Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
File: 323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier: WEysLnUlvKRUX/10/R5pmbd/lfwrLZznB7/JcsR6dpc=
Subject key identifier: 9C:FD:E2:D6:FA:7A:97:5E:16:07:F6:3E:C8:9C:D2:5A:57:87:D0:F4
Certificate issuer: /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial: 73C338D8625B9FBD7DF2BD143627C0D006888A98
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
Signing time: Wed 23 Oct 2024 18:41:54 +0000
ROA not before: Wed 23 Oct 2024 18:36:54 +0000
ROA not after: Wed 22 Oct 2025 18:41:54 +0000
asID: 54148
IP address blocks: 2602:fa43:28::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c3:38:d8:62:5b:9f:bd:7d:f2:bd:14:36:27:c0:d0:06:88:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Validity
Not Before: Oct 23 18:36:54 2024 GMT
Not After : Oct 22 18:41:54 2025 GMT
Subject: CN=9CFDE2D6FA7A975E1607F63EC89CD25A5787D0F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:e6:c1:9a:fe:02:1f:99:cb:0f:9f:03:d6:
10:f8:af:91:f6:db:e4:a7:56:f7:64:3d:1e:1e:6f:
80:eb:b7:d8:69:46:00:9d:67:68:ab:ef:57:73:dd:
06:4e:64:42:e8:13:f1:f5:57:e6:5f:e8:bb:b6:22:
b7:4b:77:10:e9:13:e5:d4:68:c9:57:25:62:e9:c6:
05:31:21:b4:38:14:17:d4:43:18:df:e0:45:55:9f:
8b:75:29:5c:75:e9:be:37:58:b4:2f:57:54:67:ad:
2f:7d:8a:9b:e2:35:61:a0:33:1f:ce:64:0e:05:a4:
75:8f:07:cb:9c:99:32:55:b9:80:4f:d1:35:6c:00:
92:f0:11:ee:ba:8e:e0:dd:21:ed:47:e6:5a:ac:22:
4e:24:20:30:a5:8c:26:31:8f:02:f6:af:71:d6:c9:
be:0b:0a:c1:5d:f4:34:30:3f:30:78:59:3d:96:91:
32:9a:b3:e0:f2:4d:c5:7a:08:ae:b9:fc:3b:91:6f:
5b:2e:f2:c5:65:52:69:a2:20:92:97:a6:f8:1d:ae:
97:3e:90:4c:fa:65:37:3f:92:03:25:d4:e1:48:15:
2b:59:90:6d:9c:7d:a4:ec:80:ff:03:38:15:7a:26:
b3:a2:7c:cd:cb:a7:3e:86:23:ce:34:3c:af:0f:37:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FD:E2:D6:FA:7A:97:5E:16:07:F6:3E:C8:9C:D2:5A:57:87:D0:F4
X509v3 Authority Key Identifier:
keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa43:28::/46
Signature Algorithm: sha256WithRSAEncryption
2a:f4:27:a4:88:ed:bf:20:77:38:13:2e:13:6e:ff:72:66:58:
3c:5f:73:b8:de:89:53:43:8b:a0:49:59:ad:8c:65:df:5b:4d:
9b:6a:3b:53:44:c5:52:1e:0b:0f:47:18:37:f2:08:f6:9e:33:
dc:5a:d7:ac:fc:df:20:66:93:19:4e:0f:06:ec:6c:6b:bd:61:
a7:f2:e0:b2:32:5d:f2:64:66:be:2f:ac:81:e2:01:1a:02:21:
a2:4c:a8:40:91:f7:f7:09:fa:30:62:08:4b:b9:7b:32:45:30:
dc:16:ef:a5:4c:0b:38:70:1e:9c:38:21:21:fc:c9:2f:00:30:
a7:b4:df:a4:3b:37:f1:0c:44:96:71:08:a0:0d:0c:06:ad:d8:
05:8f:5c:5d:f7:4b:f5:ff:7c:64:89:2e:7c:d0:34:31:c7:93:
46:61:82:eb:40:6d:13:ac:bb:bf:08:65:ad:43:2b:8e:3e:ea:
30:85:19:91:27:7b:a9:10:e7:4e:89:81:3b:ea:7a:a0:65:cc:
5c:53:be:52:dc:66:29:2f:ac:6e:44:88:a0:d3:4a:6f:18:cd:
48:7b:93:13:db:0e:87:fc:58:58:c8:e8:e8:08:7b:d8:2d:d1:
61:db:79:60:c9:cf:7f:4c:b5:bd:f2:e3:e3:1d:84:8d:c3:29:
11:65:4a:5f
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUc8M42GJbn7198r0UNifA0AaIipgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNl
MzJlZmIzZWVhZWFlMDdjZjIwHhcNMjQxMDIzMTgzNjU0WhcNMjUxMDIyMTg0MTU0
WjAzMTEwLwYDVQQDEyg5Q0ZERTJENkZBN0E5NzVFMTYwN0Y2M0VDODlDRDI1QTU3
ODdEMEY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthPmwZr+Ah+Z
yw+fA9YQ+K+R9tvkp1b3ZD0eHm+A67fYaUYAnWdoq+9Xc90GTmRC6BPx9VfmX+i7
tiK3S3cQ6RPl1GjJVyVi6cYFMSG0OBQX1EMY3+BFVZ+LdSlcdem+N1i0L1dUZ60v
fYqb4jVhoDMfzmQOBaR1jwfLnJkyVbmAT9E1bACS8BHuuo7g3SHtR+ZarCJOJCAw
pYwmMY8C9q9x1sm+CwrBXfQ0MD8weFk9lpEymrPg8k3Fegiuufw7kW9bLvLFZVJp
oiCSl6b4Ha6XPpBM+mU3P5IDJdThSBUrWZBtnH2k7ID/AzgVeiazonzNy6c+hiPO
NDyvDzd48QIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFJz94tb6epdeFgf2Psic0lpX
h9D0MB8GA1UdIwQYMBaAFCyLMjvZW7DURIHLotzOPTq8OjxZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMz
LTdlZjBhODM5Y2UxOS8zLzJDOEIzMjNCRDk1QkIwRDQ0NDgxQ0JBMkRDQ0UzRDNB
QkMzQTNDNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZTFiZGZmOC1kYmI1LTRmMGYtOThlNi1j
OGUxMzI2YmE3OWIvN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNlMzJl
ZmIzZWVhZWFlMDdjZjIuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8zLzMyMzYzMDMy
M2E2NjYxMzQzMzNhMzIzODNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDM1MzQzMTM0
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwImAvpDACgwDQYJKoZIhvcNAQELBQADggEBACr0J6SI7b8g
dzgTLhNu/3JmWDxfc7jeiVNDi6BJWa2MZd9bTZtqO1NExVIeCw9HGDfyCPaeM9xa
16z83yBmkxlODwbsbGu9Yafy4LIyXfJkZr4vrIHiARoCIaJMqECR9/cJ+jBiCEu5
ezJFMNwW76VMCzhwHpw4ISH8yS8AMKe036Q7N/EMRJZxCKANDAat2AWPXF33S/X/
fGSJLnzQNDHHk0ZhgutAbROsu78IZa1DK44+6jCFGZEne6kQ506JgTvqeqBlzFxT
vlLcZikvrG5EiKDTSm8YzUh7kxPbDof8WFjI6OgIe9gt0WHbeWDJz39Mtb3y4+Md
hI3DKRFlSl8=
-----END CERTIFICATE-----
Generated at Thu Oct 24 22:39:05 2024 by rpki-client on console-fra.rpki-client.org