Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/32332e3134352e35372e302f32342d3234203d3e203135333533.roa
File: 32332e3134352e35372e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier: HSZnBVfQMDXayWPnVbPHsjdrGF/WhVU+DRAPzVYTT8g=
Subject key identifier: 3F:81:74:8F:28:C3:FB:A3:D5:2E:94:F3:40:46:BE:70:F6:66:27:9F
Certificate issuer: /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial: 0E4037FC669E57ED99691CCFB2766C0D695416C9
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/32332e3134352e35372e302f32342d3234203d3e203135333533.roa
Signing time: Thu 08 Feb 2024 04:31:45 +0000
ROA not before: Thu 08 Feb 2024 04:26:45 +0000
ROA not after: Thu 06 Feb 2025 04:31:45 +0000
asID: 15353
IP address blocks: 23.145.57.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:40:37:fc:66:9e:57:ed:99:69:1c:cf:b2:76:6c:0d:69:54:16:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Validity
Not Before: Feb 8 04:26:45 2024 GMT
Not After : Feb 6 04:31:45 2025 GMT
Subject: CN=3F81748F28C3FBA3D52E94F34046BE70F666279F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:5d:f3:1e:85:80:1e:f2:4a:8e:37:bf:be:
d3:7c:ca:7a:9a:23:0c:1b:5d:2e:cb:bb:cf:b3:40:
89:25:3d:59:3d:69:35:36:99:4b:8b:ac:44:a1:33:
7a:00:73:9f:66:4e:7f:df:98:39:c3:c8:06:85:17:
47:a0:92:2c:a4:62:b2:04:89:05:24:bd:9a:ef:a1:
7e:b3:ed:db:3d:dd:f4:42:24:0c:37:5e:dd:78:95:
f4:10:1a:c1:ff:9c:1e:9e:18:19:cf:53:9c:29:11:
85:07:08:4b:f8:77:1d:a4:2f:5d:a8:e6:45:64:32:
4b:31:4d:a5:c4:e0:23:0b:3f:19:01:6d:14:91:ec:
8f:35:e9:ac:5c:93:21:aa:82:0e:92:c6:e3:54:64:
74:ad:2a:2c:54:18:17:3f:a2:10:58:56:7f:8c:03:
a9:93:df:5f:3e:13:0c:50:6b:ff:08:bb:5e:a0:95:
64:01:72:24:2b:58:7b:88:1f:bf:a5:ee:57:6d:21:
56:33:96:9f:8c:5a:b9:0c:b6:16:30:e0:58:f0:f3:
5b:ad:b4:45:3d:6b:2f:0a:67:34:73:8a:ca:26:9e:
ed:30:96:02:2f:4c:23:6e:a0:08:d6:68:af:28:50:
b9:d9:8d:ed:85:a5:02:c8:ff:d5:89:d2:a8:5e:be:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:81:74:8F:28:C3:FB:A3:D5:2E:94:F3:40:46:BE:70:F6:66:27:9F
X509v3 Authority Key Identifier:
keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/32332e3134352e35372e302f32342d3234203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.145.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e2:6f:ef:a5:37:1c:2d:6a:ee:3b:c9:6f:c2:cd:fd:ca:08:
3f:12:ef:cf:19:4e:95:3b:f5:03:a8:24:e3:74:e0:32:3e:85:
c2:b0:2b:c4:d2:c0:8c:7d:43:3b:2c:88:61:91:c5:1e:88:6c:
a4:cd:e6:ca:0e:96:32:8e:94:f8:34:32:1a:7a:0a:f7:cd:6b:
7d:51:ba:97:90:97:78:47:c9:d3:36:4e:fb:05:50:eb:fa:31:
5c:1d:48:96:eb:56:4b:f9:31:5b:4e:f6:00:39:4d:74:2c:c9:
16:76:95:40:02:d2:e6:4b:ea:bd:23:c2:b8:9e:76:72:03:89:
4c:e8:66:d7:81:4d:92:f5:8c:d3:5e:b7:9e:80:c1:70:35:38:
92:f3:3c:a7:c4:30:59:71:72:88:b0:9f:11:80:6d:1e:71:66:
be:90:8e:1a:72:46:bd:1f:b8:53:ea:4c:2b:dd:6c:ff:ec:ae:
9a:0e:61:bd:d9:fc:db:c3:c6:3c:fd:60:3a:ea:84:09:23:ca:
93:e5:dc:ff:86:94:67:50:7d:a2:5e:10:3b:7f:7e:50:0e:4d:
1a:e4:c7:53:82:cd:cf:11:89:55:2f:ac:8f:d1:ff:de:f4:1c:
47:8d:cf:12:e5:37:50:65:9c:92:01:73:9b:6c:71:25:00:43:
e7:10:5a:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:38 2024 by rpki-client on console-fra.rpki-client.org