Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
File: 3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: ciZ6Q4931z9tXB+EM2Vlak+HpWMulkfIret1nsQZa1s=
Subject key identifier: 33:EE:A2:21:1F:21:2A:7C:8F:95:86:1D:78:AE:C1:67:34:FF:BF:8E
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 42C27B5BE6845BC62A67109EAEE1332BEF89E649
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 61138
IP address blocks: 128.254.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c2:7b:5b:e6:84:5b:c6:2a:67:10:9e:ae:e1:33:2b:ef:89:e6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=33EEA2211F212A7C8F95861D78AEC16734FFBF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:e0:66:8f:b9:eb:b9:d3:46:6e:26:60:66:
12:e0:6e:62:54:b3:c8:7c:f2:cc:c1:a0:28:d0:58:
c8:e4:ee:7a:39:f7:9a:a3:01:9c:31:cd:ec:af:dd:
4f:97:74:a4:79:8f:3e:fa:4b:29:5c:6d:e0:eb:89:
fa:78:dd:2c:e2:c0:ec:e0:0d:3c:5f:ed:0b:fe:75:
f6:3a:2e:43:75:5d:2d:fa:12:6d:2a:1a:df:e3:af:
82:8b:0c:1b:a3:25:7e:4d:4c:65:51:86:26:4c:d7:
b2:31:2e:d1:23:0b:ca:e8:89:77:90:81:02:d0:46:
1f:68:18:a2:aa:90:9e:00:d7:71:1a:7e:97:35:c3:
99:a9:39:2f:dd:de:5d:3e:da:fe:eb:89:9e:4b:75:
74:d5:7e:73:99:d0:e2:24:8e:1c:67:76:f7:86:a4:
93:bd:78:45:1d:01:56:26:61:64:a9:be:ad:06:48:
34:ca:af:45:9b:e9:6e:0f:0f:91:24:14:e0:6b:f8:
0d:6c:35:b6:b7:1a:82:ba:02:64:b5:fd:cc:4a:15:
ec:ba:e2:d0:6f:31:75:b8:0e:3a:c6:86:b6:b7:15:
72:03:66:05:b7:d5:4d:b8:ec:5b:38:e6:25:2d:e6:
2a:84:18:9c:18:e7:b3:fd:6d:39:5f:02:df:0a:53:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:A2:21:1F:21:2A:7C:8F:95:86:1D:78:AE:C1:67:34:FF:BF:8E
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.204.0/22
Signature Algorithm: sha256WithRSAEncryption
16:50:18:4a:a4:5f:a8:a1:ee:dc:f1:75:09:87:6d:3e:cf:46:
5d:df:9a:f6:00:09:f9:e0:1d:7d:8a:40:41:64:36:21:a4:2a:
38:76:74:3e:30:82:21:24:3d:36:d0:43:ee:d6:99:fd:cc:cc:
94:a0:0c:d8:7b:28:e5:e1:5e:da:da:e7:4b:3d:b0:81:8b:ab:
eb:e6:98:e9:9e:58:bb:7a:81:ef:3a:98:fa:82:a4:c1:54:8e:
19:58:5a:ed:fb:b8:fe:d5:cd:99:b5:4c:c2:1a:67:87:16:ca:
bd:bb:a5:39:e9:5a:f6:68:01:55:29:ed:c4:d4:6f:34:0f:83:
76:05:cc:d0:9d:fa:d5:3c:5c:b2:60:7b:e7:eb:00:63:33:e0:
34:25:0c:14:54:ed:8d:2c:cb:1b:29:15:24:6a:51:a9:61:66:
e6:4c:c8:92:2c:74:2d:46:1f:77:95:e2:3b:07:c6:b2:26:9f:
56:dd:ab:74:e1:d8:f0:de:38:3f:4c:df:1c:f4:11:c8:ea:c2:
9a:fc:97:88:8e:c8:e2:cc:cf:dd:c6:c0:d7:ee:08:a3:fe:ca:
88:79:16:df:ea:cb:72:01:a8:ae:f5:c9:c2:cf:37:21:60:9a:
f1:2b:f9:bf:35:4b:59:df:88:61:47:0c:38:05:c3:06:69:a4:
da:2c:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org