Route Origin Authorization
$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa
File: 326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier: uUY893Gr61eWTIt+IdZua/d0mT1lB+ivdfYSmLWA0q0=
Subject key identifier: 68:80:4C:46:D8:DD:CC:6A:4F:88:4D:E0:88:65:D9:A0:9E:FF:34:1F
Certificate issuer: /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial: 3B5E0334A8B7A6D18E4799D3021F70BB8774A3CB
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa
Signing time: Mon 03 Feb 2025 13:49:58 +0000
ROA not before: Mon 03 Feb 2025 13:44:58 +0000
ROA not after: Mon 02 Feb 2026 13:49:58 +0000
asID: 205848
IP address blocks: 2a06:1282:2::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5e:03:34:a8:b7:a6:d1:8e:47:99:d3:02:1f:70:bb:87:74:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Validity
Not Before: Feb 3 13:44:58 2025 GMT
Not After : Feb 2 13:49:58 2026 GMT
Subject: CN=68804C46D8DDCC6A4F884DE08865D9A09EFF341F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:93:c1:e6:f9:56:b3:d7:5d:5c:f1:d6:bc:
b0:be:d3:85:5d:1b:2b:33:23:8c:22:ba:1c:8c:4e:
4c:d3:19:5e:66:48:11:0c:00:57:c3:3c:1d:32:ed:
1e:63:0f:a3:5b:d2:e1:0e:9e:e3:7e:56:8c:3d:bc:
86:13:d5:51:7c:04:55:45:f0:19:79:d6:41:33:cf:
3e:95:7e:63:08:a4:d7:34:92:7d:03:f4:4c:37:ca:
68:51:12:fc:f7:b1:67:b9:71:bd:b2:d6:aa:4f:93:
38:ee:15:9e:f1:6f:fe:d8:e8:91:f4:c8:6d:69:cd:
fb:b9:00:64:88:40:a6:65:84:40:8f:87:e8:6a:b4:
1b:da:fd:0b:e7:9d:23:a0:75:78:c2:15:ef:fb:98:
84:72:2e:03:ba:70:66:40:b4:d7:2f:27:45:21:c9:
57:08:f4:e0:5b:fa:a7:25:0a:06:db:6b:be:f2:d9:
5f:6e:27:9a:f5:24:4d:63:56:22:be:27:fd:e4:87:
ae:53:bf:0f:a3:1e:47:60:cf:74:27:6a:05:68:ee:
a1:8b:06:b7:01:6b:79:81:64:f1:de:4d:78:88:0b:
c3:51:93:2f:c5:51:6f:c1:f6:df:a6:26:61:83:59:
30:43:98:96:7d:a5:c2:40:2d:28:e9:3b:12:3e:83:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:80:4C:46:D8:DD:CC:6A:4F:88:4D:E0:88:65:D9:A0:9E:FF:34:1F
X509v3 Authority Key Identifier:
keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1282:2::/48
Signature Algorithm: sha256WithRSAEncryption
05:10:0f:07:b9:ff:a2:ba:2d:9b:0a:b6:10:f4:3a:ef:7a:2f:
4c:80:8c:a9:a3:6b:2c:2c:00:d8:87:80:23:d9:6f:23:66:2b:
c3:3c:97:2d:95:fe:ef:56:34:e3:08:ee:58:47:0b:8b:b4:e8:
d0:bd:4a:ba:39:be:b4:71:5b:ad:25:65:5b:f3:c1:73:12:c6:
1f:5a:f1:ff:ad:1f:d5:b2:e2:ae:59:5a:8f:76:b3:e9:69:2f:
f4:56:5e:73:01:f9:79:8b:45:05:9e:41:0e:60:88:d8:f8:00:
58:5f:92:13:5c:b1:ca:0e:a2:54:6b:ab:3c:9f:03:c0:ee:be:
3a:ae:58:3b:af:79:15:cc:45:ec:7f:f9:ec:78:99:7f:e0:82:
f9:a5:2e:c0:96:fe:fc:43:24:66:00:d5:76:57:1f:78:a2:30:
d4:e5:d4:c0:44:66:92:e4:b9:27:04:60:3f:0b:16:d7:14:f8:
49:91:1f:6a:a5:a0:3c:1c:39:28:51:7c:e6:29:9d:ea:94:25:
a0:47:b5:80:4a:f4:6f:41:30:53:12:5f:cf:02:ca:e6:5b:08:
73:17:90:69:3a:2e:52:e7:c3:dd:d6:40:e9:e3:65:c9:51:51:
38:80:bd:f5:22:b5:36:11:34:aa:b1:a2:a8:22:0e:3b:e2:1f:
bf:c8:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:12:33 2025 by rpki-client