Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa
File: 3231362e37332e3135372e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: JBD0CMgExmFMUft+jeuvfKp4iOORWqLHsbpNuYaSv+s=
Subject key identifier: 2B:77:F6:BF:4F:0E:EF:0F:0A:E2:07:E4:79:87:D6:BC:87:E4:03:41
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 5C00155D068410DF62FE17BF0AFD6F02E51767EB
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 61138
IP address blocks: 216.73.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:00:15:5d:06:84:10:df:62:fe:17:bf:0a:fd:6f:02:e5:17:67:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=2B77F6BF4F0EEF0F0AE207E47987D6BC87E40341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:7b:50:e0:ce:0d:74:4d:ed:c9:c8:0a:ee:
5e:65:5f:f2:9c:c3:a1:26:f1:98:47:bb:ce:40:fa:
73:28:72:90:e6:d3:b6:de:11:b5:10:26:3a:bb:e7:
bc:66:9c:40:a8:3f:0c:f5:ba:3c:18:d3:bb:d1:77:
fb:1e:8c:d6:ca:14:36:ae:51:4c:96:d9:c3:80:4d:
40:13:f5:83:3d:b2:8d:93:3d:74:c7:8a:61:1e:2d:
73:bc:9d:f9:2a:5a:0f:e1:74:a9:82:71:fe:d7:d4:
8b:f4:2b:ce:24:44:e2:f5:3f:6f:0c:d9:4d:a6:de:
be:38:9e:05:fc:f4:9b:eb:b0:85:79:f9:30:f7:64:
05:50:17:4f:d1:93:c5:b4:bc:19:57:86:db:5e:e4:
2b:05:35:af:4c:df:75:c7:15:6c:1c:39:75:05:f6:
8e:ac:fe:36:6a:15:7c:83:f4:03:f4:f5:1e:36:0f:
bc:4f:35:0e:61:60:9d:72:56:2f:d5:e6:72:77:f3:
27:1e:07:8c:4a:03:fe:c8:bc:fb:33:4e:ea:41:bd:
07:7b:dd:21:16:e4:df:33:a7:0e:78:45:ba:0a:67:
73:89:ba:71:64:60:56:d8:67:04:16:71:df:8d:ec:
3e:77:d7:42:c0:86:2f:85:7f:64:82:9f:f3:25:d1:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:F6:BF:4F:0E:EF:0F:0A:E2:07:E4:79:87:D6:BC:87:E4:03:41
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.73.157.0/24
Signature Algorithm: sha256WithRSAEncryption
09:10:d6:8c:da:bd:37:a0:78:05:51:26:0d:be:83:b2:f6:34:
4d:b3:3d:d7:ce:17:f3:e7:b7:6a:4b:50:ef:be:ea:2b:0d:d6:
c8:de:6b:68:82:1f:a3:eb:e6:5a:12:d2:f0:87:ea:e9:07:a9:
1c:ee:b0:24:a1:d1:45:3b:e6:ba:d2:77:ee:d8:6b:1d:3b:94:
a3:c8:8b:39:0e:aa:bd:a7:a1:f7:be:42:39:2d:0f:5c:c4:cf:
be:ec:75:1f:7f:53:c0:4b:f2:1e:d5:79:dd:06:4a:bf:8c:8a:
51:07:8c:4d:93:96:25:0e:63:5e:f6:33:c5:db:70:bc:e6:c0:
3d:14:14:4e:0f:dc:b3:56:86:91:02:e5:3f:8d:9c:35:bd:f3:
61:ff:d7:26:fd:b1:40:56:08:a4:f7:3a:e7:1a:df:30:31:b4:
63:6a:5b:61:d9:01:28:02:b7:40:01:dc:3b:31:c8:d3:7b:43:
09:ec:1d:39:ee:f1:dc:9f:ec:bf:b0:f6:da:fa:b0:a3:8c:2d:
04:59:1a:18:c1:ec:95:ea:e3:9c:24:8a:0b:78:b7:6b:b6:59:
0f:5e:57:61:2a:57:b5:b4:a3:77:bf:a0:eb:dd:6d:94:3e:0f:
aa:9a:95:a9:f4:a6:32:92:3a:62:64:a9:53:d0:55:47:dd:db:
82:02:0b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org