Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
File: 3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa (raw, json)
Hash identifier: 6RRB9BmQ2ALhSk4qbx33g3BvTP3F084NxCiowyViS4I=
Subject key identifier: A0:AC:77:7B:2F:7E:8A:2F:54:BC:B1:33:C5:32:61:EB:B9:C7:5C:89
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 1B1CBA827DE4E31D50D2F71FBD16C4785537333F
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 396881
IP address blocks: 192.138.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:1c:ba:82:7d:e4:e3:1d:50:d2:f7:1f:bd:16:c4:78:55:37:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=A0AC777B2F7E8A2F54BCB133C53261EBB9C75C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:11:fc:7c:73:e5:c4:9a:5c:46:cf:fe:a7:ab:
41:60:b3:cf:71:7a:91:b7:0e:3c:03:51:b7:58:cd:
6c:61:f9:0e:95:45:ca:c9:4e:95:b1:06:a0:f3:d1:
86:c2:0f:93:ee:b4:32:85:d3:90:77:36:21:ce:27:
c6:99:75:9e:d0:47:f7:92:03:cb:33:83:ee:01:73:
33:5d:46:85:d1:48:c7:60:f6:74:a3:a3:da:8c:2d:
21:92:6e:d4:80:ff:7b:ad:b9:83:e7:05:0a:c3:15:
f0:05:41:2a:15:35:2b:70:98:52:70:b1:7a:57:b4:
72:0a:0e:81:fc:07:4c:5d:b6:64:f6:b9:cc:13:01:
78:54:9a:9a:e4:48:6c:88:26:82:d1:0b:a7:82:b1:
45:29:72:78:74:93:84:fc:eb:ad:e2:64:7c:11:e8:
f4:cf:b1:3e:c6:49:cb:b5:d3:3e:26:76:d9:81:27:
4b:16:06:cf:dc:73:00:1a:ab:58:07:2b:77:f2:b5:
15:ae:4a:e7:96:30:2c:4a:6e:a6:ad:67:b1:19:59:
57:df:b2:70:ea:35:c8:18:2e:6e:33:78:9a:3d:42:
48:92:d5:7d:4d:a0:58:fc:ff:88:ef:a3:13:de:fb:
17:80:ef:84:17:7d:44:14:14:0e:a0:2e:da:46:d1:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:77:7B:2F:7E:8A:2F:54:BC:B1:33:C5:32:61:EB:B9:C7:5C:89
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.138.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:81:70:46:a3:c5:99:a1:66:1f:71:be:bb:1b:3d:19:57:b9:
07:86:2b:68:f9:3b:56:34:15:75:93:c2:d9:23:99:a1:c1:10:
b8:87:00:12:f5:01:f8:77:ac:ce:cc:e1:f2:ef:f6:4e:1b:83:
f0:b3:bd:a1:37:2b:d5:f5:15:08:4f:d5:8f:d2:01:92:0f:cc:
f1:92:c4:ea:8c:c7:eb:62:ad:97:f3:c3:8e:c6:b9:26:e8:b9:
e7:96:45:e8:ad:4b:93:37:61:f7:3b:e7:f8:53:d9:06:8f:50:
96:8d:e6:38:69:a1:a5:cb:62:35:ed:79:0a:27:da:d5:d0:21:
fd:cb:b3:52:0d:e3:6d:42:69:47:7d:24:59:7f:2c:47:18:c8:
fb:ac:88:9f:1a:48:db:a4:7a:1f:4f:7d:0b:1f:40:cf:ce:2c:
f6:5a:ee:aa:43:45:15:b7:87:62:45:d0:0e:8a:75:d2:b1:e9:
91:6b:02:bf:07:56:47:9c:d3:15:00:68:23:b1:07:cc:e3:ec:
0e:be:89:cd:87:04:98:4f:45:82:a8:af:75:34:41:f5:31:f1:
23:2e:60:41:3d:82:e1:b9:be:ba:06:bf:fb:6a:59:cd:d0:49:
dd:fb:8a:5f:40:0d:a1:e8:8f:cf:e1:83:99:50:26:c0:5d:6f:
b3:03:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:14 2025 by rpki-client