Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36322e302f32332d3234203d3e203631313338.roa
File: 3139322e3230392e36322e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier: t0gIbLHNh5QYIhPvXPn7UzIaDitbbH+Z/xFJHIjzVwc=
Subject key identifier: 6D:CB:B2:C1:B6:53:57:79:77:A6:FD:3C:E1:8D:50:C6:48:BA:A3:BB
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 7A05584043EE4B120277AFB55DE8E7DC481082B7
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36322e302f32332d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 61138
IP address blocks: 192.209.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:05:58:40:43:ee:4b:12:02:77:af:b5:5d:e8:e7:dc:48:10:82:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=6DCBB2C1B653577977A6FD3CE18D50C648BAA3BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:d4:a4:71:d1:84:0a:aa:fd:4f:3e:0d:ae:
81:c4:8b:20:92:d3:76:11:d4:56:1b:0d:a6:f2:a4:
86:75:79:a5:f0:5b:af:23:a5:2d:8d:ba:c9:d4:8b:
13:49:7f:e9:83:f1:d5:29:a6:af:ff:47:ab:14:ea:
75:54:4a:c7:ea:73:f4:87:b7:4b:54:21:2b:d6:d3:
8e:ad:01:51:26:c1:02:89:9b:6b:2c:17:94:e9:16:
fe:ac:61:12:f0:ff:f1:c0:c8:f7:1f:c6:9c:96:0a:
6b:60:2d:48:c9:b9:8c:16:d8:12:0c:28:31:a1:6a:
02:37:42:6f:cb:79:01:8c:42:24:cd:63:77:58:ea:
e6:24:ab:bc:09:18:c1:44:2e:5d:1c:c9:22:aa:ee:
8c:18:3d:1e:1f:7c:d2:a9:cb:a7:22:67:05:e6:73:
4d:dd:a6:b4:ce:bc:a1:1d:34:a3:be:c8:4c:4c:1e:
50:51:32:4a:94:64:13:d0:24:5f:11:a1:5e:d8:c0:
8d:56:47:7a:dd:23:49:c5:68:b1:9e:2b:65:14:26:
9c:dd:42:12:8c:d9:e4:d5:7e:cc:7b:fa:05:90:73:
c0:46:44:24:09:7d:aa:90:d9:57:a1:f4:0d:9a:84:
e7:60:b5:29:a2:e6:3d:f2:40:af:bc:99:d1:52:c2:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CB:B2:C1:B6:53:57:79:77:A6:FD:3C:E1:8D:50:C6:48:BA:A3:BB
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36322e302f32332d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.62.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:c1:9f:7d:a5:af:e3:8b:e1:d2:56:fa:31:bf:52:3b:df:12:
ee:34:64:1a:89:2e:58:31:d2:99:3f:da:82:f9:d5:e1:93:1e:
5c:99:39:1e:52:41:58:fc:6c:4a:c2:ac:f1:99:90:51:b4:9c:
1a:61:36:0a:44:c8:1c:2f:b8:f9:1f:e7:30:58:aa:c5:93:2f:
1a:dd:65:5e:7c:24:5f:95:3d:f7:bd:6e:cf:f1:b2:a3:5d:42:
14:fd:7f:a0:b0:19:d0:fd:56:ef:1a:3c:2d:a4:b6:7a:8f:bc:
fe:aa:e7:43:f5:0d:9a:48:3b:9e:a5:41:ec:f8:58:ea:9c:c1:
4e:c0:c6:98:43:14:ba:33:58:0c:34:0d:4b:bc:21:d6:b3:c8:
6e:5f:60:c5:2a:1f:04:04:e8:14:52:89:d2:50:aa:71:69:db:
b6:dd:00:3d:3a:d9:15:5a:e6:3e:a1:cc:a4:24:f7:21:c6:66:
8d:bf:58:95:d9:c7:fd:c6:3f:ed:50:ac:18:eb:aa:42:cd:02:
39:d0:7d:e5:59:eb:96:d5:bd:40:2f:99:e8:a5:94:02:ba:cb:
43:87:dc:78:a3:0c:57:ac:ea:9f:cc:b4:a0:ab:1a:d3:af:58:
c3:3b:73:ff:06:c4:8e:16:33:d0:e6:6f:09:e8:ab:f3:63:76:
65:03:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:40 2025 by rpki-client