Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e20323134343039.roa
File: 32332e3136342e35372e302f32342d3234203d3e20323134343039.roa (raw, json)
Hash identifier: 2QYY1pT58Mqgmk9TClcTyre1TZ/+R0LWlnvoPn0aU9w=
Subject key identifier: 8C:50:2A:3D:91:99:57:4D:5A:71:7D:79:31:2B:B5:0F:D8:9C:70:4C
Certificate issuer: /CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
Certificate serial: 7964DB42B385112207A85C57AF9F7839FF700370
Authority key identifier: 27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e20323134343039.roa
Signing time: Thu 08 Aug 2024 00:15:30 +0000
ROA not before: Thu 08 Aug 2024 00:10:30 +0000
ROA not after: Thu 07 Aug 2025 00:15:30 +0000
asID: 214409
IP address blocks: 23.164.57.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:64:db:42:b3:85:11:22:07:a8:5c:57:af:9f:78:39:ff:70:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
Validity
Not Before: Aug 8 00:10:30 2024 GMT
Not After : Aug 7 00:15:30 2025 GMT
Subject: CN=8C502A3D9199574D5A717D79312BB50FD89C704C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:59:82:d2:e2:9c:d1:da:32:97:9a:7c:ed:
68:35:fb:b6:57:9c:85:ef:75:4b:59:eb:51:db:82:
3a:f8:23:4f:7e:c1:7d:71:9b:12:73:55:c0:f6:57:
94:9a:a7:40:b9:93:b3:b9:ed:1c:e7:72:8e:5b:8d:
ef:73:2c:41:6d:9e:cd:8a:67:2f:5c:65:eb:c1:ec:
ee:a9:dd:7a:c5:02:8b:58:9a:46:38:b1:ee:aa:b9:
2c:f1:d7:08:e7:0f:fe:c9:17:77:ed:67:20:e6:f6:
21:95:81:a6:7e:af:ac:4b:f0:82:e0:a1:be:59:9c:
49:c4:77:9b:21:ef:f1:33:86:ac:ce:d8:1f:a9:c2:
86:bf:74:50:e9:55:1e:97:f5:5c:24:ec:79:99:25:
60:0c:69:d2:dd:73:f8:8c:40:83:69:e6:ee:a5:9a:
09:99:9c:24:04:c8:29:15:64:d1:58:2a:ab:e4:d7:
4d:5d:72:a2:57:d5:56:be:b0:5a:cc:48:cb:e5:24:
e3:ca:c1:9e:54:d6:45:d4:73:cc:5d:15:5c:0d:1d:
52:86:85:57:26:49:13:43:95:72:bf:f5:a4:99:55:
3a:7d:b8:49:b5:99:64:c6:25:71:c0:05:0e:39:a4:
9d:40:43:56:bf:6b:91:fe:36:97:46:c7:a5:7c:6b:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:2A:3D:91:99:57:4D:5A:71:7D:79:31:2B:B5:0F:D8:9C:70:4C
X509v3 Authority Key Identifier:
keyid:27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/270969B754067611094A17D0DFD820D05A68B2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e20323134343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.164.57.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ec:a8:93:b7:f8:12:07:59:b3:45:7f:58:9c:42:2b:5b:9d:
39:bc:e8:cb:f4:bd:25:4b:5c:55:58:e6:76:27:3e:79:f8:91:
b3:2f:2c:55:22:3d:bc:6e:ae:4a:17:a0:25:f3:d7:36:d2:f1:
53:2f:19:a0:b4:7a:29:4d:62:9b:b2:de:a5:ab:82:80:60:f7:
b0:f9:7c:d6:b6:bd:82:37:d9:d2:95:56:d2:b0:3d:cb:4c:46:
33:27:9c:fe:cb:bb:ce:04:55:b9:db:fc:40:df:50:39:80:a7:
7b:b1:59:75:5c:19:1f:09:dc:13:6a:d2:78:52:d1:df:43:d6:
81:88:e5:c3:c4:02:46:37:00:ad:7e:5f:6d:44:67:1a:76:98:
c3:4c:3f:c1:59:23:68:cb:d0:5e:1a:9c:1f:7c:c9:75:9d:13:
28:26:90:f9:73:cb:5c:cb:cf:68:46:43:46:d2:ec:6a:d2:94:
f4:5a:ec:ab:be:8d:0c:6b:04:b2:6f:6a:99:b2:40:7b:84:e7:
c7:d1:75:50:6f:31:42:e6:1b:d0:78:5c:92:25:9d:54:8d:db:
ad:b3:06:bf:a9:88:54:ad:6d:9a:5d:17:b6:71:08:02:45:dc:
4f:22:60:44:58:89:4a:a8:de:39:11:35:6f:59:2d:ae:c3:5e:
a1:83:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 18:01:05 2024 by rpki-client on console-fra.rpki-client.org