Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206729.roa
File: AS206729.roa (raw, json)
Hash identifier: frM8GE9b2Ve6RmJYzlIp67vUfMS5g8uDEhQCcEWOeTk=
Subject key identifier: 9F:CD:2B:0A:53:B4:7F:D6:35:A7:AA:76:F4:F9:2D:D9:3B:64:81:24
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 314E548847F1FE0BD1852CBDA165E0083EAE3474
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206729.roa
Signing time: Fri 13 Dec 2024 02:56:30 +0000
ROA not before: Fri 13 Dec 2024 02:51:30 +0000
ROA not after: Fri 12 Dec 2025 02:56:30 +0000
asID: 206729
IP address blocks: 2a06:a005:9e0::/44 maxlen: 48
2a06:a005:1c40::/44 maxlen: 48
2a06:a005:21d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4e:54:88:47:f1:fe:0b:d1:85:2c:bd:a1:65:e0:08:3e:ae:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:30 2024 GMT
Not After : Dec 12 02:56:30 2025 GMT
Subject: CN=9FCD2B0A53B47FD635A7AA76F4F92DD93B648124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:40:59:16:fc:a8:64:bc:24:03:f0:61:d9:
f3:a6:34:2d:30:86:f0:a4:de:3d:57:b5:82:cf:d6:
da:3a:c4:ab:83:c6:05:e9:3c:e3:b4:d2:1d:e6:58:
2b:19:73:2c:9a:c5:0e:45:9f:bb:89:d8:ef:66:30:
55:41:a2:6c:28:07:06:4f:b7:bb:38:71:c4:1b:61:
74:fd:1d:d9:2b:43:32:7e:0f:8a:14:f1:d7:54:0a:
1a:96:5b:77:66:47:b5:b7:6c:4c:10:2d:69:68:cc:
e7:f6:8a:9e:6f:2a:be:f6:23:1c:f2:bc:27:00:87:
d3:a3:60:d9:51:09:4b:cb:84:3a:07:b0:0a:76:a6:
05:6f:01:44:3a:a0:25:2c:75:03:c8:b0:30:58:a8:
98:b3:c7:9d:4e:4a:21:73:28:d2:0e:70:dd:6f:aa:
85:07:16:8d:4b:35:82:3f:45:8f:09:0d:0c:6c:e9:
b6:90:11:11:9e:9e:4c:39:9d:5d:84:cf:ff:df:1d:
f4:33:05:39:cf:4a:06:1f:8a:74:54:54:33:7a:62:
c6:82:98:c8:46:d0:bd:4f:2b:93:d5:46:13:11:a4:
f5:3f:52:23:2c:8d:dd:a3:25:9f:a7:01:a5:ec:ba:
77:09:2a:e1:85:d0:5c:e5:76:2e:94:47:50:e8:67:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:2B:0A:53:B4:7F:D6:35:A7:AA:76:F4:F9:2D:D9:3B:64:81:24
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:9e0::/44
2a06:a005:1c40::/44
2a06:a005:21d0::/44
Signature Algorithm: sha256WithRSAEncryption
42:71:ea:e4:cb:fc:cc:25:95:68:ba:e0:57:2c:4c:36:b4:50:
75:d3:00:0c:27:0d:bf:80:f8:f3:05:cb:a0:34:2b:2c:8b:c6:
87:04:14:32:53:4d:7b:96:c9:a2:7b:d9:93:2e:dc:9f:aa:67:
1f:79:c3:a9:84:94:ed:71:d7:57:fc:8d:20:09:96:6d:32:ac:
2f:e8:79:42:7f:d7:c4:e5:0b:48:66:fa:7e:a4:c5:a8:5f:6a:
88:5c:1b:30:06:60:a9:ca:38:04:b4:ce:d2:2d:84:53:f1:42:
ef:8d:5c:9b:2b:2e:d3:71:71:cc:d9:e9:df:ee:f4:be:80:26:
7f:93:04:bf:02:ae:d7:e6:79:7e:1a:68:64:57:c4:82:b7:a7:
1c:16:63:5a:0d:69:a7:1c:c0:14:2c:d1:60:5b:03:05:23:44:
d8:0c:0a:85:ae:d2:8f:27:e5:ad:41:cb:0d:04:b1:9b:85:07:
06:e4:8d:d8:f2:4c:ad:cf:d0:fc:05:86:a1:a3:1b:8c:4c:d4:
e8:7b:7d:73:d1:68:47:46:5d:a4:7c:5e:86:48:6e:72:4a:16:
a3:05:a8:cf:f9:cf:13:2d:df:cb:cf:04:11:50:42:22:64:de:
e2:b6:fb:0e:6b:2a:2e:e0:67:de:6e:a9:2d:df:a3:a9:f0:4a:
02:b2:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:01 2025 by rpki-client