Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa
File: 323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa (raw, json)
Hash identifier: R7blKVvRVfwOmBHFJsHmffGO7HBoLr1aR/RgFB6Ikj0=
Subject key identifier: D5:A7:39:BE:A6:87:43:E2:BD:E2:C8:3B:50:E1:35:65:2A:7B:3A:5E
Certificate issuer: /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial: 60735E9A44FF21D21C2533B2FB0A4CFCFFB6144C
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa
Signing time: Sun 03 Nov 2024 22:30:23 +0000
ROA not before: Sun 03 Nov 2024 22:25:23 +0000
ROA not after: Sun 02 Nov 2025 22:30:23 +0000
asID: 969
IP address blocks: 2606:7140:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:73:5e:9a:44:ff:21:d2:1c:25:33:b2:fb:0a:4c:fc:ff:b6:14:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Validity
Not Before: Nov 3 22:25:23 2024 GMT
Not After : Nov 2 22:30:23 2025 GMT
Subject: CN=D5A739BEA68743E2BDE2C83B50E135652A7B3A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:7e:05:36:48:4e:14:64:58:c8:e4:46:5f:
5e:d8:65:db:2b:1d:07:ac:0f:8d:b1:5b:24:03:3b:
5a:11:a0:66:68:fb:ad:46:bc:c6:44:a0:a0:d3:ea:
44:ec:61:69:d9:09:65:45:d5:55:d3:a2:cd:26:c2:
03:de:ac:d8:60:2e:64:ec:3b:4c:59:73:5e:db:2c:
ab:19:c6:ad:81:01:cf:38:11:f8:0b:a3:bc:c8:c3:
0b:87:e7:f6:ee:8f:51:45:8b:5d:6a:e8:af:e2:8a:
1f:de:39:9b:38:30:3f:df:d3:8b:a0:9b:e0:6b:a4:
21:e7:40:12:d3:42:31:9b:94:2a:46:f0:0e:f4:8e:
15:79:90:15:fc:71:af:f7:02:1a:84:fb:27:3d:82:
39:9c:8c:be:38:28:91:48:dd:83:e5:e0:bc:db:8a:
c2:c4:6f:7b:83:e4:ca:47:03:22:92:ec:1d:14:93:
74:e6:a1:ac:d9:d5:81:18:33:86:8f:cb:f4:01:81:
28:54:a4:5c:70:dd:b5:ba:39:7d:ad:8f:35:5a:c1:
53:08:84:5e:6e:6f:53:e2:d7:19:35:ce:30:89:04:
ab:69:f2:06:02:05:fa:91:26:c7:96:28:3b:5f:c1:
ad:a0:7f:bd:93:a9:67:70:9c:15:62:bb:fb:ed:22:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:39:BE:A6:87:43:E2:BD:E2:C8:3B:50:E1:35:65:2A:7B:3A:5E
X509v3 Authority Key Identifier:
keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:7140:100::/40
Signature Algorithm: sha256WithRSAEncryption
4c:60:3b:4a:c4:46:fe:b8:0b:d2:8c:62:a6:30:f2:92:28:ee:
1b:7a:c8:b8:26:a8:fb:0e:97:ce:2f:35:aa:7f:b8:dc:37:67:
d4:b9:5a:2b:10:4b:fc:7e:1b:4b:f9:a3:4d:66:6a:a4:ac:37:
57:65:f2:54:72:d1:cd:7e:ea:10:0f:30:e0:5b:c2:e4:cc:de:
a6:46:48:27:4b:fa:97:c2:31:51:b4:29:b5:3b:27:6a:f5:f6:
f8:6b:26:c7:5e:5f:d2:0c:e9:20:98:37:d3:5e:2a:55:8d:e0:
5b:93:4e:0d:36:72:42:3c:b6:e8:74:96:08:3b:57:0b:a8:0f:
ba:83:61:05:e2:b5:67:ef:a8:89:1f:93:bf:a2:c1:fb:77:7e:
45:22:d3:95:f7:b0:9a:df:4e:0f:2f:34:35:22:ce:bc:ff:96:
4a:4e:ff:05:c1:b1:d1:67:56:b4:cd:35:de:1b:03:38:8c:08:
1b:77:12:18:33:3f:15:0b:1a:21:bd:d0:4b:85:cc:dd:d6:57:
3c:87:14:92:3e:ea:75:a4:b2:2f:c4:6d:1a:e5:1f:d7:ad:44:
1b:c2:11:af:9d:f0:c3:18:f7:ad:31:bc:7b:2f:b4:00:ee:17:
7b:78:c7:d2:df:b0:60:19:b2:3f:be:27:57:1f:9d:bc:cc:3a:
46:40:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:39 2025 by rpki-client on console.sobornost.net