Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35362e302f32342d3234203d3e20323136333630.roa
File: 32332e3136342e35362e302f32342d3234203d3e20323136333630.roa (raw, json)
Hash identifier: yxwBnMf5fN/5p4mPnNpRnAKn1SYM31C10+XAMRA7OHc=
Subject key identifier: D5:7B:74:75:85:E6:C3:EA:26:C7:92:BE:20:C0:0F:15:52:CF:E7:62
Certificate issuer: /CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
Certificate serial: 269306BD60D4EC44BF884F28BB1056EFABFA4C02
Authority key identifier: 27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35362e302f32342d3234203d3e20323136333630.roa
Signing time: Wed 06 Mar 2024 21:23:07 +0000
ROA not before: Wed 06 Mar 2024 21:18:07 +0000
ROA not after: Wed 05 Mar 2025 21:23:07 +0000
asID: 216360
IP address blocks: 23.164.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:93:06:bd:60:d4:ec:44:bf:88:4f:28:bb:10:56:ef:ab:fa:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
Validity
Not Before: Mar 6 21:18:07 2024 GMT
Not After : Mar 5 21:23:07 2025 GMT
Subject: CN=D57B747585E6C3EA26C792BE20C00F1552CFE762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:e4:5f:cf:36:40:e4:69:47:8a:d3:79:35:
34:03:9b:d5:a4:b4:a2:55:6a:36:3b:71:de:e5:81:
bb:c4:61:61:44:4a:a5:da:f2:66:89:d4:c5:77:5e:
c0:c9:ab:94:95:f2:18:4f:8f:6f:a6:f3:fe:38:3a:
14:4c:9a:3e:9e:e4:86:ef:bb:32:b1:0d:f0:eb:e8:
ea:28:8a:6f:dd:d1:f5:b5:49:44:ba:50:71:f4:4e:
af:1b:e0:86:28:af:bd:9a:da:78:cd:1c:19:1e:7b:
33:6d:a9:11:ef:f8:c1:49:fc:9e:6b:1c:ed:d7:8a:
f8:b2:00:a7:59:ab:95:4b:2c:b4:cb:6a:3b:78:c9:
6f:c1:21:2b:30:b5:7d:b7:4b:c6:3f:70:51:bb:67:
a4:ab:ad:cc:f3:c1:a0:2a:e9:54:23:39:95:de:63:
23:20:59:2e:c6:8b:17:57:d6:3e:f7:7f:4d:9f:c5:
0c:4a:f2:f4:1b:14:e1:af:25:cd:c3:55:85:2f:6d:
4d:95:56:71:54:79:ca:6a:f5:18:20:03:b1:a1:cb:
aa:e6:66:6f:ba:95:9c:72:ca:a3:55:e3:9f:7b:43:
d3:b8:79:b9:a2:79:c6:d3:e7:07:cb:c6:cf:ad:08:
2b:c3:59:1d:25:b1:07:38:10:c0:21:33:d3:36:aa:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7B:74:75:85:E6:C3:EA:26:C7:92:BE:20:C0:0F:15:52:CF:E7:62
X509v3 Authority Key Identifier:
keyid:27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/270969B754067611094A17D0DFD820D05A68B2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/32332e3136342e35362e302f32342d3234203d3e20323136333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.164.56.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1c:27:5e:3d:48:d1:37:37:ab:a9:fb:f7:1b:49:9f:53:f5:
01:8d:0c:d2:33:9d:2a:a6:0a:cc:57:fa:93:37:11:02:c0:a0:
a1:b4:23:74:14:d2:d0:f8:0f:e6:22:05:83:34:9e:5b:9e:da:
18:e8:61:f9:ce:43:2f:0e:42:27:c1:21:f8:42:1c:3c:9c:59:
62:85:55:77:0a:be:af:17:3f:a4:ae:10:17:c8:59:a3:a1:cd:
06:34:f0:42:e5:fd:ab:2c:36:dc:7c:d9:52:54:d0:31:09:b1:
d1:4a:d9:6e:1c:32:81:a4:2a:79:3b:2d:a2:55:ed:2c:50:ae:
f9:08:1c:93:9f:94:b7:fc:89:b5:9f:59:a5:3e:27:1a:8a:7e:
d7:2b:8d:65:cd:65:d3:5a:33:67:05:53:ca:09:21:8a:b1:9f:
01:d5:5b:0a:de:00:05:57:ff:e0:4c:78:2f:43:8b:14:6e:e5:
59:7d:36:56:17:f9:f0:2d:71:1b:4b:01:ad:02:f7:b4:14:e1:
c2:a7:11:51:4f:54:50:47:39:10:cb:51:a9:cd:19:69:ea:3d:
1a:5c:30:5e:93:fe:20:5f:13:a4:43:b0:2d:78:71:5c:c4:68:
2b:62:31:c2:e7:7c:b5:20:ca:23:a0:47:4a:46:e0:75:65:32:
f6:0c:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:51:27 2024 by rpki-client on console.sobornost.net