Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e203236353631.roa
File: 32332e3137372e38382e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier: aKfulbwMu9CyJqbPsCVJynO2kzi9zPEKvn4v+3dVnbY=
Subject key identifier: 47:1F:F6:8B:4C:84:1D:A7:7F:69:0C:D7:AE:EA:6B:1B:AE:EA:A2:FF
Certificate issuer: /CN=96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e
Certificate serial: 1796B60E2EA63997CA7BAC705DB447EF8760DB2A
Authority key identifier: 80:2F:06:87:6C:FA:0F:E0:30:90:97:CF:7C:0C:EE:45:53:D2:D2:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e203236353631.roa
Signing time: Sun 01 Sep 2024 17:05:53 +0000
ROA not before: Sun 01 Sep 2024 17:00:53 +0000
ROA not after: Sun 31 Aug 2025 17:05:53 +0000
asID: 26561
IP address blocks: 23.177.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:96:b6:0e:2e:a6:39:97:ca:7b:ac:70:5d:b4:47:ef:87:60:db:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e
Validity
Not Before: Sep 1 17:00:53 2024 GMT
Not After : Aug 31 17:05:53 2025 GMT
Subject: CN=471FF68B4C841DA77F690CD7AEEA6B1BAEEAA2FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:0f:dd:93:b3:49:f0:a5:08:20:08:d2:e6:
e4:83:72:63:76:e0:7b:8c:ae:8b:29:04:1a:64:a1:
43:27:ae:f9:bb:15:be:91:5f:68:45:f4:65:86:f3:
a2:d9:32:d6:98:dc:d0:c5:67:fd:c3:64:14:4c:48:
42:75:d8:5b:ae:e5:3e:86:36:40:8c:55:63:60:31:
b7:cf:bd:df:99:39:64:69:54:b5:44:cd:83:72:0c:
73:6e:61:ee:6a:c9:21:64:0e:3e:7c:cf:6e:7b:e4:
ee:31:2e:5e:58:95:a8:1a:b6:97:7a:e4:6e:20:06:
4a:67:21:57:96:95:0a:6a:2d:9c:d1:1b:9e:74:15:
f4:4e:7f:2f:47:89:99:bc:c2:24:98:bb:71:00:b0:
4d:ff:34:49:c6:db:fe:b1:cd:f9:15:a2:b1:d9:f4:
2e:4a:fa:86:27:6a:15:33:55:a2:8c:81:c3:1a:c4:
11:51:45:c3:71:e4:e6:c2:d0:bf:2d:c5:cb:65:78:
f6:63:bf:78:50:bb:c9:b0:0a:30:87:f9:a7:37:97:
59:7e:56:cc:55:07:8a:7f:50:20:8b:f0:65:42:6e:
f3:ca:3d:90:19:25:c0:3a:d5:1c:40:31:d6:9f:32:
81:dc:3b:58:33:1b:9f:ea:19:68:4b:e2:af:36:52:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:F6:8B:4C:84:1D:A7:7F:69:0C:D7:AE:EA:6B:1B:AE:EA:A2:FF
X509v3 Authority Key Identifier:
keyid:80:2F:06:87:6C:FA:0F:E0:30:90:97:CF:7C:0C:EE:45:53:D2:D2:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/802F06876CFA0FE0309097CF7C0CEE4553D2D215.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e203236353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.177.88.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:47:3f:9b:2b:07:75:de:c7:36:54:7e:63:6d:e1:c1:6e:41:
0b:f7:b9:2f:b4:e0:33:d3:df:3b:9e:ed:22:cd:8a:92:38:8c:
73:9f:32:c0:20:d4:29:89:95:2e:8b:25:d2:0b:c3:5b:5c:83:
19:82:96:30:2a:af:6d:22:29:87:4a:a8:c5:44:d4:11:c6:d8:
60:be:6a:63:0a:02:f5:e5:7b:49:cf:05:91:8c:2a:52:93:ce:
bc:b7:2c:79:f6:dc:71:b9:63:dc:68:88:7d:e4:d0:0d:13:69:
5d:52:1f:5d:07:c8:a9:f7:42:4a:c4:13:61:b8:05:c2:b2:16:
41:b4:96:ea:ce:fa:56:d9:f2:f4:18:d5:a4:06:f3:21:1d:61:
99:64:2f:3f:02:b8:7d:51:ba:03:cd:8a:28:79:12:cf:f6:0e:
ab:8a:17:3d:65:3d:e1:a0:a8:ed:e7:16:13:e7:e6:eb:10:66:
3b:a3:62:45:26:47:f2:ab:4b:e0:79:98:b4:d5:67:f7:26:80:
31:cf:de:a6:79:a7:0d:3a:e1:ab:6d:7e:84:d9:16:8e:6e:af:
95:0b:51:2a:2b:7a:f8:ca:f8:f2:00:0c:c7:f7:3c:d2:11:f8:
b3:11:a1:00:71:c6:12:3a:89:4e:b5:0e:c8:d4:93:b5:9b:a9:
3f:25:15:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 5 22:06:55 2024 by rpki-client on console-fra.rpki-client.org