Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa
File: 3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: RwwhwPnOV8jCm3+RAsbIkkBtu948/hX16gayC7OKrag=
Subject key identifier: 7B:AA:87:B3:C4:6F:4E:20:73:6E:35:33:CF:51:71:2A:E5:AB:EF:0C
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 780C764F2AAF9EDEFE340AC25AD062F6A91E140C
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 7018
IP address blocks: 128.254.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0c:76:4f:2a:af:9e:de:fe:34:0a:c2:5a:d0:62:f6:a9:1e:14:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=7BAA87B3C46F4E20736E3533CF51712AE5ABEF0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:58:da:8d:75:51:8c:f8:60:28:47:2a:7d:
66:c3:9c:cc:99:77:07:e5:de:f4:30:e9:62:8c:26:
84:b1:f7:be:1a:3b:a2:de:e5:40:b6:d3:e6:05:b2:
55:12:ed:bf:c8:71:ac:1f:5c:e9:8f:b3:c0:fd:7b:
85:3b:8d:95:c8:de:8c:76:41:43:d7:6d:e5:d2:8d:
9b:4a:af:11:9a:c1:b2:3d:61:cc:36:af:ac:7c:47:
c0:5f:c6:d2:b1:56:ef:03:1d:17:f7:69:3c:a5:d6:
61:5b:e1:61:9b:ca:e2:ce:f4:39:5b:65:60:16:fd:
e6:f0:48:17:cd:ba:a2:18:09:ea:9b:2c:9c:f9:22:
e5:a2:73:2a:13:54:35:ac:4c:f9:fc:51:eb:38:70:
ee:44:51:79:45:f7:a7:bb:a0:0c:d2:94:4a:33:9f:
31:a3:a6:ba:25:69:6f:f2:c5:db:4a:db:84:eb:a3:
75:16:99:f1:3a:f7:e8:b8:05:e7:91:1f:84:e1:90:
39:f8:ed:ee:0a:b9:57:9f:30:50:8e:d6:99:70:18:
87:cc:5a:6e:08:12:54:1d:b7:93:6b:32:d7:b2:1c:
43:9d:61:35:48:c6:e5:82:77:e6:0b:bc:e0:ec:b7:
5e:98:46:8f:74:5d:c5:b0:14:d6:94:aa:91:4f:9e:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:87:B3:C4:6F:4E:20:73:6E:35:33:CF:51:71:2A:E5:AB:EF:0C
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0a:bf:30:92:f7:a1:ec:7b:33:43:37:18:c0:dd:2e:35:af:
04:37:05:b8:1d:56:3c:98:58:a2:dc:e6:22:91:55:19:b7:5c:
75:ec:21:dd:35:89:ae:85:58:fb:03:be:46:be:a2:62:1b:0c:
0b:63:42:dd:0a:ae:b2:a5:38:77:55:21:8b:15:13:21:8d:b4:
81:88:59:d4:90:2b:4e:27:22:63:5d:ac:d1:65:d8:f2:bf:64:
4a:24:0e:49:b3:bc:eb:f8:b7:14:b5:a2:33:bd:1e:44:32:fe:
fd:98:c1:e0:e9:94:08:c5:cc:e5:f2:dd:0c:e4:cd:3e:2d:99:
70:84:20:25:50:d4:c8:84:dc:e4:1d:42:49:de:59:c4:6e:ca:
0f:48:9a:87:50:cb:96:be:e9:9a:b9:0f:11:95:c7:65:e0:65:
f5:d9:a3:91:fc:90:6c:6a:7c:b8:53:64:b5:29:9b:83:80:15:
00:33:98:01:5b:b3:ed:6f:b2:06:8c:65:06:dd:11:db:fb:b7:
b9:81:76:95:16:3d:cf:b1:34:72:3d:8c:97:61:36:44:04:c0:
a5:85:14:3c:88:91:1c:76:46:f4:c3:3b:a0:82:6a:e1:f1:32:
27:52:19:67:b0:80:6a:e6:a3:33:68:ac:a3:6e:bb:c0:f2:de:
26:56:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org