Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
File: 3230382e38352e382e302f32322d3234203d3e20323030343534.roa (raw, json)
Hash identifier: r/7leHL8Xg7lEUNCHHjn3ucs94zenivERgDh3TmP/1w=
Subject key identifier: 7C:BA:20:DD:28:36:7C:C8:98:7C:3A:ED:79:AD:DC:28:E7:71:B2:56
Certificate issuer: /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial: 592653B3BD61CE0E30F338FD69C8246FFA65A4E1
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
Signing time: Sun 22 Dec 2024 03:48:18 +0000
ROA not before: Sun 22 Dec 2024 03:43:18 +0000
ROA not after: Sun 21 Dec 2025 03:48:18 +0000
asID: 200454
IP address blocks: 208.85.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:26:53:b3:bd:61:ce:0e:30:f3:38:fd:69:c8:24:6f:fa:65:a4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Validity
Not Before: Dec 22 03:43:18 2024 GMT
Not After : Dec 21 03:48:18 2025 GMT
Subject: CN=7CBA20DD28367CC8987C3AED79ADDC28E771B256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:04:73:4f:f9:b5:d4:94:72:f2:03:90:26:
fb:13:f6:00:45:dd:98:da:1e:ca:2c:b3:55:3e:c1:
be:cc:7a:23:8a:eb:d5:65:26:3c:f2:a8:53:8b:e3:
a5:fe:65:7f:75:45:d9:da:b4:c5:9b:20:cb:51:8d:
48:57:48:81:e6:65:97:84:8d:77:4f:70:7a:04:e9:
cb:7b:24:79:5c:d1:87:58:98:4e:32:4a:6f:cb:d2:
71:72:2d:13:21:69:5a:29:0b:f8:5b:98:46:a4:50:
cb:cb:93:74:4c:43:8b:63:48:0b:1a:04:cc:b6:ae:
d0:bb:72:d4:79:5c:04:05:fe:6a:24:2b:38:38:c2:
53:c7:2f:73:8a:24:15:7a:7a:43:cc:8c:0c:05:4a:
9d:6b:75:4b:6e:80:0b:6a:b8:57:91:fb:44:19:de:
23:75:24:aa:e1:20:72:2e:7d:0a:ae:c7:fb:45:5b:
ee:1d:3f:49:cc:dd:df:7c:06:76:cd:2f:41:67:f6:
4e:b5:16:42:e3:98:1a:27:6e:15:c2:2c:bd:3b:fe:
9d:a1:3c:4d:0c:3c:48:e9:88:07:47:23:bd:5f:61:
c7:e1:71:17:ba:35:74:68:48:a7:6b:5f:35:3f:de:
69:04:20:88:92:8a:e3:98:ac:3d:1f:a3:cb:b4:0a:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:20:DD:28:36:7C:C8:98:7C:3A:ED:79:AD:DC:28:E7:71:B2:56
X509v3 Authority Key Identifier:
keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.85.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:69:20:ce:15:7b:4f:6b:ee:d0:13:a2:9f:ac:88:21:59:27:
94:9a:50:ef:26:f9:a5:97:b7:ff:33:12:a5:2b:9c:70:4f:11:
0d:47:6b:42:85:c9:4c:88:09:22:19:e9:92:ee:b1:f5:f7:cc:
5c:72:a0:32:8b:bc:f2:2d:5d:cc:82:f5:db:a6:e2:54:95:e7:
e2:d7:fb:5e:52:c0:57:e4:81:fa:6b:e6:f9:00:9c:4e:b1:da:
7c:f4:b0:21:d7:e5:fa:72:64:f1:89:b0:35:87:e9:75:d7:2c:
4c:b0:ac:3d:16:c6:d4:d3:ca:44:64:26:cb:d9:fd:61:87:81:
d4:58:80:da:82:5c:cd:88:f9:a7:da:ad:8c:20:d7:9f:8d:1e:
81:f8:12:96:19:26:7f:a6:51:c9:30:86:32:85:8f:96:5c:47:
81:3c:7a:a1:55:ef:03:81:a5:f7:ff:7f:6c:cb:e0:f4:91:54:
68:5a:48:69:39:8f:c7:90:14:e4:d3:73:f1:59:87:8b:f9:7a:
71:e0:3f:63:da:1e:37:8b:ff:1c:ed:b5:80:23:bb:3f:a8:56:
bb:d8:fd:83:db:d0:27:24:70:59:9b:c2:8a:94:73:a0:5a:86:
c1:0c:33:4c:b1:d3:3f:a1:a4:80:3a:15:70:0e:82:c7:c2:c1:
46:b1:bd:5a
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUWSZTs71hzg4w8zj9acgkb/plpOEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2Nl
NzY4YmJiNzY3MzBhNjIxMTEwHhcNMjQxMjIyMDM0MzE4WhcNMjUxMjIxMDM0ODE4
WjAzMTEwLwYDVQQDEyg3Q0JBMjBERDI4MzY3Q0M4OTg3QzNBRUQ3OUFEREMyOEU3
NzFCMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW0Ec0/5tdSU
cvIDkCb7E/YARd2Y2h7KLLNVPsG+zHojiuvVZSY88qhTi+Ol/mV/dUXZ2rTFmyDL
UY1IV0iB5mWXhI13T3B6BOnLeyR5XNGHWJhOMkpvy9Jxci0TIWlaKQv4W5hGpFDL
y5N0TEOLY0gLGgTMtq7Qu3LUeVwEBf5qJCs4OMJTxy9ziiQVenpDzIwMBUqda3VL
boALarhXkftEGd4jdSSq4SByLn0Krsf7RVvuHT9JzN3ffAZ2zS9BZ/ZOtRZC45ga
J24Vwiy9O/6doTxNDDxI6YgHRyO9X2HH4XEXujV0aEina181P95pBCCIkorjmKw9
H6PLtAqPKwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFHy6IN0oNnzImHw67Xmt3Cjn
cbJWMB8GA1UdIwQYMBaAFHSPAlxqJIcngFWZHMFpXiz+Rq5ZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAyMjliYzExLWRjMGMtNGVlNS04Mzhk
LTA3NzY5NjIyM2U3NC8xLzc0OEYwMjVDNkEyNDg3Mjc4MDU1OTkxQ0MxNjk1RTJD
RkU0NkFFNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNmNlNDA4ZC01NTgxLTQ4M2QtOTBiMy01
MTE5ZmM4MzAwNjQvMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2NlNzY4
YmJiNzY3MzBhNjIxMTEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH
MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAyMjliYzExLWRjMGMtNGVlNS04MzhkLTA3NzY5NjIyM2U3NC8xLzMyMzAzODJl
MzgzNTJlMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzAzNDM1MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALQVQgwDQYJKoZIhvcNAQELBQADggEBAB9pIM4Ve09r7tATop+siCFZ
J5SaUO8m+aWXt/8zEqUrnHBPEQ1Ha0KFyUyICSIZ6ZLusfX3zFxyoDKLvPItXcyC
9dum4lSV5+LX+15SwFfkgfpr5vkAnE6x2nz0sCHX5fpyZPGJsDWH6XXXLEywrD0W
xtTTykRkJsvZ/WGHgdRYgNqCXM2I+afarYwg15+NHoH4EpYZJn+mUckwhjKFj5Zc
R4E8eqFV7wOBpff/f2zL4PSRVGhaSGk5j8eQFOTTc/FZh4v5enHgP2PaHjeL/xzt
tYAjuz+oVrvY/YPb0CckcFmbwoqUc6BahsEMM0yx0z+hpIA6FXAOgsfCwUaxvVo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:37 2025 by rpki-client