Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3430203d3e203236353631.roa
File: 323630323a663966613a3a2f34302d3430203d3e203236353631.roa (raw, json)
Hash identifier: ePgAVaMaQMQGNBGFgTjcdAC0HhI+9EKH+4teYu2L1u4=
Subject key identifier: 75:E6:82:6F:FA:E3:24:E4:F1:74:6A:25:71:EC:56:FA:3B:99:1D:FC
Certificate issuer: /CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
Certificate serial: 3847147A0746AB83BE59D3425FA0F405D9FC224E
Authority key identifier: 1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3430203d3e203236353631.roa
Signing time: Sat 03 Feb 2024 14:43:38 +0000
ROA not before: Sat 03 Feb 2024 14:38:38 +0000
ROA not after: Sat 01 Feb 2025 14:43:38 +0000
asID: 26561
IP address blocks: 2602:f9fa::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:47:14:7a:07:46:ab:83:be:59:d3:42:5f:a0:f4:05:d9:fc:22:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
Validity
Not Before: Feb 3 14:38:38 2024 GMT
Not After : Feb 1 14:43:38 2025 GMT
Subject: CN=75E6826FFAE324E4F1746A2571EC56FA3B991DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:de:12:90:3c:55:75:ae:85:e7:b3:c3:c9:
2c:f9:d8:c1:18:01:8d:5c:3c:4e:ac:d0:09:cd:a9:
b1:c5:bd:86:42:42:60:be:5f:4f:06:4a:3b:8b:e9:
91:75:47:d8:99:7b:4c:bf:47:33:ab:99:df:03:f7:
25:2e:e3:d4:80:8f:a7:79:05:85:9e:90:54:b8:c4:
68:e9:5d:93:a4:f3:d3:df:54:12:de:1d:3a:1d:5a:
ec:92:e5:8f:c4:a2:d1:c9:2d:85:7f:c9:15:45:44:
23:97:87:db:b3:8d:13:d6:52:fa:d4:a8:d5:8e:b4:
71:5d:1b:8c:60:65:6e:21:55:3d:78:d1:d9:23:c6:
76:21:bf:a0:41:96:c5:17:65:94:a1:63:fe:e0:98:
04:95:60:c5:2d:c8:44:86:35:f0:62:56:76:aa:d9:
93:28:04:69:0e:4b:a7:63:b4:25:27:ae:1d:66:ba:
3b:50:26:d3:c8:14:33:bf:74:56:43:2c:ee:be:ac:
44:2f:8d:59:7f:b1:f1:b5:54:40:05:c2:11:c3:64:
7f:31:09:e3:97:8e:57:f4:ba:6b:3b:c3:1b:37:6c:
82:8f:c4:00:40:b1:83:ae:57:18:1b:c3:38:f4:ca:
35:ec:89:0c:95:c4:12:fd:6e:f6:87:0c:ae:ff:20:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E6:82:6F:FA:E3:24:E4:F1:74:6A:25:71:EC:56:FA:3B:99:1D:FC
X509v3 Authority Key Identifier:
keyid:1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3430203d3e203236353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9fa::/40
Signature Algorithm: sha256WithRSAEncryption
a5:3f:c7:55:24:8c:fa:c1:59:31:6a:7c:38:ef:2a:88:36:75:
4e:c3:c7:45:a9:9f:91:ad:31:d3:c6:08:5e:58:4d:30:cc:ed:
6b:1c:fa:21:fc:1b:7d:98:6c:15:4c:73:9e:ca:7b:be:55:4e:
1a:f2:55:88:d5:21:f8:da:60:2c:04:9c:77:ad:06:f8:60:04:
db:c3:d2:d9:f9:8b:60:15:4a:30:a4:5b:33:9d:3c:5d:65:d3:
38:df:6d:53:1f:d0:9d:81:f6:6f:7c:71:0d:fa:3f:5f:93:ca:
e6:bd:83:ed:90:08:e6:75:76:da:a1:37:23:65:c1:9e:35:5b:
57:1d:b4:c6:a1:34:1f:74:c4:93:22:6c:9e:6c:4b:23:e0:8b:
ec:c0:fe:36:fe:a7:13:f2:84:9c:2f:8a:de:82:a3:56:24:db:
ec:3e:c4:23:e7:da:61:14:f5:c3:03:d0:9f:8f:be:29:58:7f:
b6:1f:1a:73:dd:d7:3b:3e:b4:65:74:07:c2:c0:4b:a6:ec:28:
22:b9:ae:73:b2:3f:7d:72:9a:2b:58:3b:d6:f5:d0:af:83:6a:
c6:97:db:4c:d7:91:0b:fc:a6:02:40:aa:02:65:f1:ec:a7:93:
92:b7:0d:7d:1c:6b:3c:b1:a1:a7:48:be:6b:07:71:2c:6f:43:
ac:d2:c6:ce
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUOEcUegdGq4O+WdNCX6D0Bdn8Ik4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTIwYmU5MzhkMzExZjY0ZGJlNWE5MzA2
NWUxZDMwYjI5Y2YwYTgzZGYwHhcNMjQwMjAzMTQzODM4WhcNMjUwMjAxMTQ0MzM4
WjAzMTEwLwYDVQQDEyg3NUU2ODI2RkZBRTMyNEU0RjE3NDZBMjU3MUVDNTZGQTNC
OTkxREZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdHeEpA8VXWu
heezw8ks+djBGAGNXDxOrNAJzamxxb2GQkJgvl9PBko7i+mRdUfYmXtMv0czq5nf
A/clLuPUgI+neQWFnpBUuMRo6V2TpPPT31QS3h06HVrskuWPxKLRyS2Ff8kVRUQj
l4fbs40T1lL61KjVjrRxXRuMYGVuIVU9eNHZI8Z2Ib+gQZbFF2WUoWP+4JgElWDF
LchEhjXwYlZ2qtmTKARpDkunY7QlJ64dZro7UCbTyBQzv3RWQyzuvqxEL41Zf7Hx
tVRABcIRw2R/MQnjl45X9LprO8MbN2yCj8QAQLGDrlcYG8M49Mo17IkMlcQS/W72
hwyu/yCFDwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFHXmgm/64yTk8XRqJXHsVvo7
mR38MB8GA1UdIwQYMBaAFBrpBcrSRh4cdmZJny99aLrf54G7MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTctNGMzYi05MDQz
LWEwZTdmZWJmMTY3ZC8yLzFBRTkwNUNBRDI0NjFFMUM3NjY2NDk5RjJGN0Q2OEJB
REZFNzgxQkIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et
NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y
OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTIwYmU5MzhkMzExZjY0ZGJlNWE5MzA2NWUx
ZDMwYjI5Y2YwYTgzZGYuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH
MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzA0MDMyYzhmLTFkNTctNGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8yLzMyMzYzMDMy
M2E2NjM5NjY2MTNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzYzNTM2MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAmAvn6ADANBgkqhkiG9w0BAQsFAAOCAQEApT/HVSSM+sFZMWp8OO8q
iDZ1TsPHRamfka0x08YIXlhNMMztaxz6IfwbfZhsFUxznsp7vlVOGvJViNUh+Npg
LAScd60G+GAE28PS2fmLYBVKMKRbM508XWXTON9tUx/QnYH2b3xxDfo/X5PK5r2D
7ZAI5nV22qE3I2XBnjVbVx20xqE0H3TEkyJsnmxLI+CL7MD+Nv6nE/KEnC+K3oKj
ViTb7D7EI+faYRT1wwPQn4++KVh/th8ac93XOz60ZXQHwsBLpuwoIrmuc7I/fXKa
K1g71vXQr4NqxpfbTNeRC/ymAkCqAmXx7KeTkrcNfRxrPLGhp0i+awdxLG9DrNLG
zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org