Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
File: 323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa (raw, json)
Hash identifier: Yb9JU3CRWrMKdDlJAtZV9UzOmSwXBkyRyCzpwM4uvkk=
Subject key identifier: A9:F2:FE:EF:24:16:A7:8E:45:A2:84:A4:56:64:65:EE:1A:8B:71:B5
Certificate issuer: /CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
Certificate serial: 50595E4F945E31A6761C37D9D8A86A58E3D18692
Authority key identifier: 2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
Signing time: Sun 12 Nov 2023 08:20:46 +0000
ROA not before: Sun 12 Nov 2023 08:15:46 +0000
ROA not after: Sun 10 Nov 2024 08:20:46 +0000
asID: 60900
IP address blocks: 2602:fa6e:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:59:5e:4f:94:5e:31:a6:76:1c:37:d9:d8:a8:6a:58:e3:d1:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
Validity
Not Before: Nov 12 08:15:46 2023 GMT
Not After : Nov 10 08:20:46 2024 GMT
Subject: CN=A9F2FEEF2416A78E45A284A4566465EE1A8B71B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:43:67:d6:9f:76:fd:de:24:b3:9c:2a:9a:
65:6a:82:a6:18:a7:4e:79:36:f8:f4:9e:ee:67:48:
cb:19:4e:27:59:68:f9:a1:05:0e:c8:21:cd:89:55:
13:5f:99:f9:57:d5:f7:05:cb:a9:87:d9:e6:e7:12:
0a:ba:5e:75:3c:a7:ad:54:7f:29:18:c0:20:26:2b:
f0:09:d4:d3:a5:fd:bb:06:3b:3b:dc:b1:d2:14:5d:
90:e1:35:10:96:b5:24:1b:1b:dc:1b:ef:c2:b8:01:
f4:bd:13:21:5e:73:72:fa:f8:af:7b:18:a4:1b:1d:
65:8e:72:b6:c9:a9:d1:53:96:6c:c7:c8:59:95:ee:
91:f5:26:67:f3:25:e5:b5:01:0e:47:de:ab:a9:3d:
c7:f2:f0:bc:07:4b:d1:1d:02:01:cb:3f:c0:9b:31:
e5:6a:1f:55:48:da:14:85:a9:37:54:93:75:d5:a8:
ea:73:d6:05:7b:f1:58:45:42:c1:fc:00:13:1a:ad:
30:4e:dd:36:79:8f:c1:48:13:be:48:10:9f:53:8f:
0c:29:26:75:89:a3:10:da:72:fb:ab:cd:83:eb:19:
80:3c:2e:c9:ab:3e:58:e0:a0:53:a7:4a:cf:a8:a7:
a3:84:f4:58:84:d4:d4:65:65:81:18:c1:30:81:1f:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F2:FE:EF:24:16:A7:8E:45:A2:84:A4:56:64:65:EE:1A:8B:71:B5
X509v3 Authority Key Identifier:
keyid:2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa6e:100::/40
Signature Algorithm: sha256WithRSAEncryption
0c:71:79:03:29:94:8b:d2:8c:41:21:11:3f:6b:74:9e:09:76:
44:9c:7c:b0:30:06:e6:1a:b0:d5:6b:cc:1a:f8:3f:9b:23:8b:
bd:7c:5b:92:89:25:8e:0e:3b:26:0e:78:0e:2b:bb:67:34:75:
1d:66:68:e5:02:dd:b6:08:ff:b3:8a:99:0e:5c:a8:fe:52:67:
be:63:1f:f6:30:fc:31:72:22:0f:36:b2:35:e6:0b:3b:8f:43:
b3:ec:40:83:a8:1b:73:cf:31:3e:0e:26:62:f5:ac:22:33:4f:
18:72:62:fa:78:1e:01:a3:45:27:8a:57:c9:3d:b9:11:45:4f:
e2:28:16:b0:71:b0:6b:14:14:4f:3e:fa:0b:ac:53:4a:af:28:
29:78:d6:0b:87:42:5c:3b:7f:cd:54:a5:ef:cb:c9:b1:02:70:
3f:e7:7d:93:30:fa:4b:c1:48:10:2e:f1:7d:8d:ea:27:0c:a3:
59:e5:44:5a:49:ef:0c:7d:ca:9a:50:cb:a4:17:a6:fc:43:33:
d2:cd:60:fb:b2:59:1c:1d:85:eb:05:d9:7e:a7:4d:4b:27:9c:
ca:50:9e:c4:60:e5:87:74:6c:ff:0e:84:86:1f:f6:7d:7c:db:
5c:ae:57:bd:a6:8d:66:8d:da:b2:08:1c:f6:d5:66:91:b6:01:
8e:2a:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org