Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
File: 3230392e3230392e35362e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier: db987zS7XCHGReRW2dVKA72n7JrmJUvdhepgXWY39as=
Subject key identifier: DB:4E:83:32:2A:76:38:FF:89:DD:FE:D0:B0:AC:94:7E:30:28:A8:4E
Certificate issuer: /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial: 4407F63B5F0A25202E54FB91DEA5B30CB6073E74
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
Signing time: Sun 03 Nov 2024 22:30:23 +0000
ROA not before: Sun 03 Nov 2024 22:25:23 +0000
ROA not after: Sun 02 Nov 2025 22:30:23 +0000
asID: 57695
IP address blocks: 209.209.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:07:f6:3b:5f:0a:25:20:2e:54:fb:91:de:a5:b3:0c:b6:07:3e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Validity
Not Before: Nov 3 22:25:23 2024 GMT
Not After : Nov 2 22:30:23 2025 GMT
Subject: CN=DB4E83322A7638FF89DDFED0B0AC947E3028A84E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:3b:7c:05:41:7d:e5:a1:d4:89:d4:52:82:
59:fe:05:a6:ca:a6:39:db:d2:27:7a:15:b0:96:40:
72:7e:0e:1b:68:77:80:0e:07:9a:b2:b8:24:79:c2:
26:f7:bc:03:cc:28:25:00:ae:1f:47:88:5b:2f:01:
aa:9b:6a:20:bc:df:09:25:f6:71:4a:42:c7:f3:b5:
e4:20:b1:2c:4f:3e:d9:7f:05:ec:d0:73:79:93:17:
95:e3:e2:e8:b3:e9:ec:20:03:94:3e:3a:b6:e6:9f:
c1:1f:85:91:bc:eb:d7:be:f9:97:b7:a1:2b:ca:d7:
d3:ad:8c:5d:cd:d3:43:16:41:bb:2e:a8:f4:8b:8d:
10:9b:54:61:75:df:d4:f0:8e:de:36:3a:2f:b7:e4:
2e:b2:78:b1:e5:80:59:c3:d7:7d:b2:3e:7e:65:da:
7f:33:4d:ba:e8:d1:8a:4c:90:03:57:e6:ae:55:80:
ac:f0:5b:44:59:44:1e:29:7d:de:6b:3e:80:d7:d9:
a7:f7:38:b9:2c:67:d1:2c:39:2e:47:fb:13:7e:b0:
7e:2e:fc:49:56:59:d2:70:c8:10:5e:09:0f:f0:3f:
c9:fa:b6:76:8b:2e:67:2a:1f:6a:32:49:9c:53:42:
59:46:1d:99:88:5d:bd:bd:37:12:32:18:bf:39:1d:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:83:32:2A:76:38:FF:89:DD:FE:D0:B0:AC:94:7E:30:28:A8:4E
X509v3 Authority Key Identifier:
keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.209.56.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:81:ac:26:bf:a8:30:01:9a:ec:51:8c:f8:93:83:a2:88:9e:
34:1b:06:fd:f0:0d:c2:04:dd:89:20:63:f6:13:ad:96:58:0f:
45:91:5a:52:cf:9a:42:a2:28:8f:bc:35:11:d7:86:1b:89:c1:
7a:1d:4e:d8:07:53:f1:20:ff:30:c0:8d:68:81:6b:ee:a6:28:
21:00:c3:eb:dd:36:f8:b5:54:bf:31:ce:41:ba:47:ab:50:76:
6b:75:21:8c:8c:91:b6:30:71:13:29:c2:7a:50:6c:e1:33:6a:
98:42:a5:17:a4:5b:cb:c4:5a:bc:69:5d:b6:04:01:c2:03:1a:
5d:8d:42:51:31:3d:91:62:cd:96:5d:47:b2:66:fb:90:c5:7f:
a4:0e:e1:67:ee:f0:21:5b:a6:a1:4f:70:ad:b6:e4:43:54:56:
1f:6a:3d:61:c1:84:4b:8d:c6:17:61:9e:77:dd:83:e5:e7:0c:
d5:7d:7b:11:63:a0:0f:00:fc:74:43:f0:36:c9:b0:bf:91:29:
b0:19:69:31:f0:ae:ce:2e:e1:8f:cf:8a:79:28:5a:7a:b8:09:
65:5c:c5:47:13:13:8f:7e:be:68:4c:33:99:dd:72:78:df:d9:
26:7d:03:2e:7c:8b:67:f7:d9:68:78:4d:14:6c:43:88:08:a1:
cc:da:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:22 2025 by rpki-client