Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa
File: 3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa (raw, json)
Hash identifier: gpI6O+pXlRwJYgU6jmKIO5Iu3RtPxFjhWA6Jn600UE0=
Subject key identifier: EE:04:FA:57:3D:AF:39:92:40:EC:8A:00:33:07:6C:06:1A:98:D9:79
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 7436B6320E301460A18A5C9F7F6A7C1E5B7657EC
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 200975
IP address blocks: 128.254.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:36:b6:32:0e:30:14:60:a1:8a:5c:9f:7f:6a:7c:1e:5b:76:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=EE04FA573DAF399240EC8A0033076C061A98D979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:66:30:ea:35:ec:46:27:c4:db:54:42:b0:
f7:e9:39:48:74:63:f6:2f:43:25:68:8b:20:60:08:
4e:35:d0:df:e3:d5:64:a4:48:e4:2c:39:32:cc:be:
25:f5:14:99:45:e9:47:21:43:f8:3a:fe:50:27:9b:
3e:3e:bd:d6:e2:a0:e5:e8:e1:4c:3b:49:59:fb:37:
90:ce:04:14:41:df:d9:57:ac:fb:c4:54:30:d2:07:
2d:96:33:ea:72:a3:90:88:15:a4:5f:d8:74:70:75:
97:85:d6:fb:80:f0:58:a9:3b:6d:ba:8f:ed:ca:e3:
97:e3:13:3a:5e:d7:2e:3e:c7:e1:d5:43:3d:86:b7:
d6:6d:c4:a7:3e:b7:0b:c6:8d:f8:49:94:55:f3:97:
67:50:ba:c6:81:0e:ae:e5:55:74:4a:c2:fd:b6:cc:
dd:60:fb:06:38:a7:ee:0c:46:a5:1a:1d:0a:49:40:
f7:c6:06:e7:55:01:02:a8:90:23:3b:c7:1b:d6:f0:
a3:23:e5:5b:d1:13:a4:93:08:26:5e:8b:b6:d3:6d:
ad:02:e6:50:f4:05:0d:88:aa:5f:28:cd:30:c2:6b:
6c:e6:15:65:34:94:6a:00:fd:a1:99:33:9f:c7:03:
d2:ae:3c:4e:1c:6b:01:2f:de:0b:f2:d9:94:4a:80:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:04:FA:57:3D:AF:39:92:40:EC:8A:00:33:07:6C:06:1A:98:D9:79
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.204.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0b:b2:11:ab:8e:77:09:55:0e:40:4c:0c:35:36:f6:2a:21:
50:ae:4e:2c:61:ef:71:40:d8:a6:a8:40:7c:93:83:7b:90:66:
b0:a7:e4:b8:3a:41:9c:3b:60:82:dd:78:de:00:4c:1c:a4:99:
9c:99:fa:a3:b0:9f:4a:19:dc:88:27:70:2b:6a:bf:79:69:20:
eb:71:0a:6d:e4:7d:93:60:98:2c:45:cb:b0:fb:bb:5c:6b:35:
a4:42:56:ed:11:07:9b:f7:90:2c:16:c4:25:91:23:d4:7f:ad:
ea:28:d1:51:d4:00:b3:ec:82:75:15:1e:44:9d:1d:d0:2c:ac:
e1:94:10:be:72:50:20:74:d6:3c:f2:be:42:9f:3a:cd:f0:a2:
b6:68:b3:79:23:9c:08:be:1d:4d:eb:d9:6b:f5:a0:91:fd:14:
50:e9:dd:a0:1d:ac:72:8e:af:0a:9b:3b:bf:44:d0:00:ca:1b:
3a:68:97:9c:07:af:91:27:00:9f:2c:b6:51:c1:1c:0f:90:ee:
69:b7:e1:13:24:8a:28:8a:a1:c4:61:9d:e6:32:75:e7:f2:39:
b5:da:54:cf:ff:d5:25:56:5e:7f:02:a6:a0:fa:70:8b:1c:b7:
c0:ae:17:18:e9:cb:81:08:5e:fe:fe:6c:eb:fa:9c:b3:81:ec:
b7:75:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org