Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/32332e3134352e35372e302f32342d3234203d3e203630393030.roa
File: 32332e3134352e35372e302f32342d3234203d3e203630393030.roa (raw, json)
Hash identifier: YITutdoEPqDfoTJQqdSBB15IetxBjiJGkBPapnTYDtY=
Subject key identifier: EB:9B:07:29:B6:CF:3C:FB:65:C9:3D:17:A3:32:70:BF:5D:3D:77:2C
Certificate issuer: /CN=1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13
Certificate serial: 429142DC96A095B11B601CBFCF39ECD9063920A1
Authority key identifier: DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/32332e3134352e35372e302f32342d3234203d3e203630393030.roa
Signing time: Mon 06 Nov 2023 21:45:15 +0000
ROA not before: Mon 06 Nov 2023 21:40:15 +0000
ROA not after: Mon 04 Nov 2024 21:45:15 +0000
asID: 60900
IP address blocks: 23.145.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:91:42:dc:96:a0:95:b1:1b:60:1c:bf:cf:39:ec:d9:06:39:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13
Validity
Not Before: Nov 6 21:40:15 2023 GMT
Not After : Nov 4 21:45:15 2024 GMT
Subject: CN=EB9B0729B6CF3CFB65C93D17A33270BF5D3D772C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:1d:d0:05:90:1d:5a:ff:c9:73:67:f4:ec:
a5:c9:b9:dc:4e:2e:34:38:c8:72:b9:e7:97:0b:92:
d7:86:0a:45:5d:a7:dd:06:61:61:ac:23:ee:6a:0e:
97:35:1f:a2:42:1a:04:e7:eb:69:da:6e:9b:58:57:
43:dc:61:a5:01:fa:9b:40:6a:5b:3c:0b:48:db:3e:
b5:97:d4:9e:99:0a:92:04:d5:51:ff:ea:b4:e6:28:
fb:4b:f9:3f:c4:78:6f:8f:51:59:21:07:f6:4a:03:
21:e0:72:3c:13:a5:4f:7f:15:b6:1d:9d:8b:2f:d0:
5c:e2:e1:73:2a:15:6d:89:01:84:27:6a:76:ef:a7:
44:77:c9:33:d2:e5:13:4b:54:25:4d:f3:42:1b:1e:
a8:cf:1d:f2:01:a2:e1:9c:c1:d0:2d:ba:1b:12:a4:
5b:3d:ba:02:64:76:59:94:69:bc:79:a3:fc:49:31:
b2:95:24:f4:86:c0:67:eb:b4:ac:b8:1f:51:43:3d:
38:d8:70:3a:f9:24:c0:a8:46:a5:62:51:05:26:51:
a9:4e:fd:ca:b2:10:19:85:1a:ac:7e:1c:ea:5f:18:
22:de:69:dc:ab:de:3e:99:33:cd:b4:a2:22:bc:08:
4a:08:c7:2d:6c:ba:b8:25:74:c3:e2:ee:03:c3:5a:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:07:29:B6:CF:3C:FB:65:C9:3D:17:A3:32:70:BF:5D:3D:77:2C
X509v3 Authority Key Identifier:
keyid:DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/DCDC338C7E154CE23D0DA607DE192537B81D7FFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/32332e3134352e35372e302f32342d3234203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.145.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5a:7e:40:d4:63:8a:7b:29:ac:cc:65:a6:69:2e:dd:48:d8:
9a:3f:ee:24:e0:d5:f6:53:79:65:fb:04:77:f7:63:2e:bd:2b:
e7:71:96:05:a1:a8:93:c3:0d:6a:85:9b:99:09:51:88:62:9d:
29:df:6b:ca:f0:b4:bd:e2:10:c5:c9:a8:0a:57:3e:a3:56:d3:
95:30:b7:6c:b9:97:a1:3d:72:17:b6:df:a1:5a:54:86:67:61:
4c:f3:4e:f7:e9:16:d2:6c:8c:30:90:bd:9b:8c:25:7e:eb:03:
79:18:bb:26:c3:b9:32:c2:0d:fa:2e:57:17:40:bb:15:c0:89:
54:56:cb:3f:f6:f2:5d:50:0c:3c:41:69:fb:71:1c:70:22:c2:
31:a4:26:42:ec:7d:01:87:75:12:c9:4d:33:f5:81:79:5a:67:
b6:e7:b3:8f:51:a8:a5:a4:bc:9e:11:64:37:9d:c7:da:95:16:
0f:f4:3e:52:8d:1f:4d:9a:ed:82:eb:29:e1:61:4a:b2:ba:88:
ca:e5:b3:7f:ab:df:cc:95:64:ca:cd:09:a2:b3:62:61:52:c0:
14:90:d8:a8:1a:40:a9:29:68:f7:17:2f:b1:a4:48:84:a8:e7:
5f:29:85:9b:45:d4:13:f0:03:c9:66:89:66:e9:fc:fb:ba:a8:
3d:57:44:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org