Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa
File: 3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: 0wTmukJpkxfTFMHiAy5MqfZV1vjn9DecY4yRtcsGaQg=
Subject key identifier: 43:AF:F9:B1:F8:7F:1A:1E:34:09:51:37:C2:B1:47:E4:5F:88:66:F5
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 15526A41933EE691FCDC9BC876B48F37D0BEAE15
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 7018
IP address blocks: 128.254.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:52:6a:41:93:3e:e6:91:fc:dc:9b:c8:76:b4:8f:37:d0:be:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=43AFF9B1F87F1A1E34095137C2B147E45F8866F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:24:15:4a:51:10:10:c4:44:84:bb:ba:4c:
a5:2e:a1:a5:d7:f3:8d:e8:0f:67:3b:fd:9f:e9:6a:
cb:f7:86:35:21:76:7b:0b:91:13:eb:0e:0e:46:cf:
ac:2a:69:c2:3d:c3:f0:bf:9d:2a:6e:89:6b:40:36:
b6:aa:64:6a:30:27:50:9b:1e:42:e7:d3:74:03:59:
a8:90:2c:fc:2a:40:01:25:db:e4:2c:c1:f9:0c:75:
55:cf:d2:82:81:f7:50:76:8f:7f:50:b1:c3:0c:a5:
79:2c:80:29:fe:94:d1:47:cb:99:b6:1f:ed:35:c6:
76:99:de:e9:d9:5a:81:f0:3c:3b:08:3e:ca:68:c6:
27:9e:0e:a4:80:25:95:8a:1d:85:8b:dd:11:f5:5c:
85:85:1a:62:95:84:bc:cb:e6:eb:9e:d8:fa:34:c7:
d2:0b:4b:e5:90:01:3e:6b:22:ee:1b:3c:b1:e1:4e:
fd:2e:e9:bf:69:4b:6f:97:46:de:c9:1d:52:00:03:
9a:59:6a:d4:ff:9d:02:04:ec:23:8e:e7:30:34:65:
0a:f0:c2:90:ed:85:d6:f2:09:df:8d:ea:a3:85:2c:
8b:53:96:de:7a:f4:f6:78:a0:be:f9:48:29:1d:b3:
81:f4:2e:e3:2b:52:f7:d1:6a:ee:b2:b3:ef:ce:01:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AF:F9:B1:F8:7F:1A:1E:34:09:51:37:C2:B1:47:E4:5F:88:66:F5
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.206.0/24
Signature Algorithm: sha256WithRSAEncryption
04:47:ae:d7:ae:48:e3:7f:6f:aa:7c:f6:1f:fd:08:a2:8d:4c:
a4:a2:fa:e8:ae:e2:a8:99:10:52:33:fd:72:fe:7c:fe:92:05:
fc:7a:36:d5:56:5d:56:88:ff:c6:de:f5:d9:89:27:e8:31:41:
09:ba:d6:65:9e:a0:b6:c4:9c:66:85:d5:b4:9f:65:81:60:2e:
08:e1:9c:86:36:7c:7d:fd:a7:f1:e4:82:68:c3:ec:a5:9b:68:
11:8f:15:10:97:fa:31:c0:6e:06:2d:e0:a6:f2:b1:bc:40:6c:
3a:3a:63:b6:11:4b:09:4e:c2:f2:0d:1d:21:16:bb:16:2e:ec:
cf:e2:20:05:85:7a:3e:5f:78:3b:d7:c6:a1:c0:8e:62:e3:33:
6b:17:a2:a0:62:59:cb:49:02:ed:72:74:92:c3:b3:05:94:de:
d7:86:58:d9:2c:84:16:80:7b:2a:f1:5f:d0:db:03:a1:a7:0b:
2e:59:bd:e3:97:11:5d:45:ab:41:cd:c2:08:1a:98:88:11:05:
7a:53:81:12:68:03:b3:41:e6:28:bd:8f:ba:96:27:02:de:65:
d1:f1:f3:d0:53:d4:09:7a:83:09:12:2b:27:cb:30:f2:fa:d0:
cd:d9:6f:2b:c1:56:25:f4:7b:b2:a1:d9:08:56:1d:25:6b:b5:
28:98:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:56 2025 by rpki-client