Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
File: 3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: ERFkGmTGzFjtMcIgrK/OpsDtT4V8VEyhADTuXqKRIhk=
Subject key identifier: DE:EC:17:F6:B0:C5:FE:72:1C:5D:22:11:F3:C9:ED:8A:B5:A6:E3:98
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 04E4A02E20664570CB385B1F19B128AF5F0920DC
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 23470
IP address blocks: 128.254.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e4:a0:2e:20:66:45:70:cb:38:5b:1f:19:b1:28:af:5f:09:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=DEEC17F6B0C5FE721C5D2211F3C9ED8AB5A6E398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:da:4e:72:5c:84:d1:44:38:58:f9:07:39:
fc:54:21:67:b2:66:df:9c:1e:a5:0b:2e:66:9f:85:
f0:9c:53:43:86:ee:62:0b:3c:a2:f5:1a:7c:ef:52:
d2:5b:3a:45:88:61:54:b1:ef:be:33:99:b6:bb:85:
77:0e:63:21:78:a2:33:47:5f:2f:00:72:02:57:1e:
0d:91:fc:41:9e:a3:1c:91:2b:1a:46:05:83:93:6f:
9a:0e:f9:6c:18:80:79:3d:23:ab:6f:84:a3:2c:0d:
b2:e5:6c:d8:8b:65:62:84:69:de:48:f7:4b:b1:a9:
42:1a:95:a2:db:cf:ad:4a:42:40:4f:b6:bc:00:ec:
09:ad:80:61:00:28:db:4e:69:a2:31:6a:ad:15:65:
dd:ce:a1:ed:6b:ef:6c:53:6d:0f:e0:19:86:80:d3:
1e:03:d4:01:ea:4d:05:f1:09:ef:9e:59:0d:20:fb:
32:71:36:94:60:f9:eb:a3:06:18:92:0f:ad:ad:ed:
11:cc:54:be:9d:a2:c5:a2:3a:42:b6:e8:91:46:95:
0a:59:b2:e2:b5:dd:78:b2:a8:b2:45:41:c9:9f:8a:
89:30:98:d8:61:28:c9:1c:71:98:b8:28:91:94:b6:
39:39:63:8d:5f:4a:ac:04:2c:28:74:5f:80:3b:a2:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EC:17:F6:B0:C5:FE:72:1C:5D:22:11:F3:C9:ED:8A:B5:A6:E3:98
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.207.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9f:aa:1c:47:ad:9b:36:0f:59:43:9a:f3:26:43:83:a6:cd:
71:de:c3:63:f1:c4:53:ac:f9:4a:da:83:ac:5b:10:fd:54:06:
96:10:0d:2b:d2:57:a2:4f:db:93:68:67:88:1e:29:40:f1:d3:
eb:09:e2:0b:3b:1b:f5:fc:a4:16:5f:59:11:f2:03:06:66:fb:
a6:6a:52:ea:a7:d6:51:ee:43:f4:0e:72:73:fd:7c:10:f4:e9:
f0:7c:b5:4c:c9:3d:cd:79:3f:f4:92:51:42:05:78:62:f9:80:
2c:ab:32:9d:a0:28:6c:22:a3:83:a2:37:0e:51:22:e9:b7:89:
cc:68:16:23:fd:0f:66:3f:40:eb:e4:6b:cf:0e:94:0e:a5:9e:
85:d4:45:ac:36:b6:e4:66:0c:43:96:56:3d:b3:0d:64:9b:b5:
d1:f9:b4:26:e3:01:07:15:f5:29:d0:75:62:c2:60:c0:f2:05:
db:24:5f:36:95:6f:ef:3a:b9:cb:6c:b1:f8:8e:88:98:88:84:
c6:99:5a:ba:89:cf:e3:ad:74:41:94:67:61:f2:b9:69:d7:a0:
3a:a9:43:dc:c6:79:23:e6:4c:dd:2b:1c:5f:0a:ae:0f:03:68:
8a:f8:ed:cb:dd:c7:94:c4:b9:06:ff:e8:ec:a5:af:ec:05:a7:
ba:30:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org