Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
File: 32332e3134322e32342e302f32342d3234203d3e203632313634.roa (raw, json)
Hash identifier: vORCtbPTStkrlH5qP6A3vuT6rAIXK2eOM9+Ao7GSzIQ=
Subject key identifier: BA:2B:80:08:A3:E7:0A:4F:1D:90:45:E3:73:1D:AA:0B:77:28:1D:81
Certificate issuer: /CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
Certificate serial: 3E754DD19D390C24EE624DC266E0AF103DED2C06
Authority key identifier: 67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
Signing time: Fri 23 Dec 2022 00:07:51 +0000
ROA not before: Fri 23 Dec 2022 00:02:51 +0000
ROA not after: Fri 22 Dec 2023 00:07:51 +0000
asID: 62164
IP address blocks: 23.142.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:75:4d:d1:9d:39:0c:24:ee:62:4d:c2:66:e0:af:10:3d:ed:2c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
Validity
Not Before: Dec 23 00:02:51 2022 GMT
Not After : Dec 22 00:07:51 2023 GMT
Subject: CN=BA2B8008A3E70A4F1D9045E3731DAA0B77281D81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:25:1c:c1:c0:4d:55:38:4c:db:4a:e1:ec:
d6:0b:8e:8c:4b:81:59:b9:cc:69:31:4c:d0:6c:98:
14:4b:3a:98:a3:db:17:07:dc:e9:75:c2:4e:54:0e:
39:a3:75:06:22:69:f6:76:ca:2c:bc:07:b2:24:cc:
89:61:58:c6:9e:92:2f:6a:15:2b:2b:7e:86:e0:b0:
5e:41:a7:09:1f:c2:9f:6e:e2:bb:8e:37:5e:e9:d1:
49:09:70:58:5b:18:05:9c:e7:13:60:81:4d:fb:18:
29:02:69:ff:24:28:ce:5a:23:3e:3c:07:a5:52:37:
1b:a1:99:d0:a9:ed:11:65:c6:83:1d:b8:6c:f3:f1:
e5:0a:62:54:04:95:cb:f7:ae:de:f2:0e:ca:d8:4e:
b2:fa:f9:dd:b7:1f:ac:15:fd:2c:bb:7f:73:19:7f:
e4:cb:a6:74:95:45:fe:ee:ca:61:bd:02:c3:1b:0c:
a0:ec:be:59:3d:83:48:f8:c1:b6:80:48:94:74:28:
5e:4d:5d:a7:0b:cf:67:4e:08:a0:76:2b:3c:24:22:
10:3c:71:85:51:62:3c:eb:47:3e:f1:c2:05:18:15:
d2:50:07:f1:d7:4e:21:5c:fb:c7:57:e1:b6:af:99:
31:3d:9e:59:10:66:3b:2b:1a:db:14:ea:e4:48:ce:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:80:08:A3:E7:0A:4F:1D:90:45:E3:73:1D:AA:0B:77:28:1D:81
X509v3 Authority Key Identifier:
keyid:67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.142.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:8c:6d:c9:46:9e:96:13:18:c8:a9:d4:1f:94:56:ae:2f:ce:
61:d5:ea:fc:2b:f2:28:d7:be:ff:ce:af:09:76:41:34:88:ba:
6e:26:0d:66:f2:6c:6b:ba:52:19:7e:11:b8:ab:5a:df:75:b8:
ac:e1:86:c8:be:d6:46:97:f7:50:ba:99:f4:2b:10:21:06:f4:
0e:6f:d6:ab:2a:62:99:d7:2f:f0:6e:00:6c:7f:27:26:f9:71:
b8:13:40:bf:c2:82:51:7b:32:04:7d:03:77:e6:a0:af:ae:7a:
fd:27:9e:2f:d8:80:b6:44:d3:87:fe:a0:e1:8e:40:f4:27:b0:
48:25:69:85:eb:a5:02:0a:a5:19:af:61:63:6e:fe:99:ad:6e:
2e:a8:8f:49:16:6f:0d:8f:5c:e9:6b:a3:3d:23:25:b2:35:53:
da:24:c7:eb:75:1d:f9:33:32:fe:d1:8d:49:0c:65:4c:38:1c:
0b:13:fd:eb:0b:1b:78:fe:03:68:15:1e:f0:5a:fc:ac:fb:7e:
2b:39:9a:80:85:49:5a:6c:88:49:e4:32:70:3a:62:5b:d3:17:
e2:4a:33:73:6f:96:21:e6:58:68:63:7c:81:95:90:25:83:2e:
50:84:75:ee:e3:dd:b7:23:47:b8:12:14:16:37:44:e4:45:2d:
a9:0d:81:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org