Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa
File: 323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa (raw, json)
Hash identifier: CuuYc8MUpVSK565EQNYdg0n6ncQQoU1CMGYQB2DaFns=
Subject key identifier: 1C:56:81:43:62:9C:E2:6A:BF:92:11:5F:07:08:7A:57:3E:B1:D6:49
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 66504DB3B72313C072BD77173D75A039E290E5C3
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa
Signing time: Mon 05 Aug 2024 15:57:01 +0000
ROA not before: Mon 05 Aug 2024 15:52:01 +0000
ROA not after: Mon 04 Aug 2025 15:57:01 +0000
asID: 174
IP address blocks: 2602:f992:90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:50:4d:b3:b7:23:13:c0:72:bd:77:17:3d:75:a0:39:e2:90:e5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: Aug 5 15:52:01 2024 GMT
Not After : Aug 4 15:57:01 2025 GMT
Subject: CN=1C568143629CE26ABF92115F07087A573EB1D649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:a0:12:77:ae:80:ca:5c:5d:cd:1d:d8:85:
c1:35:7a:f8:21:cf:a2:2e:1b:98:71:3b:ee:0d:54:
34:69:57:a3:b4:df:3f:63:cd:d9:63:2e:63:c5:ad:
00:e4:b9:0b:06:89:8d:d4:e7:8b:da:bd:1e:4a:d7:
a0:aa:76:12:20:ff:e8:9e:d4:a9:38:50:4b:01:9e:
96:e4:08:95:5d:90:43:fc:0e:87:61:12:13:05:2f:
49:af:6c:f4:0c:4c:0e:b9:a5:ac:fc:41:98:33:e8:
1f:c3:f5:a2:7f:22:bd:ed:9d:72:8b:a7:3c:6e:ce:
8e:e6:c9:de:c5:87:ff:00:59:ad:6e:69:a6:ed:a7:
3b:d1:f9:a2:76:df:fd:ce:30:93:ff:7e:fe:6e:68:
a8:9d:d2:83:97:ca:53:11:91:cb:1c:e6:a0:5c:6f:
98:81:59:d4:c5:83:d0:98:19:fd:cd:e9:54:10:9e:
de:d4:8f:80:db:d8:0e:3c:45:b8:b8:db:0e:9c:fd:
44:9d:92:4f:04:61:55:8b:d7:2a:a9:c0:4b:68:b8:
b1:69:02:2c:26:42:51:09:52:bf:fd:46:98:4a:6b:
53:8a:b7:77:27:20:18:38:e2:ff:5a:19:f3:8b:ac:
03:c2:b7:2b:23:20:f5:4d:4b:79:46:a7:cb:16:c8:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:81:43:62:9C:E2:6A:BF:92:11:5F:07:08:7A:57:3E:B1:D6:49
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f992:90::/44
Signature Algorithm: sha256WithRSAEncryption
39:6f:39:bb:6a:69:e2:2a:c8:cb:16:e6:0f:81:83:5c:c5:d8:
22:63:6c:09:22:7b:34:07:78:c2:ba:ab:e7:78:40:1b:1d:c3:
8e:a0:2d:8f:88:c1:f6:31:7a:3e:d8:51:e7:5f:fe:c3:bb:b1:
1e:67:29:42:d8:1f:34:cc:ce:c7:81:59:99:4f:86:c3:d3:63:
a0:4d:6f:38:57:7a:80:2e:7e:39:61:67:ac:cf:77:5d:14:eb:
2c:63:15:19:ba:d0:16:bb:9a:69:89:cb:b6:df:ca:0a:fe:54:
51:6f:9d:2c:cf:74:02:b0:76:93:8b:26:9a:ea:58:24:d4:c5:
2f:b5:2c:90:73:2f:c9:79:46:87:50:eb:e6:a0:e4:7e:27:61:
40:dd:8e:55:ff:27:5d:5f:3d:82:af:f1:e0:61:30:39:a4:c5:
11:f5:d8:de:5a:8f:c9:6e:db:81:77:ee:f2:cb:84:bc:43:ed:
57:96:ac:26:0c:43:c0:19:46:4b:4f:bb:ac:2e:9e:2f:9a:37:
5e:3b:58:c1:0b:52:45:34:f5:01:4b:73:0a:01:c4:c8:85:8a:
18:5f:5b:14:05:b6:ba:37:01:e9:b8:84:95:25:12:1a:db:d5:
90:0d:ae:ec:1e:a1:7b:ca:5b:d4:c1:fe:a4:f1:22:c2:72:2a:
db:61:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:13 2025 by rpki-client