Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3438203d3e20323130393132.roa
File: 323630323a663966613a3a2f34302d3438203d3e20323130393132.roa (raw, json)
Hash identifier: piGGnrN6RpQGYymAEgDqCby8OMqWDSyrdrDSl1E3DR8=
Subject key identifier: 97:77:7A:94:1C:A7:AA:AB:7B:58:D8:48:CF:D9:9F:A3:29:EB:F9:D1
Certificate issuer: /CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
Certificate serial: 2BF9CFFC76C62DF7426A9B5210344E57794B2374
Authority key identifier: 1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3438203d3e20323130393132.roa
Signing time: Tue 24 Oct 2023 18:43:11 +0000
ROA not before: Tue 24 Oct 2023 18:38:11 +0000
ROA not after: Tue 22 Oct 2024 18:43:11 +0000
asID: 210912
IP address blocks: 2602:f9fa::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f9:cf:fc:76:c6:2d:f7:42:6a:9b:52:10:34:4e:57:79:4b:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
Validity
Not Before: Oct 24 18:38:11 2023 GMT
Not After : Oct 22 18:43:11 2024 GMT
Subject: CN=97777A941CA7AAAB7B58D848CFD99FA329EBF9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:82:14:61:8c:9f:33:53:84:81:9b:b5:91:
b4:40:ea:5d:5d:19:c6:48:e5:de:bc:e4:84:24:24:
0a:77:dc:79:34:76:f5:54:16:59:f5:49:4f:cd:3d:
f8:b2:32:d3:63:eb:20:96:88:e0:bd:5a:b5:ae:a4:
86:97:bb:ee:4a:29:e9:c0:47:56:ed:c7:b2:f2:bc:
43:45:b6:02:90:51:7e:68:45:9f:af:9a:7c:3a:e3:
f3:c9:bf:b9:82:f1:f3:82:ac:87:ea:0b:a2:99:55:
ed:33:9f:2b:03:26:8d:39:fc:08:ac:84:cc:c5:b2:
fe:8a:55:7c:8c:e7:b3:fd:0a:77:e2:6b:b9:77:11:
4d:44:2e:eb:7f:91:15:24:5c:8c:84:2a:9f:be:09:
57:41:fb:24:12:5d:6e:60:b8:28:94:5a:b7:1b:8e:
94:fb:23:01:51:94:a6:66:12:b3:52:e1:b6:4d:99:
80:02:d5:17:3c:8b:65:9e:33:72:fb:f6:58:1d:73:
4a:02:ca:38:5e:24:24:41:6e:ce:1f:17:a6:fc:4d:
a5:8c:04:bc:bf:c5:b9:4d:70:ec:6e:ee:87:d4:58:
d2:66:db:4c:63:39:26:4a:60:cb:5f:46:e8:ef:e3:
20:6b:5c:f1:ee:f5:07:8f:90:13:89:32:ba:cd:86:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:7A:94:1C:A7:AA:AB:7B:58:D8:48:CF:D9:9F:A3:29:EB:F9:D1
X509v3 Authority Key Identifier:
keyid:1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3438203d3e20323130393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9fa::/40
Signature Algorithm: sha256WithRSAEncryption
c2:a8:bf:1f:31:a0:d9:df:2b:3e:12:a1:e8:e4:b2:82:de:c4:
a5:a8:f6:5a:3b:6d:af:23:b7:dd:33:70:95:72:f5:e8:80:6c:
89:b4:67:79:1b:15:08:bb:a6:0d:bf:5e:36:9f:e2:a6:36:10:
96:81:eb:6b:ee:36:1d:07:14:e1:1f:35:43:93:31:4b:18:9d:
dc:ff:3d:7f:57:01:2b:5f:15:1e:af:85:2b:20:2e:8d:70:64:
bb:4d:e7:ce:1b:3e:8a:1f:d8:ef:34:da:34:31:3f:3a:39:a7:
c7:d7:e6:e4:9e:89:2d:85:1b:1d:f2:48:03:71:22:17:ed:94:
be:d9:ee:35:14:f7:f9:b5:a0:b1:c3:f7:c1:4e:53:e0:f7:ca:
84:51:29:2b:60:0c:f7:62:15:d7:e4:18:7e:11:6d:56:80:ea:
f1:85:be:9a:b1:1d:68:de:15:b8:6c:42:3e:19:6b:36:e8:a4:
07:7a:fb:c9:2d:ee:70:bb:67:83:49:7f:46:b0:e0:71:00:f7:
fd:15:32:59:37:2e:ee:43:01:e1:db:5b:cc:06:87:ba:07:af:
ed:a3:aa:5f:85:02:e7:bd:3c:a6:d1:60:36:42:ec:f3:ef:61:
d8:c1:01:90:01:da:a6:5f:45:e1:59:f9:27:67:91:89:44:45:
10:5c:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org