Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa
File: 32332e3135362e3230302e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier: TJFe75enmUXAyZdh1VxMx/5sOrUxwkNaSIUkNJtFcqQ=
Subject key identifier: 9B:1A:37:01:79:15:05:D0:AE:7F:78:BC:12:F9:22:1F:6F:84:0D:11
Certificate issuer: /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial: 4BDC23C312B81DEDAF66AD9F91CC06F3AE8A3EDC
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa
Signing time: Tue 26 Nov 2024 05:18:13 +0000
ROA not before: Tue 26 Nov 2024 05:13:13 +0000
ROA not after: Tue 25 Nov 2025 05:18:13 +0000
asID: 52025
IP address blocks: 23.156.200.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dc:23:c3:12:b8:1d:ed:af:66:ad:9f:91:cc:06:f3:ae:8a:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Validity
Not Before: Nov 26 05:13:13 2024 GMT
Not After : Nov 25 05:18:13 2025 GMT
Subject: CN=9B1A3701791505D0AE7F78BC12F9221F6F840D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:c9:e2:ec:87:03:02:72:d4:ab:e0:11:7a:
66:d5:ed:31:b1:aa:24:5a:3a:52:9e:6b:4f:1a:19:
41:a0:b4:87:57:0c:05:ca:82:58:61:fb:d0:ac:34:
94:82:50:f0:ed:38:b0:43:fe:39:12:1d:12:a7:cc:
ea:4f:78:9c:50:cb:3e:c6:93:b7:2e:07:93:e9:93:
d3:f6:a0:a4:6f:6d:c6:f5:76:c9:a7:c8:60:ec:3d:
d4:4c:01:30:0f:cd:9d:0c:29:b0:3c:47:6e:1f:fc:
60:77:3a:a2:b8:f3:20:f3:60:8a:d1:02:b8:73:16:
fc:c4:e3:4a:b4:80:fc:2c:0a:c5:de:4d:f8:48:b9:
68:d0:65:ab:dc:58:ea:8b:2c:26:e0:d3:49:bf:7a:
98:47:9b:54:db:b6:a0:49:11:8b:85:a6:b3:43:1e:
67:8c:09:51:47:02:1a:3f:64:5a:c4:b4:4c:9c:b8:
7d:1e:e9:2f:dd:d0:9d:5b:c9:e7:c4:cd:e9:4e:5b:
30:e8:fa:02:2c:d6:ec:62:e8:6c:66:b1:2a:d6:03:
63:0d:3c:b3:93:f8:ca:08:ee:0a:7b:6a:41:58:00:
a9:62:70:a9:b7:0b:fb:3f:46:13:3a:a6:e3:bd:f1:
43:d0:41:5a:eb:a0:4d:d5:00:86:56:8e:f5:3b:8d:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:37:01:79:15:05:D0:AE:7F:78:BC:12:F9:22:1F:6F:84:0D:11
X509v3 Authority Key Identifier:
keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.156.200.0/24
Signature Algorithm: sha256WithRSAEncryption
15:30:df:21:e7:a5:57:cb:78:e3:21:d9:14:a0:43:40:32:2f:
73:1a:7e:ee:8a:31:42:cc:b5:b3:34:a0:a1:79:da:fe:f7:4f:
ab:f9:af:ed:7d:f7:b6:be:9b:9e:de:34:1b:75:6c:2d:20:d0:
17:08:29:0f:8a:ff:4f:ff:d1:71:7d:a4:29:eb:23:c3:d2:8b:
71:aa:15:0f:a7:2b:c6:b2:81:21:61:3b:ed:33:68:16:6f:3f:
78:30:d1:e2:01:56:e6:f1:2b:82:56:bb:8a:9a:6a:c4:4f:3b:
56:b2:06:9a:2c:ae:6c:92:89:82:a0:88:78:25:87:05:57:22:
0d:d8:72:de:5d:a3:3e:12:c0:97:de:39:b7:8e:a3:d7:cc:33:
f7:4b:15:61:ac:21:3e:f8:81:9c:04:45:7c:03:db:44:87:cd:
37:be:4c:2b:f2:99:67:46:8f:fe:24:57:18:50:b8:66:17:3b:
d0:4d:41:08:da:05:62:14:a4:ff:2a:4e:a9:a3:f7:4d:85:60:
b9:8b:16:df:2a:0c:af:25:7c:97:52:39:96:72:8b:ae:ca:5a:
d5:39:66:e2:63:c6:a1:1f:b8:65:72:ea:d2:87:43:22:a3:35:
fd:36:7e:b4:ef:5a:67:d8:38:2d:4c:59:28:d3:a1:33:62:1b:
b0:1d:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:27:11 2025 by rpki-client