Route Origin Authorization
$ rpki-client -vvf repo1.rpki.qs.nu/repo/cynthia-ca1/1/32332e3134392e3131322e302f32342d3234203d3e203537373832.roa
File: 32332e3134392e3131322e302f32342d3234203d3e203537373832.roa (raw, json)
Hash identifier: OScMy+voCk8OzfRVswWsypyy0iIQJWRKXxfS8C8GFcI=
Subject key identifier: 51:1E:00:AC:14:A9:77:12:A1:D1:02:6B:77:5B:8F:3E:B4:0C:15:25
Certificate issuer: /CN=cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9
Certificate serial: 1D1F5F3B2991280225DDF57D66BAFFB72C3CC86E
Authority key identifier: 64:9C:D1:AE:B3:07:7C:50:F3:41:6D:15:CF:87:FA:55:7A:CE:25:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9.cer
Subject info access: rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/1/32332e3134392e3131322e302f32342d3234203d3e203537373832.roa
Signing time: Mon 30 May 2022 13:00:00 +0000
ROA not before: Mon 30 May 2022 12:55:00 +0000
ROA not after: Mon 29 May 2023 13:00:00 +0000
asID: 57782
IP address blocks: 23.149.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1f:5f:3b:29:91:28:02:25:dd:f5:7d:66:ba:ff:b7:2c:3c:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9
Validity
Not Before: May 30 12:55:00 2022 GMT
Not After : May 29 13:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:94:d1:2a:38:f9:23:3e:14:15:b7:65:dc:
4a:a3:58:e0:bc:b6:80:26:44:45:c6:51:7f:89:b2:
b7:b4:28:a6:12:30:36:49:15:bd:d6:7c:20:e1:cd:
ca:c4:9f:b8:c1:09:0c:7f:e6:21:68:48:45:59:7c:
b0:92:bb:4a:9e:33:ce:06:ee:99:76:65:66:36:19:
bd:f9:5d:05:67:ea:28:59:d3:82:1e:02:78:09:0f:
73:c8:cb:f0:8c:7a:45:2c:b4:56:38:4c:3d:f3:1e:
25:15:d0:90:6d:5e:7a:c0:07:11:ac:7e:64:d2:ba:
26:ff:9b:cd:72:00:9a:c5:e2:f7:45:6e:aa:b6:66:
38:32:da:d8:76:64:9f:60:9f:22:5e:64:3b:94:6c:
af:bb:4b:be:8e:a3:48:95:20:ea:97:26:58:38:40:
ae:3e:01:da:24:c4:62:09:2e:ee:a4:cd:aa:c4:c3:
32:4f:f1:50:ab:4d:ec:81:18:fc:5e:03:cd:fa:b7:
82:32:75:11:2d:62:af:fe:5e:92:6c:4b:a4:5a:4a:
25:c3:71:e4:ab:c2:31:e5:ba:ad:cc:e9:cf:d7:ef:
20:17:2c:68:1b:b3:50:05:bb:88:2d:aa:94:29:a6:
05:4b:86:07:12:4b:0f:9a:c2:ca:59:37:cc:0f:10:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:00:AC:14:A9:77:12:A1:D1:02:6B:77:5B:8F:3E:B4:0C:15:25
X509v3 Authority Key Identifier:
keyid:64:9C:D1:AE:B3:07:7C:50:F3:41:6D:15:CF:87:FA:55:7A:CE:25:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/1/649CD1AEB3077C50F3416D15CF87FA557ACE25FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb35e68e341eb7d92888bcc552b9c3c50b2c814c3e9.cer
Subject Information Access:
Signed Object - URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/1/32332e3134392e3131322e302f32342d3234203d3e203537373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.112.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7f:cd:21:fc:3b:09:31:29:92:42:68:c6:16:db:6c:6d:88:
39:0e:64:78:cb:bc:c8:89:17:2b:6a:5f:87:80:24:14:be:67:
45:49:ab:2d:e8:a2:85:39:f4:72:bd:32:4c:40:84:3a:5c:a1:
e8:44:b3:59:b6:9e:98:65:2c:d5:1a:fa:79:d3:ad:0b:81:9a:
69:33:af:7c:11:10:0c:7b:82:68:71:44:c6:4b:b6:71:d1:e2:
f7:ab:cb:0e:be:6d:da:e1:64:8e:02:85:4c:cd:69:d7:a6:65:
46:7f:e5:cb:23:02:b3:20:db:33:4d:c7:b9:44:3b:f5:db:16:
44:49:f0:f6:83:d2:9e:a5:e7:08:b9:0b:e4:79:90:52:a5:00:
90:11:42:0a:c1:df:65:55:88:97:42:e2:5b:2f:fa:ad:eb:17:
c5:dc:c1:42:f1:d5:97:7f:b1:20:53:0e:d8:67:85:51:8a:32:
d5:bf:09:a6:64:92:4f:fd:21:45:73:85:a0:53:b9:d5:11:13:
b2:4a:98:2a:00:e5:e5:25:1a:d8:46:0d:e8:c5:cd:f4:ce:15:
98:5c:e3:4e:f3:f4:60:63:50:13:ba:68:b9:98:ea:f1:7b:3e:
a6:df:c6:d6:8d:35:f6:58:b9:7b:7b:72:5d:7e:6e:f6:06:8f:
32:8d:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:16 2025 by rpki-client