Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e203436383434.roa
File: 34352e39332e3138342e302f32332d3234203d3e203436383434.roa (raw, json)
Hash identifier: TGlDdvU4w10Euo8HgTetP9ViEjknUhAwENZAinoPE6I=
Subject key identifier: 91:CB:0E:BC:D6:13:D2:FB:4D:24:F3:18:D1:16:C9:F2:D9:1A:1B:45
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 32134B73EFDEC3AB34C8EBA8C228E25B4CDC85F7
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e203436383434.roa
Signing time: Thu 02 Jan 2025 05:14:45 +0000
ROA not before: Thu 02 Jan 2025 05:09:45 +0000
ROA not after: Thu 01 Jan 2026 05:14:45 +0000
asID: 46844
IP address blocks: 45.93.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:13:4b:73:ef:de:c3:ab:34:c8:eb:a8:c2:28:e2:5b:4c:dc:85:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jan 2 05:09:45 2025 GMT
Not After : Jan 1 05:14:45 2026 GMT
Subject: CN=91CB0EBCD613D2FB4D24F318D116C9F2D91A1B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:1f:a0:17:74:1e:71:3d:48:6b:70:cb:ed:
a3:ca:6b:fd:45:2d:98:3c:91:8c:30:8d:82:8a:e6:
56:a0:b7:e7:67:d3:4e:dd:58:10:59:10:11:40:a7:
11:fb:3d:82:cc:35:43:c8:40:b0:09:23:48:bc:d4:
72:6f:0c:5e:a2:5a:0e:5e:b7:e7:48:29:b0:73:cc:
66:5c:a5:b2:48:31:1d:17:7a:e6:e5:6f:a1:2e:f2:
02:ed:9d:53:0d:de:e1:80:d6:c1:1f:7d:f5:20:a2:
4a:f9:10:d0:08:2f:2c:05:00:ec:b7:ee:8f:fe:c0:
10:ee:9b:44:56:fa:9d:05:35:8b:25:65:ee:7d:43:
42:5f:8c:92:10:da:2c:22:62:3f:28:55:27:95:d2:
51:38:a0:32:2c:6a:22:29:0b:db:d5:9c:ca:05:b2:
f8:de:4d:57:61:34:96:21:3e:fc:e7:bb:00:6c:cd:
a0:8f:08:63:49:82:31:cc:08:77:64:08:6e:df:04:
9c:eb:82:22:38:5c:6a:05:69:ea:0f:10:07:b7:4c:
01:e7:e1:92:3a:f1:c3:51:75:4a:7f:9d:cb:92:78:
c4:52:26:91:17:dc:c1:2d:67:29:bc:b7:d6:fa:cf:
e8:47:8a:b9:8a:bf:d5:2a:eb:82:b0:76:9c:c0:41:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:0E:BC:D6:13:D2:FB:4D:24:F3:18:D1:16:C9:F2:D9:1A:1B:45
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e203436383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/23
Signature Algorithm: sha256WithRSAEncryption
78:8d:09:1d:b0:f5:3f:50:df:95:50:f8:08:dd:4d:0e:1e:85:
ca:c0:2a:61:a3:80:f0:67:57:d8:60:a5:a8:24:39:d4:83:b4:
39:da:bf:92:bb:9b:a0:63:bc:4c:9d:1e:1c:d2:13:fb:13:b8:
34:03:9b:94:2a:8d:50:0b:f5:ea:a4:08:2c:f7:4c:d5:cc:c5:
8c:c4:cd:45:38:22:68:8c:f6:1a:d5:50:92:3f:dc:1d:77:5d:
85:e4:31:39:e7:f9:a6:e9:3b:c5:4c:0c:7c:5b:7b:74:75:4e:
5d:3c:c4:2e:33:bd:2d:73:56:86:ba:70:85:87:cf:66:1f:d3:
dd:34:6d:27:68:6c:7b:79:a1:79:77:ef:a5:0e:48:95:cf:a0:
1b:d1:9d:f0:8b:0e:b4:8d:a0:c8:14:54:dd:8f:27:9c:dd:8b:
48:06:6b:ea:8b:42:f3:12:1b:83:48:25:6d:81:6e:5c:55:dc:
af:38:39:8f:0d:61:b7:3f:94:64:f8:60:4d:99:fe:e3:91:d0:
66:b7:be:0f:b7:b9:41:55:db:ab:44:f9:88:6a:f3:24:e5:23:
1b:e8:d6:31:6e:70:d3:e5:02:2a:eb:90:2c:cd:80:da:eb:cc:
d2:8f:73:f8:a8:aa:da:db:83:19:c3:31:13:ef:9e:1a:19:58:
99:7c:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:14:44 2025 by rpki-client