Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/32332e3137372e38382e302f32342d3234203d3e20323136343632.roa
File: 32332e3137372e38382e302f32342d3234203d3e20323136343632.roa (raw, json)
Hash identifier: OB4q4vDmOi74C6GUvxXO9idio6259snEYructpk16ps=
Subject key identifier: 60:18:19:CB:7A:B9:BB:54:82:90:ED:0E:0C:E6:DA:0B:F6:EE:57:F7
Certificate issuer: /CN=96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8
Certificate serial: 18D93FE0E5F081C164267A7B1BEE9D449BD7CC18
Authority key identifier: 90:D5:59:9F:5E:99:C9:58:60:99:3A:48:1D:04:26:0C:5A:59:4F:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/32332e3137372e38382e302f32342d3234203d3e20323136343632.roa
Signing time: Mon 06 May 2024 21:40:19 +0000
ROA not before: Mon 06 May 2024 21:35:19 +0000
ROA not after: Mon 05 May 2025 21:40:19 +0000
asID: 216462
IP address blocks: 23.177.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d9:3f:e0:e5:f0:81:c1:64:26:7a:7b:1b:ee:9d:44:9b:d7:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8
Validity
Not Before: May 6 21:35:19 2024 GMT
Not After : May 5 21:40:19 2025 GMT
Subject: CN=601819CB7AB9BB548290ED0E0CE6DA0BF6EE57F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:da:31:d7:22:be:06:ad:aa:d9:4c:0e:ab:
95:bb:65:4c:ec:59:40:0b:d1:0e:94:92:2f:8c:a9:
6e:17:4b:18:df:f8:4f:b3:61:c6:e3:0c:c7:73:2d:
5a:00:97:e2:e5:b0:c0:37:e2:f9:e7:c2:6a:98:dd:
17:44:37:b8:13:4e:22:98:8d:e5:8c:71:f7:c7:c2:
4d:b4:ab:4d:7b:21:70:07:cb:39:a9:9b:67:0e:1e:
bd:9e:9b:b5:86:d8:dd:20:8a:d5:ac:27:99:e7:f6:
f0:3b:37:92:37:cc:c1:2d:bc:fe:54:d8:da:57:c9:
48:5d:d9:6c:df:d2:45:1e:4f:d5:37:ac:ef:7e:40:
b8:d4:7d:2e:0a:32:d3:93:33:62:49:5a:bc:6f:9b:
ef:df:3d:56:7c:ec:ec:64:c8:39:8b:2f:d1:ed:41:
82:18:59:a0:56:50:d0:ec:ba:22:9d:c8:a1:61:ab:
54:4c:3b:e6:69:9a:dd:ae:5b:20:f3:ab:4a:26:67:
ed:b1:fc:77:dc:c3:38:63:4b:5b:f2:d7:eb:fc:2b:
f0:5c:d5:dd:91:23:4e:1b:f0:e6:9b:44:b6:51:2d:
01:7e:0c:a2:75:c6:2f:e6:db:1b:11:f2:26:72:44:
ba:5f:57:74:45:5b:85:51:f6:54:11:5a:e1:6b:88:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:19:CB:7A:B9:BB:54:82:90:ED:0E:0C:E6:DA:0B:F6:EE:57:F7
X509v3 Authority Key Identifier:
keyid:90:D5:59:9F:5E:99:C9:58:60:99:3A:48:1D:04:26:0C:5A:59:4F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/90D5599F5E99C95860993A481D04260C5A594FA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/32332e3137372e38382e302f32342d3234203d3e20323136343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.177.88.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fd:41:06:9b:99:d2:0e:c5:69:df:66:1b:a3:3e:70:4a:27:
98:b6:50:af:22:ab:60:00:75:30:26:3e:aa:0b:f9:ec:7a:dc:
f9:12:29:2c:25:48:ab:6a:36:cc:68:24:56:22:a8:9f:e8:4b:
c1:5d:39:66:1d:33:ff:82:b6:fa:8a:e2:59:78:08:b8:fd:a3:
dd:f4:d1:af:ce:ab:4c:06:f4:4f:fe:d2:a4:d0:6c:5f:6a:29:
55:b0:ee:ca:73:d7:8a:56:49:40:d1:dd:f9:99:e7:05:5c:fb:
53:a8:c1:53:36:fa:ad:f9:3f:68:7f:8d:81:5f:b1:b0:78:b2:
ac:8a:4d:46:19:52:1e:a9:f9:ec:76:c6:5f:6d:4b:c6:03:76:
8d:0e:74:91:ea:4c:e4:c5:3e:aa:0e:6f:a1:7c:1a:37:d8:c7:
46:90:da:9e:d5:7b:2b:5d:a9:a3:e5:f7:91:9c:49:b9:3c:f7:
52:7e:49:b4:71:20:44:f6:c6:fe:34:9e:bd:32:88:0f:8c:97:
08:9a:a3:8d:c0:2b:b9:87:2a:a5:4a:36:23:ad:c7:7e:ff:4d:
98:6b:73:6b:c1:07:84:93:cf:57:29:49:23:df:c5:79:0b:64:
e2:d4:a1:80:13:37:92:12:dd:a4:3d:30:56:4c:a1:cd:cc:d0:
dd:71:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org