Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa
File: 3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: UdzVGLnCIzWE8DTMCeC8IgLJuc/F2d5wq92vG3sGVj0=
Subject key identifier: 68:FF:BD:30:FF:09:DF:4E:30:40:AC:4D:4F:59:CB:B7:00:10:42:9E
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 6F3CC14D0D4D9B014821A1E744A1BFFAC4970D16
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 138995
IP address blocks: 192.209.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3c:c1:4d:0d:4d:9b:01:48:21:a1:e7:44:a1:bf:fa:c4:97:0d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=68FFBD30FF09DF4E3040AC4D4F59CBB70010429E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:f4:38:24:b2:56:56:ec:d3:ec:55:2a:86:
b6:cb:0f:de:43:05:9c:67:82:c1:2c:a3:b3:9a:71:
c5:1b:74:68:65:86:1a:12:d2:b5:bd:34:b8:e2:4f:
7c:76:3f:45:de:f6:03:0b:ff:00:23:df:32:7b:b2:
d3:a4:a1:1b:b8:0e:04:97:04:4e:66:5b:e5:af:58:
32:c7:19:3f:81:bb:66:31:8f:9e:c7:be:48:48:eb:
c0:b1:f9:a5:0d:a3:ac:3c:4c:10:8e:42:88:18:b8:
65:c5:e0:b3:b3:3a:bf:a1:64:08:f6:5e:fb:ae:77:
fc:1f:d1:ea:ba:ba:fd:ff:be:44:4a:5e:a3:af:2e:
5c:cd:8f:e5:dc:5e:67:63:fc:d6:1e:ca:9e:ef:f1:
d3:5a:a2:4d:9e:38:c0:60:09:e2:ed:27:03:64:3a:
93:31:65:e6:5e:ad:9a:8c:59:93:d8:2c:09:1b:a1:
57:07:ce:fd:fd:0a:5b:9b:ff:bf:09:a7:d4:5e:53:
8d:c7:00:77:28:d2:24:38:ed:7c:1f:cf:7a:55:4e:
bc:26:c9:f0:42:71:2b:f9:92:ba:9b:70:6b:6e:51:
12:ec:f1:65:29:b6:a9:d0:94:57:da:cf:af:41:74:
00:ec:d4:07:5c:93:45:a9:87:44:03:f8:84:05:8d:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:BD:30:FF:09:DF:4E:30:40:AC:4D:4F:59:CB:B7:00:10:42:9E
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4c:01:4b:dc:d9:8b:27:54:ac:bd:63:52:52:4e:f0:a8:85:
d2:8e:7b:1c:1f:fa:b3:40:a8:6e:3d:a4:cc:90:25:9d:b9:82:
c3:a4:21:14:99:97:d9:35:6f:ee:f2:12:8e:3d:9b:9d:29:ec:
2b:c4:e4:95:da:4d:63:8e:a9:e9:5f:f5:69:df:d3:be:5e:c7:
5b:b6:03:55:44:a8:08:5b:8c:38:a3:65:25:bb:35:22:98:ff:
36:ad:15:2a:75:4e:56:3f:e4:f5:0e:90:e1:29:b1:76:eb:c4:
85:76:bb:2a:12:b2:5c:65:9a:68:5e:81:3e:f2:ca:df:6b:c1:
a5:3e:be:11:4f:93:1c:bd:33:c4:00:04:f0:c8:dc:ad:ea:2c:
f5:96:8b:5f:2c:a3:09:66:86:e1:a0:98:04:c2:16:bf:72:06:
64:f8:9a:b8:e5:de:da:69:3c:1e:3a:7c:be:c1:33:2b:14:a6:
1d:57:6e:4a:84:ea:07:61:70:cd:92:04:7e:db:d4:72:53:25:
9f:fa:d5:3f:10:a6:df:bc:1c:1d:23:11:03:67:4b:7b:a4:31:
55:37:ee:2a:14:78:f5:08:11:a1:f2:ae:05:59:8e:86:83:bb:
59:5e:9e:69:d3:24:01:44:87:bc:61:6e:eb:3b:8f:3a:40:b8:
72:3a:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org