Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/32332e3134352e35362e302f32342d3234203d3e203135333533.roa
File: 32332e3134352e35362e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier: 9L5GCK98bkYisBvvs1jL6KNGhxmOPbKCfYvGBMdmakE=
Subject key identifier: 03:E2:2C:31:A2:00:DC:91:66:EA:C5:8F:EC:67:AA:DA:02:99:5F:1C
Certificate issuer: /CN=1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13
Certificate serial: 4C80F39E16C664E603F36B292097AB03341730D0
Authority key identifier: DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/32332e3134352e35362e302f32342d3234203d3e203135333533.roa
Signing time: Sat 28 Oct 2023 00:42:46 +0000
ROA not before: Sat 28 Oct 2023 00:37:46 +0000
ROA not after: Sat 26 Oct 2024 00:42:46 +0000
asID: 15353
IP address blocks: 23.145.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:80:f3:9e:16:c6:64:e6:03:f3:6b:29:20:97:ab:03:34:17:30:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13
Validity
Not Before: Oct 28 00:37:46 2023 GMT
Not After : Oct 26 00:42:46 2024 GMT
Subject: CN=03E22C31A200DC9166EAC58FEC67AADA02995F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:f7:f3:ba:98:f3:5d:ea:18:bb:dc:48:5d:
51:8e:f0:3c:fd:cb:34:ea:3d:4d:aa:ee:89:8e:58:
84:e1:eb:b7:91:1f:bd:d2:49:d7:e7:89:e7:39:6d:
a0:b9:8b:97:e0:01:28:ab:8e:c2:1e:7f:d4:91:ff:
cb:35:35:4c:d2:cb:60:85:c4:bd:a3:17:7f:47:1c:
ff:bc:ed:01:e3:e4:fd:af:1f:15:1f:e6:02:fd:3f:
af:dd:e2:0f:0a:81:ed:3b:1a:f7:ca:be:4d:5b:4f:
5a:9a:10:00:b5:61:3e:95:77:23:86:fb:f2:50:5b:
3e:64:c4:3f:0b:88:10:05:4b:0c:1d:c0:46:5b:36:
4f:02:21:8a:be:77:cd:f4:9e:42:2e:5c:ca:c3:cb:
af:1d:52:1b:48:82:d2:8a:f3:1a:01:4f:2b:75:cc:
fb:79:e7:aa:50:10:41:3b:73:a5:e6:2d:88:be:c3:
bc:5b:e6:96:19:64:c8:a8:eb:75:80:63:53:75:db:
95:53:4f:25:bd:fa:15:ad:4b:0b:d8:ea:8b:9b:2c:
e4:4a:ac:2c:42:5f:74:87:a8:35:90:6f:24:b1:3d:
ae:02:68:36:fe:8e:6f:6e:0d:de:03:5a:2f:91:f1:
5b:5c:0e:ea:22:7b:5e:f9:8c:46:d6:be:09:ce:40:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E2:2C:31:A2:00:DC:91:66:EA:C5:8F:EC:67:AA:DA:02:99:5F:1C
X509v3 Authority Key Identifier:
keyid:DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/DCDC338C7E154CE23D0DA607DE192537B81D7FFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/32332e3134352e35362e302f32342d3234203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.145.56.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:06:5c:01:10:d2:a5:84:fa:9d:0f:44:af:24:d5:44:3a:d2:
6c:fe:25:f9:5c:c2:0a:b5:95:c6:bd:75:a7:c2:82:69:52:a1:
dd:0d:db:ee:91:27:4d:ed:b2:3b:4f:40:a9:0b:eb:69:3f:36:
c4:32:ec:1c:52:c1:00:79:ae:77:38:5e:03:9e:41:5c:5d:8a:
3c:e6:6d:07:d2:89:72:d2:be:0e:5b:06:30:57:93:d1:e3:43:
5e:67:5f:25:2d:20:07:8e:4e:6f:ad:23:61:94:8f:2b:d9:7a:
d8:84:b3:52:1d:41:67:4e:77:70:54:54:3c:ba:19:77:dc:f8:
6a:ce:84:6e:e6:0e:aa:44:eb:5b:33:e1:31:83:a0:d0:c5:9f:
df:99:36:1a:f2:a8:b5:1b:20:ab:68:75:7c:b9:8a:3d:db:a3:
95:bd:33:64:fc:c1:6d:c6:c4:fa:c5:27:9b:f8:8d:36:bd:95:
e4:07:6e:a6:23:17:1c:ee:ca:8d:50:b0:3d:b8:6b:83:ba:6d:
39:f4:9c:4b:44:b1:60:8c:7a:f2:c9:d2:dd:27:05:fd:b8:77:
89:e5:07:3d:7a:a0:8e:9b:bc:68:41:5a:8d:fd:a1:0c:5b:30:
5b:48:1a:e7:a4:40:9f:93:6f:d7:db:72:98:e0:20:50:b7:af:
ac:85:c0:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org