Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/32332e3133332e3137322e302f32342d3234203d3e203633323836.roa
File: 32332e3133332e3137322e302f32342d3234203d3e203633323836.roa (raw, json)
Hash identifier: tR9b5kMIN0jjQ7w28maJxS1/4AtQmBusjIHU0k4YM7A=
Subject key identifier: C9:65:96:91:5D:C0:E5:03:9B:C5:68:F3:EA:F2:63:50:E2:6D:34:85
Certificate issuer: /CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
Certificate serial: 265781D81D93C2F5D052F19990CCF21E5D3D7623
Authority key identifier: EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/32332e3133332e3137322e302f32342d3234203d3e203633323836.roa
Signing time: Fri 31 Jan 2025 22:54:48 +0000
ROA not before: Fri 31 Jan 2025 22:49:48 +0000
ROA not after: Fri 30 Jan 2026 22:54:48 +0000
asID: 63286
IP address blocks: 23.133.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:57:81:d8:1d:93:c2:f5:d0:52:f1:99:90:cc:f2:1e:5d:3d:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
Validity
Not Before: Jan 31 22:49:48 2025 GMT
Not After : Jan 30 22:54:48 2026 GMT
Subject: CN=C96596915DC0E5039BC568F3EAF26350E26D3485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:95:c7:b5:33:cd:f3:cf:73:6d:8a:c2:d9:
2a:35:9e:20:91:a6:da:0b:e3:9d:c4:f9:13:55:0d:
b9:2b:3f:19:8b:8c:5e:55:09:4e:da:83:e0:fd:f5:
1d:27:ed:79:2b:a6:4d:dd:f6:f8:8e:8f:0c:86:6a:
82:68:e1:d0:db:ab:0c:ae:43:f7:10:b5:4e:5f:2f:
4f:57:93:7a:8b:a7:de:5e:f5:a7:68:23:26:7c:2c:
36:cb:62:53:23:0d:8d:21:f2:47:7c:63:17:5c:62:
8a:3c:70:87:e3:9a:a2:ea:1b:4e:9d:14:c9:f8:45:
f3:23:be:2b:6a:a1:7b:a1:80:29:44:ed:c3:4e:5f:
09:e9:79:c5:9e:5f:7a:39:18:9f:d6:70:90:5b:12:
7d:94:54:ea:d2:aa:d8:7b:0d:bd:30:23:42:db:1b:
ef:d2:dd:c9:71:c1:4b:f8:ba:9c:e3:c7:d6:86:9f:
96:7c:0a:6b:e2:87:82:0e:14:17:e3:10:13:3e:7d:
3e:ba:2e:63:25:ea:73:a7:91:ea:e4:01:d8:94:0e:
3a:f3:23:48:3f:91:d5:e3:9d:a4:8c:e0:8e:0d:9d:
18:d6:be:94:63:e3:0b:f6:19:0a:54:f0:0c:c6:f1:
b4:d0:b6:ca:e1:d4:4f:6c:a7:53:1e:b2:4e:a9:30:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:96:91:5D:C0:E5:03:9B:C5:68:F3:EA:F2:63:50:E2:6D:34:85
X509v3 Authority Key Identifier:
keyid:EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/EB4BC06D40657A9BF43ECE8309ADAD76DF24A63B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/32332e3133332e3137322e302f32342d3234203d3e203633323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.133.172.0/24
Signature Algorithm: sha256WithRSAEncryption
85:49:f2:14:6d:ac:b0:59:d3:21:3e:14:a4:3f:0a:54:f9:98:
a9:31:f5:5a:7f:3e:74:fe:cf:6f:62:99:f4:36:eb:0e:22:f1:
0a:a4:67:80:77:6a:f3:51:35:66:94:10:ad:78:4a:41:e4:80:
95:3b:a8:23:19:12:b0:a9:ee:83:f8:a4:db:36:6c:4a:2e:5d:
fe:a7:00:70:49:f6:00:53:51:34:49:94:f7:12:f7:01:a6:ea:
dd:85:71:fe:9b:92:1e:15:50:a3:f6:b2:94:40:cb:71:1d:a8:
e7:71:f4:af:23:e0:a0:4f:31:1e:73:7f:25:5f:95:99:68:4c:
61:78:9f:d5:2b:00:24:cc:49:f4:d6:b7:56:ec:11:76:2b:39:
ca:ab:75:a8:55:3c:c3:ce:da:7e:c2:a6:66:52:88:3c:1c:d0:
0d:4a:b8:c6:47:a9:5b:c3:d3:0e:86:4b:9f:d9:83:94:67:6a:
f6:e2:46:63:bb:ab:15:43:cb:07:9c:15:5d:45:6a:2e:59:ba:
ac:18:98:d4:29:10:99:6f:e6:52:55:63:9e:df:f7:8b:b7:50:
3b:ee:a5:4e:3a:b8:81:fc:11:c4:a8:c7:03:aa:ac:23:fa:26:
57:8c:a1:7d:16:3a:59:97:6f:b8:40:73:91:08:ed:0e:0e:50:
d2:f2:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:32 2025 by rpki-client