Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa
File: 323630323a666161383a3a2f33362d3438203d3e20323032343030.roa (raw, json)
Hash identifier: bUZeHKJuRMZRc25kv2llcesOVbM8jWKlY1YgDIroG4g=
Subject key identifier: 44:9A:E6:CB:58:F2:BD:3C:89:80:B8:CD:81:53:12:E9:AE:DF:51:71
Certificate issuer: /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial: 7448014045AD4175D41681745FBCBDE367924FC3
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access: rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa
Signing time: Sat 13 Apr 2024 03:14:56 +0000
ROA not before: Sat 13 Apr 2024 03:09:56 +0000
ROA not after: Sat 12 Apr 2025 03:14:56 +0000
asID: 202400
IP address blocks: 2602:faa8::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:48:01:40:45:ad:41:75:d4:16:81:74:5f:bc:bd:e3:67:92:4f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Validity
Not Before: Apr 13 03:09:56 2024 GMT
Not After : Apr 12 03:14:56 2025 GMT
Subject: CN=449AE6CB58F2BD3C8980B8CD815312E9AEDF5171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:4a:e7:ad:58:f2:de:06:7e:e4:9a:8e:e0:
6f:8f:ab:b2:e7:75:d5:d3:6d:63:97:fc:73:a1:1c:
b5:bc:22:f8:cd:7c:d6:31:ef:00:45:7b:7f:67:e7:
b9:f4:8b:5f:6a:52:30:04:72:19:0e:fb:c7:7c:26:
1a:81:3f:6f:47:14:d4:31:82:ce:b8:fc:bd:90:51:
73:34:40:03:94:07:cd:58:6c:a6:59:d8:8c:b5:82:
ee:ed:8e:85:e9:61:91:89:5f:f9:db:a8:07:02:d3:
ba:6b:2d:0c:af:6c:20:61:86:56:76:af:ed:7a:ac:
25:a1:5b:cb:9c:31:01:0d:af:a8:c6:b0:b8:56:a4:
6b:63:c3:b6:e3:74:58:22:cc:01:5f:f3:e1:3c:ae:
62:a9:fb:1e:18:f5:5c:28:ad:47:20:9c:57:cb:82:
3d:3d:5c:47:42:7c:4d:09:d6:88:f9:9b:a0:5a:b8:
9a:d3:ef:06:61:5e:e2:b6:cf:53:9b:a2:49:28:9b:
82:25:c8:e2:4c:8e:3e:c6:66:a9:88:25:f0:3f:c9:
3e:26:cc:9f:ae:5a:f9:47:3e:1c:01:f6:e0:bb:f6:
4f:23:6d:de:6d:7b:59:ca:2b:a0:89:2f:6c:dc:24:
28:d9:ba:31:8f:9b:e6:f6:46:22:c1:5c:69:b2:93:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:E6:CB:58:F2:BD:3C:89:80:B8:CD:81:53:12:E9:AE:DF:51:71
X509v3 Authority Key Identifier:
keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa8::/36
Signature Algorithm: sha256WithRSAEncryption
5d:25:a7:29:da:1b:9d:b1:ed:c9:ea:d2:20:a1:03:b1:cc:7e:
c2:bf:1d:42:84:1f:65:59:fb:aa:82:b8:e8:d3:3e:7d:7a:ea:
fb:02:d4:12:44:2a:c7:37:17:fc:98:20:8c:28:45:a5:60:21:
4d:81:b0:a1:c4:d8:fb:b1:b6:7e:f3:18:f0:38:98:03:d8:b2:
41:a3:ce:95:01:99:36:0b:2b:95:0c:1d:df:4f:c1:34:d8:86:
49:ee:55:37:bb:9a:2f:54:32:41:2e:e0:4c:57:bf:64:f3:34:
12:ec:01:84:04:55:69:8b:0b:a2:bd:74:e3:c7:89:12:90:2f:
87:f7:38:ac:44:e3:ed:a9:06:93:38:b2:50:5e:a1:f7:04:e7:
64:bd:c4:a5:a1:33:8a:b2:b9:30:9e:30:03:27:34:23:42:81:
62:5b:70:ba:3c:e9:4d:52:40:3b:79:6b:8e:41:3f:3d:39:21:
fb:ef:cd:9f:c8:b5:09:06:1e:a5:58:46:02:ee:64:ad:9d:ae:
8e:79:85:cd:92:9b:9c:85:12:9c:9c:79:a7:f9:36:a1:25:4a:
0f:1a:a3:71:b6:cb:e6:15:c6:d1:ec:8f:3f:80:2f:3d:28:f0:
d4:6e:24:2c:79:e8:0f:3f:84:71:08:18:c4:2a:2f:35:af:dd:
b6:32:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:34:13 2025 by rpki-client