Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/3/3139322e3230392e36332e302f32342d3234203d3e203532303235.roa
File: 3139322e3230392e36332e302f32342d3234203d3e203532303235.roa (raw, json)
Hash identifier: tQkSqBhvcPACJxvdNlCnq4kYfwgybgJaGoPC7ZFsukQ=
Subject key identifier: F2:53:6B:8C:CC:6E:DD:52:AA:8C:26:F4:C9:50:24:33:E2:C8:A2:89
Certificate issuer: /CN=9F176E94D0B8F4A60E553EF6C51DFEFFDB896753
Certificate serial: 277A16A0FBE218619E381114D3E6ED17F29B3522
Authority key identifier: 9F:17:6E:94:D0:B8:F4:A6:0E:55:3E:F6:C5:1D:FE:FF:DB:89:67:53
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/3139322e3230392e36332e302f32342d3234203d3e203532303235.roa
Signing time: Tue 09 May 2023 01:36:27 +0000
ROA not before: Tue 09 May 2023 01:31:27 +0000
ROA not after: Tue 07 May 2024 01:36:27 +0000
asID: 52025
IP address blocks: 192.209.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7a:16:a0:fb:e2:18:61:9e:38:11:14:d3:e6:ed:17:f2:9b:35:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F176E94D0B8F4A60E553EF6C51DFEFFDB896753
Validity
Not Before: May 9 01:31:27 2023 GMT
Not After : May 7 01:36:27 2024 GMT
Subject: CN=F2536B8CCC6EDD52AA8C26F4C9502433E2C8A289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1f:82:80:95:5f:65:f5:24:8e:1a:2e:7b:0c:
45:01:d9:be:38:af:fc:d8:69:35:cd:67:7f:2e:c7:
9d:4d:a3:4a:9f:97:3b:4a:77:0b:5e:57:5f:75:42:
3b:06:05:80:20:c0:a5:6b:95:43:52:83:f0:76:16:
a2:6d:5e:dd:88:34:86:d3:18:30:e9:d4:2f:d3:44:
06:9f:71:41:20:90:93:10:8f:b4:87:05:9f:ac:a5:
83:26:96:8d:e0:a5:9d:21:3f:43:6a:89:20:56:c9:
e3:e5:f4:89:91:d8:fa:2c:d8:28:08:74:4f:c1:f1:
8a:05:dd:01:95:99:5f:b1:04:ad:f3:a9:94:7e:dd:
4f:f9:78:8f:2e:42:a9:c6:72:78:7a:de:a8:99:9c:
56:f9:af:37:5c:7e:bd:b9:9a:29:da:68:ec:a2:b9:
c8:e5:a9:d1:7d:60:59:68:c4:58:6b:49:a6:74:cd:
cc:00:07:8d:35:9d:bc:d5:4e:24:e3:fd:4d:f1:30:
a5:24:54:b7:ac:84:66:26:dd:34:9f:5f:e4:89:a7:
7b:d4:9f:03:d1:14:e8:ae:14:56:54:a3:f9:6d:e3:
29:b9:7c:83:4d:fe:31:a1:86:c1:ff:8b:ae:20:32:
39:93:ed:ff:cd:8d:bd:21:43:cf:44:d3:fd:5d:5d:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:6B:8C:CC:6E:DD:52:AA:8C:26:F4:C9:50:24:33:E2:C8:A2:89
X509v3 Authority Key Identifier:
keyid:9F:17:6E:94:D0:B8:F4:A6:0E:55:3E:F6:C5:1D:FE:FF:DB:89:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/3139322e3230392e36332e302f32342d3234203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:44:b4:6e:a3:ca:df:99:03:9c:28:1f:53:06:59:9b:c8:50:
0e:47:5c:0c:c9:5d:63:27:cc:f5:12:be:95:c0:93:5a:c2:3d:
2d:79:80:ab:e8:d1:97:ad:fb:f4:aa:e7:29:d8:80:14:b6:76:
b9:11:5e:12:d9:c1:33:64:63:bc:44:44:13:38:68:ee:2c:3c:
ae:ab:03:48:7e:48:fd:08:1f:82:ff:8e:e8:ab:1c:0d:8a:91:
68:90:1b:98:53:ba:96:ca:73:ac:25:aa:89:f7:94:2d:2c:85:
3b:65:b2:be:40:5c:13:50:4d:e6:f0:15:d3:e7:dd:ce:66:ea:
11:b5:8a:c9:4a:05:a6:74:c0:27:59:2a:9a:fb:c6:a1:5f:b6:
85:af:9d:ce:e8:ba:b9:bf:51:f4:2c:81:13:ea:1f:67:9f:21:
52:77:18:4b:23:db:6c:06:72:b0:97:3b:6f:58:06:77:d1:06:
cd:0f:13:07:4f:4b:ca:92:8b:a0:ed:2f:71:fc:86:2d:65:4f:
cc:8a:d5:b9:2e:58:b7:fc:de:59:97:cc:eb:68:39:7f:7d:44:
fe:02:ab:d6:9d:66:11:00:46:7d:ea:f2:37:aa:37:7d:f2:d0:
e8:8d:90:4a:df:10:6d:51:b3:3e:cb:9d:eb:bf:97:b6:c0:e7:
66:d1:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:51:39 2025 by rpki-client