Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa
File: 3139322e3230392e36332e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: SKOnTZZTXnhK5Ft4T61KvcO7KWLyIz6oK9zDDne0tRQ=
Subject key identifier: E6:E7:0A:B1:FC:3C:AD:8E:24:E8:2F:66:57:8A:1E:9D:49:18:F3:99
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 48A2550DF4CAE66F998AFBF87311A083042650F3
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 8100
IP address blocks: 192.209.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a2:55:0d:f4:ca:e6:6f:99:8a:fb:f8:73:11:a0:83:04:26:50:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=E6E70AB1FC3CAD8E24E82F66578A1E9D4918F399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:ce:7c:59:d5:41:1c:af:ed:41:80:2f:ea:
f8:a7:f5:60:d1:86:5c:1d:35:e4:1e:12:17:a0:40:
5a:ec:38:53:30:8f:11:03:a5:4a:10:dd:55:bb:3e:
39:0f:35:87:dd:f7:2c:8f:87:af:96:ec:72:fb:45:
b1:aa:cb:21:94:60:ac:28:0a:ef:a5:25:5e:49:b1:
b6:42:07:22:22:47:ca:04:c3:f1:a0:f9:83:80:1c:
10:4f:73:3d:26:3a:89:6f:43:9f:5e:81:e9:2a:4c:
83:f7:a7:ab:d1:12:35:67:a0:63:a7:56:a1:51:3a:
67:cc:75:0a:99:15:42:61:bd:2c:f6:93:bf:11:2a:
db:89:93:9d:d7:b5:ea:d8:f8:c3:c4:05:49:7f:27:
c4:34:af:78:51:65:c0:eb:73:0b:75:eb:77:a5:ad:
9b:6f:36:30:9b:f2:05:92:a8:97:c1:d7:cb:02:3e:
5a:f2:3f:f3:ad:7f:2b:78:12:18:97:41:2d:f6:5a:
da:70:13:dc:fe:8f:4b:3b:64:d7:ea:50:bc:a8:bc:
29:d7:18:56:29:30:83:12:15:29:bc:92:03:f1:ce:
ce:f8:1c:8d:e6:02:13:93:5c:7d:c9:e3:9d:2b:d9:
f5:27:1a:82:e2:b3:94:ed:cb:4e:44:6b:22:84:46:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:0A:B1:FC:3C:AD:8E:24:E8:2F:66:57:8A:1E:9D:49:18:F3:99
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.63.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f2:42:14:2f:a5:de:a1:32:91:59:51:18:87:44:c5:52:69:
fb:cb:d2:d4:64:44:d5:30:19:f1:af:e3:ed:c3:ea:29:69:39:
f4:03:e3:82:aa:8b:45:28:de:bd:c0:a4:98:da:f8:93:a4:40:
41:e9:ce:a3:40:5c:03:10:2a:a8:56:bd:76:3f:91:27:20:ba:
1e:67:7f:14:e8:2e:ae:7e:5e:5b:10:ec:90:5e:f1:54:5f:4d:
dd:88:ad:f0:90:0c:34:06:88:7e:15:f1:48:d7:73:84:3f:35:
ff:8f:80:b9:9a:37:14:e2:77:2d:76:30:39:83:a0:92:c6:f3:
ca:c9:0f:45:1b:cc:91:5f:2e:7e:1d:be:13:62:f1:ec:33:33:
8f:c2:1a:2d:ee:43:e0:c7:f2:f7:9a:e5:54:2b:6a:1a:c7:bc:
3d:0b:5c:cf:86:8f:a3:68:63:11:ce:1b:c9:3f:df:aa:b3:82:
b3:47:c9:35:41:97:07:11:f6:22:04:37:f4:2a:69:e1:10:44:
de:ff:57:b3:53:40:2c:72:e4:86:4c:6f:b8:30:d0:6a:2c:1c:
3e:ee:4c:35:25:7a:ec:f5:9a:d1:75:32:ab:9a:84:73:b0:3d:
17:d3:6f:32:85:5a:12:9c:ef:c6:69:8f:5f:76:62:b7:6e:79:
cb:75:da:00
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUSKJVDfTK5m+Zivv4cxGggwQmUPMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZk
YWIzYTgxYTg4ZDhhNDhhNDYwHhcNMjMwMTAxMjM1NDI2WhcNMjMxMjMxMjM1OTI2
WjAzMTEwLwYDVQQDEyhFNkU3MEFCMUZDM0NBRDhFMjRFODJGNjY1NzhBMUU5RDQ5
MThGMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pnOfFnVQRyv
7UGAL+r4p/Vg0YZcHTXkHhIXoEBa7DhTMI8RA6VKEN1Vuz45DzWH3fcsj4evluxy
+0WxqsshlGCsKArvpSVeSbG2QgciIkfKBMPxoPmDgBwQT3M9JjqJb0OfXoHpKkyD
96er0RI1Z6Bjp1ahUTpnzHUKmRVCYb0s9pO/ESrbiZOd17Xq2PjDxAVJfyfENK94
UWXA63MLdet3pa2bbzYwm/IFkqiXwdfLAj5a8j/zrX8reBIYl0Et9lracBPc/o9L
O2TX6lC8qLwp1xhWKTCDEhUpvJID8c7O+ByN5gITk1x9yeOdK9n1JxqC4rOU7ctO
RGsihEZd0QIDAQABo4ICyzCCAscwHQYDVR0OBBYEFObnCrH8PK2OJOgvZleKHp1J
GPOZMB8GA1UdIwQYMBaAFBoFA0MLqZP3D4mr6EIb90Y/5cq/MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1
LWJhMWU5YjMzNmQ2Mi8xLzFBMDUwMzQzMEJBOTkzRjcwRjg5QUJFODQyMUJGNzQ2
M0ZFNUNBQkYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2Mt
NDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1k
MzFlNThiYzNjYTQvZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZkYWIz
YTgxYTg4ZDhhNDhhNDYuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH
MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8xLzMxMzkzMjJl
MzIzMDM5MmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMTMwMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADA0T8wDQYJKoZIhvcNAQELBQADggEBAAnyQhQvpd6hMpFZURiHRMVS
afvL0tRkRNUwGfGv4+3D6ilpOfQD44Kqi0Uo3r3ApJja+JOkQEHpzqNAXAMQKqhW
vXY/kScguh5nfxToLq5+XlsQ7JBe8VRfTd2IrfCQDDQGiH4V8UjXc4Q/Nf+PgLma
NxTidy12MDmDoJLG88rJD0UbzJFfLn4dvhNi8ewzM4/CGi3uQ+DH8vea5VQrahrH
vD0LXM+Gj6NoYxHOG8k/36qzgrNHyTVBlwcR9iIEN/QqaeEQRN7/V7NTQCxy5IZM
b7gw0GosHD7uTDUleuz1mtF1MquahHOwPRfTbzKFWhKc78Zpj192Yrduect12gA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org