Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e20323136333630.roa
File: 32332e3136342e35372e302f32342d3234203d3e20323136333630.roa (raw, json)
Hash identifier: x397OkXmUifBQMEtT7xe6kpArMXJjH3e6QME4d3IlgY=
Subject key identifier: 6F:A8:EC:CD:DF:D9:6E:2B:19:3C:AF:4A:9E:9F:D5:F4:1B:C2:A7:91
Certificate issuer: /CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
Certificate serial: 4F7E570DAEABC177E0184FD2E50719F7F3BD4E9C
Authority key identifier: 27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e20323136333630.roa
Signing time: Thu 06 Jun 2024 05:52:29 +0000
ROA not before: Thu 06 Jun 2024 05:47:29 +0000
ROA not after: Thu 05 Jun 2025 05:52:29 +0000
asID: 216360
IP address blocks: 23.164.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7e:57:0d:ae:ab:c1:77:e0:18:4f:d2:e5:07:19:f7:f3:bd:4e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
Validity
Not Before: Jun 6 05:47:29 2024 GMT
Not After : Jun 5 05:52:29 2025 GMT
Subject: CN=6FA8ECCDDFD96E2B193CAF4A9E9FD5F41BC2A791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:c0:78:6d:60:28:3e:11:a2:5e:bb:5d:26:
6e:43:92:b2:e7:05:c6:34:66:8a:40:fb:68:bd:8a:
ed:fc:69:47:a4:28:bc:e5:71:67:77:c5:cf:03:96:
0b:5c:90:25:45:50:5d:a0:dc:e0:f6:c0:75:cd:ab:
a8:be:a5:f6:74:73:43:27:21:ff:10:4b:11:fb:a5:
80:22:2c:55:d5:1a:23:f3:ae:71:95:18:5e:ea:11:
fc:3a:17:c6:8c:02:a2:b2:1b:78:79:5c:83:71:ee:
d1:b7:4d:48:c8:24:da:cb:ab:f6:dc:90:05:c6:c4:
b2:e3:51:d3:19:a5:3a:e9:20:4b:0c:d0:92:21:ab:
94:97:df:33:2c:77:53:cd:c3:f2:bb:47:44:2b:c7:
e4:c9:a5:f0:cf:34:c7:a4:fe:ab:18:ed:81:26:67:
c3:66:34:68:e7:3a:0a:4b:4a:68:c2:b7:b6:2b:34:
1c:ee:2a:39:32:b3:e3:94:b5:48:80:5f:2c:fb:c8:
f7:a5:44:58:77:ab:f1:82:36:24:d4:be:5c:22:99:
b3:08:8b:8b:67:89:b5:41:31:02:20:5f:5a:1a:91:
86:96:41:b4:b8:2c:98:72:c8:20:7f:0f:91:6e:7f:
16:0c:0f:53:d7:6c:e4:c0:00:6e:7e:c5:22:5a:ae:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:EC:CD:DF:D9:6E:2B:19:3C:AF:4A:9E:9F:D5:F4:1B:C2:A7:91
X509v3 Authority Key Identifier:
keyid:27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/270969B754067611094A17D0DFD820D05A68B2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35372e302f32342d3234203d3e20323136333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.164.57.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bf:3f:fc:33:57:83:c2:12:e1:52:de:70:18:85:4c:7b:45:
86:06:31:93:bc:8b:14:ee:4a:a1:b2:62:89:35:bd:bc:70:ab:
b8:ba:e3:06:23:74:10:4b:37:52:e2:b5:c0:e8:09:a1:2c:b4:
86:dd:05:e5:03:3d:24:0c:dd:d9:80:65:63:c8:ac:a5:39:7f:
ba:95:15:85:9e:07:b2:85:b3:a7:d2:90:67:29:13:ec:dd:24:
27:6e:3d:5a:af:10:38:dc:30:45:87:47:9b:dc:34:fb:82:74:
e5:dd:8f:e7:aa:5d:4f:a1:ad:7b:d1:49:15:86:34:7b:69:64:
3d:a8:12:ab:73:a0:0c:0d:8a:b6:36:0e:24:c5:cf:c5:d2:72:
ad:4a:1f:b4:06:9a:7a:54:55:60:40:dd:5e:09:c9:1c:9d:c9:
92:79:a0:87:2a:66:2b:73:9f:0b:df:57:68:27:af:f3:02:c5:
45:4c:ef:7d:9f:bd:8f:47:7a:8f:ce:74:87:b1:4f:b7:db:8f:
cb:26:fd:f3:ed:6f:63:6b:d6:ec:db:1e:05:30:3e:34:94:3e:
27:d2:a8:ff:42:8f:d3:36:b0:dc:21:f1:39:46:28:dc:fb:1b:
73:c5:38:21:d6:3c:45:7e:26:c2:57:08:30:ea:ee:2e:f8:94:
c8:32:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:41 2025 by rpki-client