Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135362e302f32322d3234203d3e203631313338.roa
File: 3231362e37332e3135362e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: 6qGAxEaZbEIoJrc6WEMuA2USdMbGr5Az0VpbJAcRPtU=
Subject key identifier: E6:A4:3E:18:61:95:DC:79:E3:4E:9B:B6:56:19:85:37:72:5B:9F:03
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 019EA7173B40CD244BC7A291083F2638B5CB4BA0
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135362e302f32322d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 61138
IP address blocks: 216.73.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:17:3b:40:cd:24:4b:c7:a2:91:08:3f:26:38:b5:cb:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=E6A43E186195DC79E34E9BB656198537725B9F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:f7:a5:4f:3b:a7:15:35:97:7e:bd:99:2b:
80:66:05:11:22:ff:56:ad:1d:fb:ca:95:b0:a8:47:
60:cd:56:9b:c8:7a:1b:76:b4:3c:1f:31:f7:95:df:
9c:80:61:ab:61:0f:21:55:f7:e2:24:2c:99:5a:0e:
0d:06:e8:84:08:53:c7:3b:ad:bb:9a:44:4b:9c:f2:
e7:da:af:5b:1a:58:a2:52:6b:b2:89:a1:13:df:7d:
f2:f3:e2:70:00:5d:ec:f0:02:c4:e6:b6:a9:c7:2f:
ec:88:dd:53:f5:80:bc:e4:c3:f2:af:7d:94:fc:f4:
c9:90:12:52:c3:5c:8e:5d:26:ff:88:9f:75:48:e6:
84:0a:48:cb:c6:3c:9e:7b:4a:e4:11:0e:1c:1f:d4:
78:ad:3d:7f:5e:6a:e4:09:5f:8e:6d:2e:1f:f5:89:
08:c2:78:1d:84:36:2e:2d:d9:43:f4:dd:28:b7:da:
c4:a2:0b:ce:f7:91:85:1b:c3:26:70:3f:3b:87:81:
54:ea:dc:25:c7:f0:cf:7e:8f:fd:ac:ad:10:20:9d:
58:a0:24:52:3d:48:21:a8:80:91:2b:ca:ff:07:65:
5c:95:9d:0f:1b:bb:55:d5:e4:47:72:4b:0b:fc:57:
e0:c2:92:6c:c3:6c:aa:8a:a7:ce:00:b8:d2:89:77:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:3E:18:61:95:DC:79:E3:4E:9B:B6:56:19:85:37:72:5B:9F:03
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135362e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.73.156.0/22
Signature Algorithm: sha256WithRSAEncryption
14:e0:f2:6a:36:75:70:14:6e:16:3f:7b:18:89:e8:dc:94:20:
51:3a:09:e6:16:65:c4:f0:68:af:07:f7:8e:8b:66:96:72:db:
cb:a1:a0:0b:c6:35:a9:35:21:7f:df:e6:32:3e:e1:41:9f:9c:
e2:bb:be:b8:d4:4f:10:13:5b:52:b7:65:35:1d:2a:41:e4:0a:
73:a4:8b:24:d3:c9:a9:8e:41:5d:fb:09:a5:bc:e0:6c:c3:33:
f1:15:74:a5:5e:27:63:88:d4:ac:38:1e:a6:85:22:61:b2:6b:
5c:f8:bc:74:2e:e7:66:06:dc:a2:28:31:f0:ea:0a:7d:08:c8:
56:1e:be:20:2b:d8:ee:d6:80:ee:8e:d7:c8:d9:4a:27:c1:08:
03:1b:11:60:f3:ad:29:29:b5:ab:b9:2d:4b:58:e9:5e:12:cc:
3e:e9:d6:e3:82:80:cc:6b:dd:ca:04:63:29:42:67:99:cf:81:
ee:93:38:03:49:41:70:c0:4e:5b:0f:51:9b:4a:cb:5c:8f:53:
69:f4:d0:cd:c4:62:3d:52:b8:b0:76:00:63:8e:7b:5b:e8:1f:
9d:1f:42:20:d8:4b:b3:cd:47:15:ff:00:57:c7:f4:6e:4b:21:
ed:d1:6c:81:74:fa:be:c2:4f:27:63:61:c8:e8:f4:69:2c:f4:
a8:23:2d:bc
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUAZ6nFztAzSRLx6KRCD8mOLXLS6AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZk
YWIzYTgxYTg4ZDhhNDhhNDYwHhcNMjMwMTAxMjM1NDI2WhcNMjMxMjMxMjM1OTI2
WjAzMTEwLwYDVQQDEyhFNkE0M0UxODYxOTVEQzc5RTM0RTlCQjY1NjE5ODUzNzcy
NUI5RjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDf3pU87pxU1
l369mSuAZgURIv9WrR37ypWwqEdgzVabyHobdrQ8HzH3ld+cgGGrYQ8hVffiJCyZ
Wg4NBuiECFPHO627mkRLnPLn2q9bGliiUmuyiaET333y8+JwAF3s8ALE5rapxy/s
iN1T9YC85MPyr32U/PTJkBJSw1yOXSb/iJ91SOaECkjLxjyee0rkEQ4cH9R4rT1/
XmrkCV+ObS4f9YkIwngdhDYuLdlD9N0ot9rEogvO95GFG8MmcD87h4FU6twlx/DP
fo/9rK0QIJ1YoCRSPUghqICRK8r/B2VclZ0PG7tV1eRHcksL/FfgwpJsw2yqiqfO
ALjSiXd58wIDAQABo4ICzTCCAskwHQYDVR0OBBYEFOakPhhhldx5406btlYZhTdy
W58DMB8GA1UdIwQYMBaAFBoFA0MLqZP3D4mr6EIb90Y/5cq/MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1
LWJhMWU5YjMzNmQ2Mi8xLzFBMDUwMzQzMEJBOTkzRjcwRjg5QUJFODQyMUJGNzQ2
M0ZFNUNBQkYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2Mt
NDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1k
MzFlNThiYzNjYTQvZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZkYWIz
YTgxYTg4ZDhhNDhhNDYuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8xLzMyMzEzNjJl
MzczMzJlMzEzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTMxMzMzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAthJnDANBgkqhkiG9w0BAQsFAAOCAQEAFODyajZ1cBRuFj97GIno
3JQgUToJ5hZlxPBorwf3jotmlnLby6GgC8Y1qTUhf9/mMj7hQZ+c4ru+uNRPEBNb
UrdlNR0qQeQKc6SLJNPJqY5BXfsJpbzgbMMz8RV0pV4nY4jUrDgepoUiYbJrXPi8
dC7nZgbcoigx8OoKfQjIVh6+ICvY7taA7o7XyNlKJ8EIAxsRYPOtKSm1q7ktS1jp
XhLMPunW44KAzGvdygRjKUJnmc+B7pM4A0lBcMBOWw9Rm0rLXI9TafTQzcRiPVK4
sHYAY457W+gfnR9CINhLs81HFf8AV8f0bksh7dFsgXT6vsJPJ2NhyOj0aSz0qCMt
vA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org