7c:65:e6:f4:30:ce:
ef:73:9d:26:aa:a1:28:af:00:c7:0d:a2:75:f8:3f:
73:6b:5a:8d:14:5a:46:73:c8:11:a7:3c:94:7d:b4:
6c:08:d6:82:20:a9:08:ed:d2:d4:e3:85:b9:00:4c:
0c:82:1f:56:f6:85:2d:1a:ea:e7:8d:16:12:f9:17:
91:bc:6f:b2:39:35:3f:bc:97:c9:73:06:10:c7:80:
a6:f9:c3:59:2e:f1:c4:b5:fb:ea:4f:08:d7:71:3e:
71:1f:ca:76:cb:2d:ce:94:7e:cb:33:b1:74:71:84:
84:8c:c5:28:1b:b6:50:a1:bb:6d:eb:13:6b:e9:3a:
9f:2f:07:98:ca:09:ae:ab:1a:d0:74:ae:fb:72:01:
74:8f:c8:94:0f:ce:d0:cc:88:ca:d3:78:cc:d3:a9:
84:ce:de:cb:e3:2b:93:2f:19:5c:0d:4b:81:d0:e1:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:13:DC:49:61:AE:66:90:84:67:7F:C9:BB:01:A6:D3:9C:30:6B
X509v3 Authority Key Identifier:
keyid:AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2601:1d08:8000::/40
Signature Algorithm: sha256WithRSAEncryption
50:4e:01:ed:08:7a:97:e9:45:c7:08:55:d5:2d:78:b6:4c:df:
8f:fe:ec:7f:bd:d0:82:ab:a8:5f:17:0d:8e:b6:5c:93:ed:1c:
69:50:82:dd:eb:4a:1f:36:ee:ef:7a:75:e6:7e:2a:d1:e7:7b:
5f:1a:aa:47:2b:2e:25:e1:a3:85:f6:29:43:fe:bf:2f:73:4c:
78:f5:d9:8d:49:14:3e:67:c4:24:a3:6a:95:30:92:2c:8d:6e:
d6:94:70:85:42:10:53:d5:56:00:97:c0:11:4e:5f:f6:2f:12:
af:50:9e:b9:38:7d:ff:bb:8e:66:35:9c:97:51:67:fb:45:44:
c7:05:f4:e7:49:33:fb:2b:67:bd:cb:f7:26:a6:23:60:30:a0:
99:b8:5b:82:52:2e:62:be:de:7f:64:7e:22:76:89:fa:d8:7c:
76:3b:42:c3:b8:8a:54:bc:c4:a6:20:ed:f3:4b:d9:9a:ee:98:
f6:4d:f6:fd:a2:1f:c5:79:3d:8c:8c:47:24:a2:95:31:b1:3c:
10:20:68:4e:bf:67:fd:fe:92:6f:24:e5:93:8e:82:cb:80:bc:
d1:b8:82:bf:cb:ff:36:ef:b2:cb:bb:0c:34:b2:25:4a:68:01:
51:43:5f:83:c5:5f:a6:75:7e:fd:3d:59:a7:e7:5d:83:b0:24:
e9:07:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:24:32 2025 by rpki-client