Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/32332e3134352e35372e302f32342d3234203d3e203630393030.roa
File: 32332e3134352e35372e302f32342d3234203d3e203630393030.roa (raw, json)
Hash identifier: LgK+go0HpKOfRtqbFXZgCfdqLHPe7lq8hrU1HjdLApc=
Subject key identifier: E3:E4:4C:20:A9:81:8F:EA:D0:8D:EC:DF:29:69:62:CE:2C:F2:3E:75
Certificate issuer: /CN=1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416
Certificate serial: 5A8FDAD699BD56A0BA91AB2DA8FB77ACD70DF96B
Authority key identifier: 15:D4:2B:DB:14:9A:76:0A:9A:77:61:15:CA:73:0F:E6:98:C0:5D:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/32332e3134352e35372e302f32342d3234203d3e203630393030.roa
Signing time: Sun 12 Nov 2023 08:22:02 +0000
ROA not before: Sun 12 Nov 2023 08:17:02 +0000
ROA not after: Sun 10 Nov 2024 08:22:02 +0000
asID: 60900
IP address blocks: 23.145.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8f:da:d6:99:bd:56:a0:ba:91:ab:2d:a8:fb:77:ac:d7:0d:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416
Validity
Not Before: Nov 12 08:17:02 2023 GMT
Not After : Nov 10 08:22:02 2024 GMT
Subject: CN=E3E44C20A9818FEAD08DECDF296962CE2CF23E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:9d:44:74:38:09:2c:a4:e4:d6:b2:24:75:
1c:2f:7d:ef:0d:2d:23:27:00:9c:14:a0:0d:ba:f7:
c3:c3:81:2b:8e:d6:44:06:5f:d1:fc:23:a9:12:d0:
35:80:18:2e:fb:d6:98:89:62:f7:af:c1:67:94:7c:
1d:2a:b7:e6:33:d6:c9:df:b0:fa:45:51:4b:7d:03:
c3:13:60:57:d1:96:87:12:d4:f3:5d:b5:f6:3f:f6:
17:4b:06:07:63:5a:f6:fb:90:e9:83:fc:2f:05:42:
13:c1:af:c0:14:39:02:a3:b4:26:7b:74:94:19:7d:
e9:c8:50:13:bd:eb:d7:60:16:a9:40:c1:b4:67:a5:
fc:b7:bb:b7:e7:8c:55:b5:27:40:4a:a8:21:26:78:
8f:2a:3b:78:15:d2:87:03:07:4d:87:60:42:f4:36:
d7:ed:e0:a8:47:29:bf:6b:68:63:65:bc:cf:8e:b1:
3e:ac:f2:14:25:fe:c6:d2:75:4e:8a:d3:87:29:d2:
70:76:b2:90:21:22:f9:fc:33:6b:56:2c:10:91:a9:
14:fe:69:44:1e:0c:5d:be:15:03:8a:37:1c:0a:a6:
04:7c:a5:76:4d:39:22:f5:3c:e2:ea:c4:ee:af:6b:
7c:c7:34:c2:03:c7:a9:94:36:98:dc:2b:19:90:50:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:4C:20:A9:81:8F:EA:D0:8D:EC:DF:29:69:62:CE:2C:F2:3E:75
X509v3 Authority Key Identifier:
keyid:15:D4:2B:DB:14:9A:76:0A:9A:77:61:15:CA:73:0F:E6:98:C0:5D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/15D42BDB149A760A9A776115CA730FE698C05D4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1c71673cffabff579bfecf558dc7470064b85416.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/3/32332e3134352e35372e302f32342d3234203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.145.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d0:0b:5d:76:62:da:5a:c3:26:2d:b5:ab:07:2e:8d:fb:75:
dc:e0:4e:ca:d1:22:ba:f3:17:08:b1:e9:6d:32:37:18:b7:b7:
dc:85:59:19:21:a3:bb:e6:a1:26:26:72:5b:71:5e:62:47:53:
36:1c:fe:f5:d3:1d:9a:2d:d1:9d:d6:f8:e4:6b:98:81:e1:ce:
a3:3b:07:43:36:7b:cc:9b:7f:02:89:5d:a5:f5:eb:28:f5:f1:
e9:7c:b6:45:d5:26:c3:73:77:42:20:e7:31:a9:6d:ef:66:61:
e8:61:1b:55:54:5b:1c:3b:64:00:43:06:c0:ee:24:89:46:eb:
99:e3:96:3d:80:34:50:f1:b9:a4:96:2a:28:be:70:06:f8:77:
f9:0d:c2:ac:86:d7:f0:bb:eb:d2:41:11:86:4f:ec:9e:e4:56:
03:11:c6:25:3b:f9:f0:4f:5b:bc:a7:74:17:7f:13:83:b0:1c:
d8:38:9f:26:97:af:45:d0:d2:d1:16:cf:b1:13:21:61:cb:fc:
1e:00:d6:66:92:a1:56:c0:00:56:2c:c0:30:11:45:a9:35:1c:
ed:69:75:52:b5:e0:f7:08:39:ad:ca:da:4e:46:f7:7c:f2:8d:
f7:cc:b7:10:08:bb:4b:3b:66:35:07:f7:6e:5e:8a:20:b5:29:
d3:0e:89:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org