Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa
File: 32332e3133322e3138342e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier: 5F7aomT7TZxNMiPdIA6klu5WBCD4Y0Cjure5E5YDhRg=
Subject key identifier: D6:D6:F2:31:B3:F4:3D:80:73:BF:EB:07:F5:29:F5:71:66:A8:05:E3
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 0A01B8D1400A4D9838EE191B9AA17225A010CBD6
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 61138
IP address blocks: 23.132.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:01:b8:d1:40:0a:4d:98:38:ee:19:1b:9a:a1:72:25:a0:10:cb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=D6D6F231B3F43D8073BFEB07F529F57166A805E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:a5:6d:5b:c3:81:6b:71:e4:6a:45:5c:7c:
a5:99:31:12:a3:fc:a6:f9:13:ff:04:50:44:f0:e4:
0d:02:89:48:8b:51:a5:72:88:91:5e:9e:48:42:3c:
c9:e7:ca:c4:69:76:4f:03:82:95:1d:10:e0:f6:3c:
6a:4e:4e:a5:df:3e:fd:a0:2e:b5:07:9a:6f:0c:de:
ce:36:76:f3:a7:ce:f7:6c:a0:39:f0:b1:8a:36:77:
8a:71:d3:bf:2f:ef:bf:b5:85:a7:ff:72:92:89:49:
91:a2:3e:55:c3:6a:e2:03:73:86:c2:7e:1b:61:50:
2d:8f:99:a6:d7:9b:c4:b7:0a:14:a4:0e:4f:f3:24:
99:ef:cf:e4:f9:05:b3:20:3a:1b:8b:93:6f:8a:73:
a8:e9:12:b8:6e:33:6b:48:93:a0:9b:24:a2:51:1d:
6c:8e:49:0e:fb:e2:c7:65:1f:6c:1b:5d:53:4b:65:
94:37:cb:fe:9c:3c:de:a1:c9:e0:7c:1b:a2:d7:9d:
13:3c:3c:f7:fa:2d:7f:1a:ef:e7:22:d0:08:fa:1a:
7c:00:e5:4d:46:89:91:6b:20:b0:3d:c5:13:f9:cb:
e3:7b:bd:57:69:71:f3:07:33:8e:a1:41:b1:c5:f8:
7c:8e:4b:ea:a6:a5:8f:b7:28:00:40:24:49:58:0e:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:F2:31:B3:F4:3D:80:73:BF:EB:07:F5:29:F5:71:66:A8:05:E3
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.132.184.0/23
Signature Algorithm: sha256WithRSAEncryption
55:cc:64:50:45:fd:66:69:ef:9e:33:28:99:31:ff:94:80:68:
88:90:28:8c:a4:da:e1:59:57:dd:89:06:8c:ce:bd:aa:08:88:
d8:13:72:82:82:fa:59:7b:f2:05:d0:d4:93:ed:21:ad:1f:22:
3c:f5:cc:e7:92:1b:08:05:68:98:82:87:91:16:94:02:53:31:
75:75:19:a9:d0:52:2b:81:7c:20:b3:ca:05:0a:39:19:26:a4:
da:8b:21:d4:92:48:9d:ae:18:29:41:64:84:79:06:2d:2a:f4:
a2:e1:ab:53:20:65:21:29:de:97:eb:a9:bb:56:a7:29:7d:0c:
1e:49:71:4f:7d:f1:62:d8:42:99:21:85:ff:66:57:c2:8a:23:
36:a3:c8:15:d9:a7:70:88:45:39:3f:df:8e:b8:b6:38:07:26:
5d:75:dc:9e:b5:9a:89:11:23:2a:1a:29:ca:75:e5:6f:a1:ae:
d9:f5:bf:ec:c6:62:47:ae:5f:48:c1:03:26:a5:00:00:9b:6f:
0f:8a:b9:5b:21:72:a6:12:f1:4f:94:fd:88:a3:c8:16:6f:b4:
d9:23:34:b1:01:24:4f:dd:f7:0b:15:5f:cb:4f:18:7e:93:81:
00:81:f8:bb:6d:bc:1b:2e:0b:92:d9:e1:e5:10:ef:d4:fe:ea:
f9:dd:a0:de
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUCgG40UAKTZg47hkbmqFyJaAQy9YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZk
YWIzYTgxYTg4ZDhhNDhhNDYwHhcNMjMwMTAxMjM1NDI3WhcNMjMxMjMxMjM1OTI3
WjAzMTEwLwYDVQQDEyhENkQ2RjIzMUIzRjQzRDgwNzNCRkVCMDdGNTI5RjU3MTY2
QTgwNUUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAylbVvDgWtx
5GpFXHylmTESo/ym+RP/BFBE8OQNAolIi1GlcoiRXp5IQjzJ58rEaXZPA4KVHRDg
9jxqTk6l3z79oC61B5pvDN7ONnbzp873bKA58LGKNneKcdO/L++/tYWn/3KSiUmR
oj5Vw2riA3OGwn4bYVAtj5mm15vEtwoUpA5P8ySZ78/k+QWzIDobi5NvinOo6RK4
bjNrSJOgmySiUR1sjkkO++LHZR9sG11TS2WUN8v+nDzeocngfBui150TPDz3+i1/
Gu/nItAI+hp8AOVNRomRayCwPcUT+cvje71XaXHzBzOOoUGxxfh8jkvqpqWPtygA
QCRJWA45rQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFNbW8jGz9D2Ac7/rB/Up9XFm
qAXjMB8GA1UdIwQYMBaAFBoFA0MLqZP3D4mr6EIb90Y/5cq/MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1
LWJhMWU5YjMzNmQ2Mi8xLzFBMDUwMzQzMEJBOTkzRjcwRjg5QUJFODQyMUJGNzQ2
M0ZFNUNBQkYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2Mt
NDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1k
MzFlNThiYzNjYTQvZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZkYWIz
YTgxYTg4ZDhhNDhhNDYuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8xLzMyMzMyZTMx
MzMzMjJlMzEzODM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTMxMzMzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAReEuDANBgkqhkiG9w0BAQsFAAOCAQEAVcxkUEX9ZmnvnjMomTH/
lIBoiJAojKTa4VlX3YkGjM69qgiI2BNygoL6WXvyBdDUk+0hrR8iPPXM55IbCAVo
mIKHkRaUAlMxdXUZqdBSK4F8ILPKBQo5GSak2osh1JJIna4YKUFkhHkGLSr0ouGr
UyBlISnel+upu1anKX0MHklxT33xYthCmSGF/2ZXwoojNqPIFdmncIhFOT/fjri2
OAcmXXXcnrWaiREjKhopynXlb6Gu2fW/7MZiR65fSMEDJqUAAJtvD4q5WyFyphLx
T5T9iKPIFm+02SM0sQEkT933CxVfy08YfpOBAIH4u228Gy4Lktnh5RDv1P7q+d2g
3g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org