Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa
File: AS21696.roa (raw, json)
Hash identifier: N1fE2LW+G2pJnIOf60Wakt1Hgea/kp01wsfU0BHgB6A=
Subject key identifier: 72:62:B0:21:22:B2:FD:98:FE:D2:0E:44:38:84:C3:AD:B8:16:BD:F5
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 23FBF91AF9F375920DE4D39F0F0E1BEAFB3F8FE7
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa
Signing time: Thu 23 Jan 2025 05:55:11 +0000
ROA not before: Thu 23 Jan 2025 05:50:11 +0000
ROA not after: Thu 22 Jan 2026 05:55:11 +0000
asID: 21696
IP address blocks: 172.108.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fb:f9:1a:f9:f3:75:92:0d:e4:d3:9f:0f:0e:1b:ea:fb:3f:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Jan 23 05:50:11 2025 GMT
Not After : Jan 22 05:55:11 2026 GMT
Subject: CN=7262B02122B2FD98FED20E443884C3ADB816BDF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:17:e4:5f:69:ed:08:56:67:8f:85:3c:21:
76:52:b1:63:c0:92:0c:ae:98:61:19:66:9c:09:5e:
de:5b:5b:eb:56:55:e2:43:80:4a:c9:af:b8:95:b9:
90:3d:4a:74:0c:15:ad:a8:69:bc:a2:5a:64:77:05:
d3:90:6e:ee:fb:f8:34:7b:f8:6f:ad:7e:1d:c0:d2:
96:30:c0:e2:c4:fc:1f:a2:9c:8e:63:39:41:84:56:
ce:07:68:cd:eb:eb:8f:d5:4f:48:2c:48:cd:45:37:
0f:00:a2:12:bd:10:79:41:e1:bb:54:dc:3a:5f:0a:
83:38:78:ff:04:cc:e4:01:ce:0e:c2:58:7b:97:cb:
33:99:9f:37:67:34:23:35:0f:40:d7:da:83:55:73:
57:67:cd:78:a1:3c:cd:19:2e:d3:b2:38:1f:fa:e1:
c0:05:84:92:dd:25:79:a3:4b:3a:70:6c:36:93:74:
3a:dc:82:5f:c2:53:80:80:54:68:31:78:d5:75:65:
80:da:69:b9:49:37:60:66:08:43:d9:e0:6f:23:59:
ac:67:36:38:45:c2:1e:4c:87:0a:c2:a2:ee:8b:31:
d9:dc:f1:93:3b:0c:3f:d1:bb:ff:72:00:60:59:62:
f1:a1:69:19:94:b3:ff:ab:4c:f8:42:b6:1f:af:2f:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:62:B0:21:22:B2:FD:98:FE:D2:0E:44:38:84:C3:AD:B8:16:BD:F5
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.139.0/24
Signature Algorithm: sha256WithRSAEncryption
be:5e:c4:c9:dc:7e:79:0f:a8:85:bf:b7:71:98:bf:3b:96:f2:
4a:b3:15:02:13:97:66:4d:cf:5e:6f:45:2d:aa:30:c1:48:39:
0b:92:e6:72:a3:f2:8b:9a:27:21:df:ea:f2:5d:eb:23:38:84:
45:85:98:97:68:b5:f0:e3:78:30:5f:fe:4d:22:30:32:77:f2:
18:84:7e:9c:d0:32:f5:7a:7f:78:bf:79:2c:c5:37:a4:4f:f0:
11:30:1c:9c:f2:a5:7b:fb:d7:92:06:ed:d5:0b:ed:fa:75:8b:
f8:a7:7e:b1:c2:27:b9:1c:cb:e1:3b:da:70:43:02:f5:47:72:
c9:fc:72:17:d5:d2:b5:43:0a:51:be:49:0e:74:f2:2a:7b:08:
1a:46:3e:d7:74:02:c9:c8:ed:d9:e9:5a:cb:3e:47:90:0d:10:
15:62:ba:14:e6:9d:61:da:e1:54:f6:72:a4:fd:e0:3f:26:3f:
24:21:ad:ca:ee:db:08:ac:ba:90:ca:e4:17:04:b7:3e:ee:e3:
24:16:ba:af:c7:27:02:f9:4d:52:8f:80:a3:67:fc:5f:fc:34:
97:ad:25:c7:90:d0:d6:cd:e5:c8:a4:fd:2a:cc:fa:f3:0e:cf:
1b:84:b0:f3:ae:e3:24:40:37:f6:9d:a8:b1:77:52:85:54:45:
18:d2:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net