Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
File: 323630323a663833643a3a2f34302d3438203d3e203133353237.roa (raw, json)
Hash identifier: 0EyT4KIH23HNam/uNIaOZNYn7AjH/08rfgpbBQQxByU=
Subject key identifier: 0B:A6:C9:4C:01:7D:47:10:BE:8B:6C:49:78:98:4B:5F:A7:0D:BC:E1
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 3CD736611EE3AD7FBC3A70EADB4202E2D6C814FF
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
Signing time: Tue 05 Nov 2024 18:47:01 +0000
ROA not before: Tue 05 Nov 2024 18:42:01 +0000
ROA not after: Tue 04 Nov 2025 18:47:01 +0000
asID: 13527
IP address blocks: 2602:f83d::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d7:36:61:1e:e3:ad:7f:bc:3a:70:ea:db:42:02:e2:d6:c8:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Nov 5 18:42:01 2024 GMT
Not After : Nov 4 18:47:01 2025 GMT
Subject: CN=0BA6C94C017D4710BE8B6C4978984B5FA70DBCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:56:90:de:7d:c4:f7:86:aa:32:9d:4f:c1:
ce:a0:c2:e1:90:d4:3e:c9:ec:cb:3d:73:cb:3d:4c:
2a:22:81:51:0f:23:c9:6a:29:fc:bb:9f:14:7d:7e:
09:da:be:a8:e1:b2:f3:d9:31:eb:f5:52:6b:6f:80:
65:2f:95:b4:96:27:13:f1:89:e6:ed:2a:5d:53:dc:
4c:26:60:9d:37:86:b6:d9:7d:4d:1a:c5:3f:9c:20:
e1:c6:33:73:ca:9b:d6:6c:96:1a:9f:14:aa:12:f1:
6a:b1:e0:a5:d2:ce:a5:5d:de:72:83:31:86:a2:6e:
8e:a3:89:3b:39:00:1d:f1:5c:0f:05:ab:bd:92:6c:
15:9b:24:f0:88:c6:48:c0:b0:59:68:4c:3d:f4:3b:
fa:8f:3e:f4:f2:c6:86:f7:67:b4:a4:62:c5:cb:e3:
99:59:44:83:88:dd:4f:4e:d0:bc:76:26:0a:cf:bd:
db:50:93:4f:93:0e:68:93:a3:39:7e:e7:8f:ec:09:
18:9b:2c:f7:80:e7:e3:fc:b9:76:25:3a:c5:db:6b:
fe:5b:94:8b:03:fc:b8:9e:83:58:c6:5b:ba:6a:ad:
84:e6:3f:42:65:81:81:7c:94:50:dd:31:3d:40:61:
7b:8e:a5:b8:0d:28:a3:4f:94:ba:ca:7c:4b:ac:60:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:C9:4C:01:7D:47:10:BE:8B:6C:49:78:98:4B:5F:A7:0D:BC:E1
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/40
Signature Algorithm: sha256WithRSAEncryption
46:64:ed:a3:ad:a3:0c:f8:2f:10:07:e3:c8:2e:e8:04:0e:72:
35:ec:2b:ff:6a:0a:86:81:55:80:55:99:b1:c8:ab:6a:26:47:
cf:02:2e:8f:39:bd:c0:7b:f0:b6:98:c1:84:22:55:4c:0b:79:
6a:b1:b4:f2:b1:ac:83:85:3e:da:71:d4:5f:06:ab:58:3f:68:
c0:30:a5:95:0e:3f:8c:1d:0c:11:b9:ec:fa:f8:b1:b4:2f:52:
f2:84:25:27:75:03:1f:35:6b:d0:f1:68:49:15:c9:4c:db:1d:
83:4f:76:5c:38:1b:53:b9:d2:08:4d:bc:4f:e3:4b:af:2c:31:
d7:f3:ff:85:f1:a0:5f:39:9c:7b:b9:71:a5:cb:94:fe:29:1d:
69:5f:a7:37:62:54:50:8f:26:1b:02:40:32:96:6b:16:10:ae:
fe:90:31:54:f6:42:42:a5:d4:fe:59:ee:cd:d5:45:0e:c2:83:
ba:8a:07:04:70:37:68:7c:7d:f6:5a:78:5c:76:bf:04:fc:95:
e9:55:96:42:80:e0:90:51:c0:c4:f0:b9:90:37:de:42:bf:f1:
23:ff:30:7b:e1:79:e2:e6:cc:26:e2:8c:6c:02:e8:8c:a8:65:
f2:c4:07:de:2d:f4:ac:99:6a:6c:45:39:51:79:35:55:3d:8c:
4d:a6:59:9e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPNc2YR7jrX+8OnDq20IC4tbIFP8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJj
NWE4YWFlMmIyZjQ4ZTBjNWQwHhcNMjQxMTA1MTg0MjAxWhcNMjUxMTA0MTg0NzAx
WjAzMTEwLwYDVQQDEygwQkE2Qzk0QzAxN0Q0NzEwQkU4QjZDNDk3ODk4NEI1RkE3
MERCQ0UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvftWkN59xPeG
qjKdT8HOoMLhkNQ+yezLPXPLPUwqIoFRDyPJain8u58UfX4J2r6o4bLz2THr9VJr
b4BlL5W0licT8Ynm7SpdU9xMJmCdN4a22X1NGsU/nCDhxjNzypvWbJYanxSqEvFq
seCl0s6lXd5ygzGGom6Oo4k7OQAd8VwPBau9kmwVmyTwiMZIwLBZaEw99Dv6jz70
8saG92e0pGLFy+OZWUSDiN1PTtC8diYKz73bUJNPkw5ok6M5fueP7AkYmyz3gOfj
/Ll2JTrF22v+W5SLA/y4noNYxlu6aq2E5j9CZYGBfJRQ3TE9QGF7jqW4DSijT5S6
ynxLrGCJtwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFAumyUwBfUcQvotsSXiYS1+n
DbzhMB8GA1UdIwQYMBaAFNRgaubxiDjiJX1Vq7UAY29QkjbjMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2ktcHAuY29tL3JlcG8v
R09PRkwvMC9ENDYwNkFFNkYxODgzOEUyMjU3RDU1QUJCNTAwNjM2RjUwOTIzNkUz
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYtYmYz
Mi1jOTQ5MjI4NmYxOTUvN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3Lzg2ZGU5NjVkNzEwYWVlZTE5ODE0MmY0NjBmODJkMzFiYzVhOGFhZTJiMmY0
OGUwYzVkLmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8v
cnBraS1wcC5jb20vcmVwby9HT09GTC8wLzMyMzYzMDMyM2E2NjM4MzM2NDNhM2Ey
ZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzMzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvg9ADAN
BgkqhkiG9w0BAQsFAAOCAQEARmTto62jDPgvEAfjyC7oBA5yNewr/2oKhoFVgFWZ
sciraiZHzwIujzm9wHvwtpjBhCJVTAt5arG08rGsg4U+2nHUXwarWD9owDCllQ4/
jB0MEbns+vixtC9S8oQlJ3UDHzVr0PFoSRXJTNsdg092XDgbU7nSCE28T+NLrywx
1/P/hfGgXzmce7lxpcuU/ikdaV+nN2JUUI8mGwJAMpZrFhCu/pAxVPZCQqXU/lnu
zdVFDsKDuooHBHA3aHx99lp4XHa/BPyV6VWWQoDgkFHAxPC5kDfeQr/xI/8we+F5
4ubMJuKMbALojKhl8sQH3i30rJlqbEU5UXk1VT2MTaZZng==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:12:15 2025 by rpki-client