Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
File: 3231362e37332e3135392e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: 5DmMjyIMJfCu+TxM2GrfC5Hv5ehAzsyeduqLRzMZW94=
Subject key identifier: 3C:8C:F9:E3:A3:03:C1:D0:EB:FD:51:E1:AB:91:11:7A:53:DD:05:F1
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 3D05CF9172BBA755CC760C5AA30C612434B6FCC4
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 61138
IP address blocks: 216.73.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:05:cf:91:72:bb:a7:55:cc:76:0c:5a:a3:0c:61:24:34:b6:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=3C8CF9E3A303C1D0EBFD51E1AB91117A53DD05F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:45:45:a2:5b:c0:70:5f:95:e9:60:20:bc:
12:e8:8f:42:6d:0a:46:8b:90:a8:ed:c5:37:a3:61:
72:c9:62:02:2b:68:c8:5c:0e:b2:e1:18:70:00:09:
d2:d7:ab:c2:c1:17:33:50:68:2c:64:01:70:45:84:
99:57:76:cb:62:25:ef:2e:f3:dd:3f:c9:51:92:d1:
06:dd:e9:bc:28:fa:d7:1b:21:26:6f:e9:2d:ea:ef:
06:8e:87:1c:04:62:f5:f7:df:b3:cd:e4:74:0d:1a:
dd:01:af:15:7d:67:5e:9d:23:51:b1:71:0c:90:69:
f1:65:c7:db:51:97:46:02:06:81:12:1e:83:9b:bb:
c6:ec:b0:fd:64:a3:10:0e:41:5f:70:3e:6a:f2:c3:
6e:ec:af:ea:fc:c4:ba:24:ac:32:f8:e3:be:00:84:
f0:9d:8e:f4:e9:1c:99:f6:22:6d:0c:79:1c:00:1a:
22:aa:5a:32:ec:e7:db:ed:58:cf:e7:ce:4f:1b:25:
13:94:e7:c1:7c:d7:0b:fe:1a:55:61:4d:d0:dc:ad:
3c:b9:fb:05:fb:3b:2e:df:92:c9:2a:1c:1c:89:38:
84:da:2a:cd:63:a8:dc:f0:5d:f4:81:ba:14:ec:00:
3d:97:e1:39:4d:ad:61:12:b2:a7:20:fd:93:3e:79:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:F9:E3:A3:03:C1:D0:EB:FD:51:E1:AB:91:11:7A:53:DD:05:F1
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.73.159.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8d:55:e2:f7:e6:3e:0e:25:4c:57:14:69:c9:83:b8:b4:ad:
1b:85:3b:6c:49:55:d1:56:4b:51:56:1a:a5:69:e5:2b:32:e2:
15:dd:6d:57:12:95:a9:13:e7:24:97:0b:f8:01:47:6c:60:a4:
cb:64:e7:94:c1:b8:98:9f:8c:88:5b:a3:df:1f:8d:b6:f0:0c:
85:92:ef:15:77:b2:a2:31:1f:91:9a:ff:43:6e:ab:00:d8:fd:
5b:f7:11:13:44:7e:18:e8:a7:b5:c7:76:37:a2:22:3b:c1:7b:
06:48:d1:fe:85:09:ec:7b:a2:1e:2c:31:d0:00:47:c5:fa:7b:
76:9c:c1:17:7a:96:8e:18:3e:0d:ec:54:93:74:37:61:52:d6:
f6:e7:eb:9a:86:3a:dc:9e:87:8a:95:49:c0:79:63:b8:e1:49:
5d:10:c8:50:ff:97:25:76:d3:54:fe:d5:a8:94:a7:42:da:c0:
4f:d0:cc:56:f5:31:7b:bf:d9:b4:31:ed:e8:db:36:26:0e:4d:
69:a9:38:57:2f:3e:76:d3:67:1f:4d:5e:c3:24:21:dc:fc:89:
e3:0d:4b:99:f9:9d:a3:81:39:72:7a:8d:24:b0:70:38:b8:d4:
9d:d4:04:2e:5f:fb:36:f4:89:e0:cc:e0:77:54:22:e2:ed:11:
f0:75:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:15 2025 by rpki-client