Route Origin Authorization
$ rpki-client -vvf repo1.rpki.qs.nu/repo/cynthia-ca1/1/32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa
File: 32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa (raw, json)
Hash identifier: 72Qkd8ejaC0QGDxObQCVYyUbuS0Uhrkz+LaMpagsY/A=
Subject key identifier: 0E:3C:44:29:9D:66:2C:F0:DC:C4:AD:CA:18:72:D6:D6:42:EE:E2:89
Certificate issuer: /CN=cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9
Certificate serial: 5EBC47F6E7E843B70A5B027DCA65F093F00DBFF3
Authority key identifier: 64:9C:D1:AE:B3:07:7C:50:F3:41:6D:15:CF:87:FA:55:7A:CE:25:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9.cer
Subject info access: rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/1/32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa
Signing time: Mon 30 May 2022 13:00:00 +0000
ROA not before: Mon 30 May 2022 12:55:00 +0000
ROA not after: Mon 29 May 2023 13:00:00 +0000
asID: 210089
IP address blocks: 23.149.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:bc:47:f6:e7:e8:43:b7:0a:5b:02:7d:ca:65:f0:93:f0:0d:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9
Validity
Not Before: May 30 12:55:00 2022 GMT
Not After : May 29 13:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f1:ec:87:62:47:5e:b2:30:74:8f:13:78:fd:
e6:c9:2f:7d:1a:20:84:2b:28:42:57:fe:b8:59:81:
d5:c9:db:cf:ac:21:2a:ba:7e:f3:b1:6e:0b:eb:84:
62:d0:1a:cf:47:d4:76:4f:97:ea:6d:5d:34:45:ab:
ad:37:59:c8:bc:a8:04:0d:fe:04:0f:b4:16:b9:78:
01:8c:1a:68:0a:47:f2:6c:9e:cf:65:4d:09:e1:e8:
9a:f1:81:23:dd:ea:48:43:5b:02:f4:16:7b:c4:b4:
33:cb:7d:fe:6d:bd:fe:95:aa:05:53:b0:d1:e1:b2:
15:e9:05:07:b8:af:7f:c2:1e:fe:ea:b5:47:88:4b:
bd:a2:77:de:84:11:28:71:ab:2a:80:63:b5:95:22:
64:1c:21:3f:0f:c3:29:11:30:0a:e3:1a:6b:ab:cc:
4d:b6:4b:57:c2:9e:47:38:3d:0b:9e:59:81:24:40:
ca:4a:1f:c0:17:39:95:23:97:3f:e5:87:64:3d:f4:
5b:fc:63:fb:be:bc:93:de:02:29:dd:8e:7e:b3:28:
3a:32:d4:81:31:cc:56:48:3a:5f:08:36:da:3c:ab:
4d:0a:a3:86:58:f7:c1:51:ae:4a:b4:9e:8c:7d:ad:
2e:72:27:eb:e2:78:e5:1e:a1:8b:d9:8e:4f:85:45:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:44:29:9D:66:2C:F0:DC:C4:AD:CA:18:72:D6:D6:42:EE:E2:89
X509v3 Authority Key Identifier:
keyid:64:9C:D1:AE:B3:07:7C:50:F3:41:6D:15:CF:87:FA:55:7A:CE:25:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/1/649CD1AEB3077C50F3416D15CF87FA557ACE25FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9.cer
Subject Information Access:
Signed Object - URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/1/32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.112.0/24
Signature Algorithm: sha256WithRSAEncryption
28:48:d3:f3:bd:dd:ed:ff:1e:48:e2:c2:ab:ba:89:7e:a4:fd:
bb:7e:73:59:55:94:10:1b:33:79:b0:c4:84:5d:9f:44:59:65:
35:49:6d:1c:b9:72:8f:f3:5a:4f:3b:f0:2e:64:98:8f:49:1c:
2e:e2:f8:84:4b:16:75:96:62:5b:54:97:e8:89:1c:ae:cb:9f:
ae:33:1c:b8:48:b9:b4:7f:95:07:dc:41:bb:f4:bd:2e:9e:e4:
95:ab:72:b0:6d:ce:95:05:6d:91:f5:6e:cc:c5:b2:81:38:5e:
69:4a:8a:25:62:0b:0a:12:88:10:3d:82:4c:b8:60:34:9f:26:
6b:5f:9f:99:ef:cc:c0:39:5a:fc:1f:02:bf:3f:be:4d:21:1f:
90:6d:68:ce:c3:6a:08:52:b0:92:73:16:39:b0:4f:55:55:3a:
b8:33:aa:04:b0:6c:cf:f1:06:cf:e1:d2:54:7e:76:49:ae:73:
53:10:e2:04:1c:87:51:5a:c4:87:44:eb:72:3c:8e:c8:eb:3c:
f5:5b:3d:f8:ca:5d:98:ae:33:9c:14:66:3e:fd:f6:bc:6b:9b:
dd:48:61:f3:25:ef:79:7c:c8:94:f2:23:07:57:81:5f:0e:ff:
aa:83:87:5d:32:2d:08:40:64:c2:7a:0b:34:44:75:05:83:71:
56:f5:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:16 2025 by rpki-client