Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20333937373330.roa
File: 32332e3133322e39322e302f32342d3234203d3e20333937373330.roa (raw, json)
Hash identifier: BrbquvaT7gSaBvF2dUV9AqKeXE06mRUUDpvsSUbe408=
Subject key identifier: 45:F0:3A:A8:98:3A:DF:85:D0:6D:4E:EE:57:7E:15:F6:5E:1B:EB:6C
Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial: 12ACED4BE6E8EC8D94790A8DFF9E3592B62160DF
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20333937373330.roa
Signing time: Wed 15 Jan 2025 15:06:03 +0000
ROA not before: Wed 15 Jan 2025 15:01:03 +0000
ROA not after: Wed 14 Jan 2026 15:06:03 +0000
asID: 397730
IP address blocks: 23.132.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ac:ed:4b:e6:e8:ec:8d:94:79:0a:8d:ff:9e:35:92:b6:21:60:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Validity
Not Before: Jan 15 15:01:03 2025 GMT
Not After : Jan 14 15:06:03 2026 GMT
Subject: CN=45F03AA8983ADF85D06D4EEE577E15F65E1BEB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:b6:29:6c:b5:21:ba:59:64:9a:29:6a:51:
3e:47:fc:2a:ef:19:61:1f:7e:f8:cb:a9:56:dd:d6:
76:6f:45:15:d1:af:74:be:ab:91:6e:02:49:31:56:
64:b7:aa:87:c1:00:a7:c2:45:09:d8:69:b7:b9:49:
54:d1:c4:e8:26:86:05:91:02:b5:48:cf:39:69:f1:
12:83:66:00:b7:b5:57:6e:54:b1:72:81:a7:03:bb:
e8:0a:dc:bc:0c:37:2c:97:da:7e:d7:86:9b:08:09:
68:45:e5:b3:4d:ec:f7:d7:35:b7:56:31:70:aa:cc:
f8:b6:1c:f6:94:09:3b:c6:ec:aa:55:03:71:fe:d2:
1a:fb:f9:d5:3a:e2:cb:a8:f4:2a:76:ea:f6:da:54:
18:87:a2:d3:30:6b:c6:c5:1d:73:43:01:d3:ce:40:
27:6b:e9:c5:93:6e:07:74:30:3b:e8:bf:d9:75:f1:
24:8b:51:e2:4e:a5:4e:0f:49:e4:00:67:15:0d:fc:
e0:e1:53:50:16:a4:a7:39:d9:b4:97:cc:74:6b:e2:
ed:1d:59:50:6f:b0:9f:c0:47:85:15:04:ee:ac:ad:
76:f8:20:c5:1f:e0:a1:a9:08:35:8b:64:16:03:3e:
ed:74:ff:ee:28:5a:3e:25:70:b6:43:47:2c:cc:69:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:3A:A8:98:3A:DF:85:D0:6D:4E:EE:57:7E:15:F6:5E:1B:EB:6C
X509v3 Authority Key Identifier:
keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/32332e3133322e39322e302f32342d3234203d3e20333937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.132.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1e:20:85:a5:4c:d7:98:08:70:08:09:8d:d5:8e:69:ac:0b:
d4:e3:2f:3d:1f:7b:e7:60:2a:85:d0:0c:13:e3:86:f4:bc:77:
6b:7e:3d:0d:16:ec:2a:71:cd:6c:03:df:35:03:a3:d4:d9:0c:
3e:dd:e3:ef:81:e1:4f:c8:86:57:eb:2d:d2:30:59:46:79:20:
ae:57:5a:3b:43:99:ec:d5:87:5f:24:ba:07:5a:a4:1a:cf:39:
7d:1d:22:c1:63:cf:6f:5c:c0:a5:e9:fc:f2:4f:a9:7c:43:ea:
e4:d1:2b:26:df:1d:a9:5b:0c:36:8c:31:56:e4:93:56:af:d0:
bb:61:b8:a9:43:80:c1:09:a0:01:a0:e0:62:b1:32:ee:bb:30:
f8:ed:f0:a5:51:a5:e7:be:08:57:a8:9d:87:ee:b9:ea:0c:f6:
7c:57:b4:64:7a:02:9f:3c:a2:31:28:05:89:95:49:f1:86:7e:
2f:6d:97:8a:f3:96:27:08:9d:41:07:c3:d3:1e:0b:af:9e:03:
00:69:21:47:40:12:a8:c0:1f:de:f5:d9:12:14:b1:96:b1:ee:
80:ce:83:3b:2a:53:09:df:45:c4:6f:71:2d:60:8c:fa:59:45:
da:2a:2d:8f:ce:09:2e:21:e8:27:3f:b7:f3:95:a7:bf:31:e7:
be:cd:c0:77
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUEqztS+bo7I2UeQqN/541krYhYN8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj
NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwMTE1MTUwMTAzWhcNMjYwMTE0MTUwNjAz
WjAzMTEwLwYDVQQDEyg0NUYwM0FBODk4M0FERjg1RDA2RDRFRUU1NzdFMTVGNjVF
MUJFQjZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S+2KWy1IbpZ
ZJopalE+R/wq7xlhH374y6lW3dZ2b0UV0a90vquRbgJJMVZkt6qHwQCnwkUJ2Gm3
uUlU0cToJoYFkQK1SM85afESg2YAt7VXblSxcoGnA7voCty8DDcsl9p+14abCAlo
ReWzTez31zW3VjFwqsz4thz2lAk7xuyqVQNx/tIa+/nVOuLLqPQqdur22lQYh6LT
MGvGxR1zQwHTzkAna+nFk24HdDA76L/ZdfEki1HiTqVOD0nkAGcVDfzg4VNQFqSn
Odm0l8x0a+LtHVlQb7CfwEeFFQTurK12+CDFH+ChqQg1i2QWAz7tdP/uKFo+JXC2
Q0cszGlAmQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFEXwOqiYOt+F0G1O7ld+FfZe
G+tsMB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz
LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy
NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt
NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i
ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj
MzZkMTMyNDI4NWFhODAuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYzLTBmMzJiOGU3ZmU3OS8zLzMyMzMyZTMx
MzMzMjJlMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM3MzMzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEABeEXDANBgkqhkiG9w0BAQsFAAOCAQEAax4ghaVM15gIcAgJjdWO
aawL1OMvPR9752AqhdAME+OG9Lx3a349DRbsKnHNbAPfNQOj1NkMPt3j74HhT8iG
V+st0jBZRnkgrldaO0OZ7NWHXyS6B1qkGs85fR0iwWPPb1zApen88k+pfEPq5NEr
Jt8dqVsMNowxVuSTVq/Qu2G4qUOAwQmgAaDgYrEy7rsw+O3wpVGl574IV6idh+65
6gz2fFe0ZHoCnzyiMSgFiZVJ8YZ+L22XivOWJwidQQfD0x4Lr54DAGkhR0ASqMAf
3vXZEhSxlrHugM6DOypTCd9FxG9xLWCM+llF2iotj84JLiHoJz+385WnvzHnvs3A
dw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:31 2025 by rpki-client