Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
File: 32332e3135342e382e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier: 48LuVfoYaTemOTmYXVlHoU6//ESJdBOQ5aUDkYeSmaA=
Subject key identifier: B1:FB:C7:2F:BF:CD:2B:75:F4:11:2D:0E:E9:6A:52:76:9C:1C:63:D4
Certificate issuer: /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial: 503E6498F2CB3639E905243EE41B53CEC2128D34
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
Signing time: Tue 26 Nov 2024 05:18:13 +0000
ROA not before: Tue 26 Nov 2024 05:13:13 +0000
ROA not after: Tue 25 Nov 2025 05:18:13 +0000
asID: 52025
IP address blocks: 23.154.8.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3e:64:98:f2:cb:36:39:e9:05:24:3e:e4:1b:53:ce:c2:12:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Validity
Not Before: Nov 26 05:13:13 2024 GMT
Not After : Nov 25 05:18:13 2025 GMT
Subject: CN=B1FBC72FBFCD2B75F4112D0EE96A52769C1C63D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:d3:c5:17:45:13:8f:1a:5e:74:cc:75:39:
5a:1b:6f:8f:cb:b9:54:6d:e6:5d:21:11:cf:d6:6c:
e7:b7:0b:a4:4b:fb:a8:7a:f0:ee:1d:54:64:ba:fd:
6d:fa:c3:1b:d0:91:36:4b:ee:01:1e:2e:22:e0:9f:
fd:ee:14:1d:dd:4c:64:af:0c:9e:bc:7b:81:48:87:
a1:69:fe:23:69:37:da:c7:00:1d:17:5d:98:9b:ee:
48:fb:3c:42:e6:e5:f0:d6:d9:c7:80:0c:b9:dd:43:
e4:a0:ce:e1:eb:79:cd:d0:40:4c:dd:83:05:db:5d:
d7:86:2e:67:56:f6:26:64:24:16:7d:88:2f:a2:69:
2d:d2:ba:44:66:a0:87:60:d9:c1:65:d4:b9:91:01:
b0:9f:a8:04:67:30:da:62:7c:b4:91:03:d9:a0:ea:
87:a5:5f:ae:d8:18:00:19:97:26:26:ab:dd:f8:9d:
37:dc:db:9e:4a:f3:48:4c:79:b6:96:c6:fb:f7:fa:
df:af:83:16:a9:eb:19:e0:5f:a7:31:7c:1a:3a:87:
7e:63:78:62:21:85:c3:19:ad:c8:68:a5:48:af:5c:
64:54:62:f3:1f:3b:4a:ff:11:8d:dd:6c:d0:a2:19:
79:e2:17:dc:c7:e0:74:73:f8:9d:b1:c4:a6:28:52:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:C7:2F:BF:CD:2B:75:F4:11:2D:0E:E9:6A:52:76:9C:1C:63:D4
X509v3 Authority Key Identifier:
keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.154.8.0/24
Signature Algorithm: sha256WithRSAEncryption
32:79:1f:16:3a:68:d8:90:ba:a0:1c:c7:4c:64:9a:c5:8c:c1:
c7:be:54:2c:04:c4:f7:59:83:e8:9a:8d:b2:7f:b2:d4:4e:b0:
af:e6:45:38:65:1f:e4:15:a6:39:6a:d4:8e:e7:cd:e4:d8:ad:
58:e6:6d:9b:aa:ef:22:b7:a8:52:e6:41:ee:a8:15:32:12:16:
eb:5e:c4:3f:db:40:e7:d2:cc:05:5c:eb:6f:e9:7c:c8:eb:74:
a0:07:1d:3c:c7:b0:bf:c2:db:2b:05:21:51:f2:00:ef:fc:fa:
5a:07:42:85:00:38:bf:b9:73:e2:74:1e:90:5a:8e:71:6b:85:
4a:f6:16:10:02:3b:db:0b:53:41:65:c6:47:06:5f:c1:19:2c:
f0:43:6b:2d:9a:66:51:02:1d:bf:e0:da:d1:22:a2:c3:b7:f1:
0a:d1:54:b0:7c:43:9a:b1:57:66:07:e6:53:d0:e6:2c:88:4b:
d9:3b:c0:3b:28:43:ef:21:69:77:53:71:5c:17:cf:e9:e9:d5:
62:b4:f5:39:8c:30:35:da:70:71:97:6a:ec:63:ba:3e:09:40:
19:a5:e9:7c:64:fb:be:7d:0d:75:88:41:90:75:9e:c4:55:f0:
47:6a:08:db:a8:6a:55:12:5f:ed:13:b2:ae:63:ca:e4:9c:3b:
7b:68:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:13:31 2025 by rpki-client