Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20323134373638.roa
File: 32332e3133322e39322e302f32342d3234203d3e20323134373638.roa (raw, json)
Hash identifier: NdlK1zYqdrKSuU5F6Cse146TEQ/3Wx9fQDxzRBJIZZw=
Subject key identifier: 61:37:8A:BB:3C:E1:59:87:D7:50:9F:AC:E8:86:8B:AF:31:78:E7:F5
Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial: 50D845F39E7F72BEADA515CFE58B879A1271D684
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20323134373638.roa
Signing time: Tue 21 Jan 2025 15:01:20 +0000
ROA not before: Tue 21 Jan 2025 14:56:20 +0000
ROA not after: Tue 20 Jan 2026 15:01:20 +0000
asID: 214768
IP address blocks: 23.132.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d8:45:f3:9e:7f:72:be:ad:a5:15:cf:e5:8b:87:9a:12:71:d6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Validity
Not Before: Jan 21 14:56:20 2025 GMT
Not After : Jan 20 15:01:20 2026 GMT
Subject: CN=61378ABB3CE15987D7509FACE8868BAF3178E7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:0e:9c:ee:29:0f:10:df:15:46:35:31:7a:
b4:cc:c4:94:d5:13:4a:8b:2e:c4:4b:0f:bc:86:1d:
f0:31:ca:ef:71:f0:97:02:0d:50:09:84:e1:d5:7c:
35:4a:bc:1f:d5:c7:ed:e6:c3:bc:9f:47:56:13:f2:
e2:23:8d:1f:ab:0a:c5:a8:93:78:77:68:bd:71:f7:
28:3f:ce:82:06:12:96:40:eb:c5:e3:fb:f5:d9:d9:
41:92:51:db:a8:a2:2f:6e:b5:6f:8e:24:bc:aa:35:
0a:bf:11:15:4f:8b:97:99:db:f3:9c:7e:97:b6:b7:
64:11:72:67:24:ea:2b:0d:ca:fa:b0:5a:9c:d0:29:
1c:73:a5:0b:ae:dd:ca:2a:8e:08:db:af:b7:fa:22:
74:5c:97:ce:e9:96:0c:ac:25:81:49:33:ef:be:05:
64:a5:6a:0c:a7:2f:5e:47:71:ac:37:0f:cb:55:ad:
15:29:c2:cf:16:80:c6:7d:c1:5b:d5:0d:ee:bf:6f:
f9:5c:49:7d:50:9e:d8:c0:eb:bb:6a:4f:1a:cf:e0:
b7:15:d0:39:01:23:4e:4b:a6:c5:32:81:94:e3:2d:
d1:2b:42:25:cc:9a:bc:67:3e:ac:09:a7:dc:3c:e9:
d3:42:88:1e:98:ed:1b:80:09:d7:9f:b5:cc:78:a3:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:8A:BB:3C:E1:59:87:D7:50:9F:AC:E8:86:8B:AF:31:78:E7:F5
X509v3 Authority Key Identifier:
keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20323134373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.132.92.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3e:6e:79:85:c1:c4:52:91:dc:09:dd:ab:f7:fa:c0:eb:96:
b8:cd:23:29:6c:70:ea:23:b1:4c:9f:2c:45:0d:9e:1d:57:f7:
9f:31:21:94:07:2d:56:1d:4e:59:fa:7b:a4:2b:76:d1:0a:4d:
85:10:25:e5:57:a6:74:a8:f2:74:8f:e4:8d:3b:a7:ea:14:2d:
8f:f3:4e:56:4c:49:b4:59:f4:77:35:3c:c4:62:e9:72:6c:98:
b6:45:f1:47:d8:82:ee:08:cb:1a:34:95:e8:ff:75:d1:9c:e3:
3e:73:0a:90:eb:20:67:04:54:6a:3c:ab:76:e0:1b:39:29:95:
33:42:f5:5f:21:93:88:70:de:06:f7:6f:45:e5:2e:19:80:2c:
17:93:ae:55:97:b7:35:1f:f8:e3:f8:ae:3b:10:f9:cc:d5:b0:
d8:43:43:94:c1:0c:54:7b:9b:5c:81:17:21:5b:df:c1:41:b0:
6e:01:1b:63:e0:c5:27:97:74:f0:aa:47:8b:2f:0b:b2:88:65:
8a:d1:3b:c3:66:d6:c2:f6:e0:22:f7:9c:c0:14:aa:3c:ef:85:
c1:26:93:6d:39:ca:48:db:b0:54:f2:0a:78:c5:5d:7e:b7:f4:
fc:77:a3:a5:03:41:42:fa:a8:0d:35:2d:eb:15:4e:1c:f4:4b:
ac:7d:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:17:24 2025 by rpki-client