Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa
File: 32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa (raw, json)
Hash identifier: iX5mqjqOJADgKo0wWWRDx8v+wbHvhU2lHMcB2i1el4g=
Subject key identifier: 46:7C:2B:A1:8E:97:CA:7B:8A:B3:A9:8D:74:6F:F3:9A:C3:C0:68:31
Certificate issuer: /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial: 7A4CE1F87A22FEE3D97418488C833C7F9EC8BFA7
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa
Signing time: Sun 01 Jan 2023 23:59:27 +0000
ROA not before: Sun 01 Jan 2023 23:54:27 +0000
ROA not after: Sun 31 Dec 2023 23:59:27 +0000
asID: 211144
IP address blocks: 23.132.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4c:e1:f8:7a:22:fe:e3:d9:74:18:48:8c:83:3c:7f:9e:c8:bf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Validity
Not Before: Jan 1 23:54:27 2023 GMT
Not After : Dec 31 23:59:27 2023 GMT
Subject: CN=467C2BA18E97CA7B8AB3A98D746FF39AC3C06831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:bf:9a:a8:36:5b:58:f1:19:cf:e3:17:06:
66:8f:e8:e2:21:d9:7c:fe:d7:88:13:b6:fd:9e:62:
5f:84:f8:0f:50:da:38:31:1c:e3:26:1c:c6:62:68:
cc:26:fc:7e:92:c9:f3:92:15:fd:18:c3:4c:27:e4:
c4:0d:2c:d1:ec:38:46:2a:1e:24:e2:b5:f7:a0:7e:
f4:25:d8:ee:65:14:95:75:77:b7:2d:27:5f:96:82:
1f:9d:46:8d:de:8d:f4:f4:9b:87:67:c7:f3:7f:ff:
4d:cb:88:82:c5:4e:a7:1e:38:6a:e3:69:c9:53:5e:
8b:9b:7c:67:03:5e:47:76:91:ea:19:e6:bb:ef:e5:
fd:cd:38:02:72:17:d7:6a:58:ce:d3:97:81:c3:0e:
64:5f:95:f6:6f:b1:c2:d3:89:33:b5:03:3a:72:62:
35:bd:5a:49:ee:ba:5f:4b:47:5a:6e:89:e6:83:27:
f4:1b:df:22:ac:0a:e0:6d:5b:20:f1:91:5f:5d:90:
5d:f6:ee:27:0b:6c:cd:a4:5b:cb:a4:4a:8c:a0:6f:
3b:28:55:a8:19:1d:be:22:16:8b:f4:14:c2:7c:10:
36:c7:00:4e:1e:19:d5:a8:b1:d1:fd:08:88:af:fd:
57:b2:22:a7:a3:fb:2c:a5:77:c8:9b:48:7a:51:6b:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:2B:A1:8E:97:CA:7B:8A:B3:A9:8D:74:6F:F3:9A:C3:C0:68:31
X509v3 Authority Key Identifier:
keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.132.185.0/24
Signature Algorithm: sha256WithRSAEncryption
15:72:f3:d0:13:54:fb:2a:a9:c6:64:bc:4b:a1:35:c4:24:b1:
51:c1:09:a4:16:5d:6a:22:02:de:06:4a:00:f4:15:bb:43:60:
bd:10:f0:43:6a:a5:f7:4b:c4:3f:97:4b:12:22:7c:e5:ad:1f:
42:8e:47:a2:48:83:9d:00:c7:4a:a8:e0:c9:05:94:43:90:aa:
05:e7:9f:08:46:cd:d9:8c:d6:34:d5:d7:11:d8:26:e3:fa:76:
33:7e:07:2d:4e:66:ef:fa:1f:88:c2:6e:8f:0e:82:4e:32:bc:
7c:36:4c:f3:ca:bf:e7:68:bb:e2:fa:10:16:35:4a:c1:e5:72:
17:82:6e:74:7c:a1:7d:a8:1e:3f:f1:bc:0d:7b:c0:a3:be:32:
77:5b:82:3f:35:fd:a8:2c:b3:9e:d3:0e:13:9b:df:37:26:9d:
c2:03:0b:d7:a2:69:8b:c2:4d:45:75:d7:07:12:29:f6:d9:75:
06:b0:2d:3b:40:26:d4:6a:f3:65:87:d2:cb:6f:b6:08:f6:3a:
00:96:5e:4e:69:fc:fe:35:2e:ed:1e:83:0d:ad:ff:9e:3a:c9:
de:23:bf:9b:08:eb:3f:10:f2:a1:37:1a:dd:17:3a:0f:b7:c2:
1a:dd:ac:d3:ab:49:94:cd:3f:96:d7:98:c2:2b:cd:c0:e9:16:
b4:25:1e:bf
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIUekzh+Hoi/uPZdBhIjIM8f57Iv6cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZk
YWIzYTgxYTg4ZDhhNDhhNDYwHhcNMjMwMTAxMjM1NDI3WhcNMjMxMjMxMjM1OTI3
WjAzMTEwLwYDVQQDEyg0NjdDMkJBMThFOTdDQTdCOEFCM0E5OEQ3NDZGRjM5QUMz
QzA2ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk+/mqg2W1jx
Gc/jFwZmj+jiIdl8/teIE7b9nmJfhPgPUNo4MRzjJhzGYmjMJvx+ksnzkhX9GMNM
J+TEDSzR7DhGKh4k4rX3oH70JdjuZRSVdXe3LSdfloIfnUaN3o309JuHZ8fzf/9N
y4iCxU6nHjhq42nJU16Lm3xnA15HdpHqGea77+X9zTgCchfXaljO05eBww5kX5X2
b7HC04kztQM6cmI1vVpJ7rpfS0dabonmgyf0G98irArgbVsg8ZFfXZBd9u4nC2zN
pFvLpEqMoG87KFWoGR2+IhaL9BTCfBA2xwBOHhnVqLHR/QiIr/1XsiKno/sspXfI
m0h6UWtciQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFEZ8K6GOl8p7irOpjXRv85rD
wGgxMB8GA1UdIwQYMBaAFBoFA0MLqZP3D4mr6EIb90Y/5cq/MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1
LWJhMWU5YjMzNmQ2Mi8xLzFBMDUwMzQzMEJBOTkzRjcwRjg5QUJFODQyMUJGNzQ2
M0ZFNUNBQkYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2Mt
NDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1k
MzFlNThiYzNjYTQvZWVjZjg0N2Q3YTMyMDQ2ODgxYmJmYWJhMDU5OWJkZDZkYWIz
YTgxYTg4ZDhhNDhhNDYuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH
MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y4ZTdkODY3LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8xLzMyMzMyZTMx
MzMzMjJlMzEzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMxMzEzNDM0
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAF4S5MA0GCSqGSIb3DQEBCwUAA4IBAQAVcvPQE1T7KqnGZLxL
oTXEJLFRwQmkFl1qIgLeBkoA9BW7Q2C9EPBDaqX3S8Q/l0sSInzlrR9CjkeiSIOd
AMdKqODJBZRDkKoF558IRs3ZjNY01dcR2Cbj+nYzfgctTmbv+h+Iwm6PDoJOMrx8
Nkzzyr/naLvi+hAWNUrB5XIXgm50fKF9qB4/8bwNe8CjvjJ3W4I/Nf2oLLOe0w4T
m983Jp3CAwvXommLwk1FddcHEin22XUGsC07QCbUavNlh9LLb7YI9joAll5Oafz+
NS7tHoMNrf+eOsneI7+bCOs/EPKhNxrdFzoPt8Ia3azTq0mUzT+W15jCK83A6Ra0
JR6/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org