Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
File: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier: rtIH1kpCV/PT+bgf1KhIv+LcyuB7c0gtM+zlgGsAS4U=
Subject key identifier: 84:4F:76:9A:69:C7:5E:DF:D3:62:FA:FC:80:14:0B:79:1C:2B:95:1F
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 28AEF94E51BD78BEBBECBE645EE62B7E8AC062F1
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
Signing time: Thu 21 Sep 2023 16:18:27 +0000
ROA not before: Thu 21 Sep 2023 16:13:27 +0000
ROA not after: Thu 19 Sep 2024 16:18:27 +0000
asID: 30644
IP address blocks: 45.140.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ae:f9:4e:51:bd:78:be:bb:ec:be:64:5e:e6:2b:7e:8a:c0:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 21 16:13:27 2023 GMT
Not After : Sep 19 16:18:27 2024 GMT
Subject: CN=844F769A69C75EDFD362FAFC80140B791C2B951F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:c0:4f:ee:e4:ac:a9:78:08:27:90:7e:03:
87:49:91:65:a1:71:0d:0b:72:7e:bf:5f:d5:9b:85:
90:17:2e:99:8f:65:5e:bf:9a:d0:76:54:e6:eb:fc:
a0:9a:e6:71:60:3a:77:37:5a:d5:0f:b5:b7:f8:8e:
09:45:fc:ad:10:9a:cc:a6:dd:14:33:98:e8:46:d3:
25:be:5d:ef:d3:b3:de:5f:d3:4a:bc:75:76:d7:2d:
e5:a5:91:89:65:d7:fa:0b:ba:7c:bd:34:1c:09:97:
e7:e8:c5:a3:e3:69:3b:bd:15:a4:46:77:5e:0f:b2:
e7:4a:53:4d:47:a8:ae:5f:be:ff:8b:bc:f0:72:4e:
af:6e:a2:38:1b:c8:f6:b1:30:54:62:9d:38:0a:71:
b6:18:42:08:1a:db:55:22:03:8d:03:80:75:d6:a5:
73:6d:90:ab:24:1c:32:2d:df:7d:1f:30:00:bf:76:
35:26:3a:c3:5e:58:4f:b4:57:e0:ed:6f:fb:67:d7:
2c:70:10:92:07:47:14:48:2a:90:ab:8b:ac:87:d9:
37:a6:a4:50:19:53:13:d3:cb:f3:c9:ad:07:53:ff:
be:1a:0a:57:66:0e:7e:f1:35:14:b2:6a:41:b5:2f:
0d:4b:3e:88:7b:f0:ad:b3:3b:97:7f:2a:1f:61:f6:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:76:9A:69:C7:5E:DF:D3:62:FA:FC:80:14:0B:79:1C:2B:95:1F
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.38.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a2:c1:9d:b3:c9:ce:27:1b:09:b8:24:ec:90:b3:d0:dd:c0:
4b:68:8a:d3:55:7f:77:0e:26:ea:96:07:23:20:db:72:fa:b4:
37:0b:51:88:ae:a2:73:57:81:65:a1:77:22:34:1a:be:eb:fe:
68:ea:bc:4e:06:96:d7:25:ed:6c:07:b9:f1:d1:41:be:2b:80:
91:bc:14:c0:7c:2f:dc:7a:bf:29:d0:05:3b:0d:b7:f1:49:16:
91:bd:66:b0:d3:0c:3a:a9:99:9d:f8:4e:0a:94:c5:d1:47:9c:
9a:2d:d3:4a:56:68:33:b3:c5:fc:aa:53:7f:6c:2a:a3:cb:5c:
9b:d9:be:f7:8e:07:32:76:71:c6:2f:7b:11:13:1d:fb:6b:29:
e9:ad:8a:f5:bd:0d:b9:8a:ca:ae:0a:a8:da:1f:1f:25:b0:43:
d9:ec:8a:4d:d0:f7:a4:fe:99:4e:4d:aa:64:a8:5a:a1:fe:79:
2e:31:34:57:f4:2e:e9:3d:0f:be:51:09:b3:3f:14:51:e2:9d:
ab:68:4b:f5:7f:a1:ac:7f:db:b2:fb:db:55:d9:7a:35:2a:82:
08:39:28:18:56:cb:87:47:c2:14:d7:a0:12:ad:aa:38:96:d0:
10:64:dc:18:41:c6:5a:74:2e:7f:50:0d:80:87:c2:66:3b:b8:
3c:a7:ad:74
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKK75TlG9eL677L5kXuYrforAYvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA5MjExNjEzMjdaFw0yNDA5MTkxNjE4MjdaMDMxMTAvBgNV
BAMTKDg0NEY3NjlBNjlDNzVFREZEMzYyRkFGQzgwMTQwQjc5MUMyQjk1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyk8BP7uSsqXgIJ5B+A4dJkWWh
cQ0Lcn6/X9WbhZAXLpmPZV6/mtB2VObr/KCa5nFgOnc3WtUPtbf4jglF/K0Qmsym
3RQzmOhG0yW+Xe/Ts95f00q8dXbXLeWlkYll1/oLuny9NBwJl+foxaPjaTu9FaRG
d14PsudKU01HqK5fvv+LvPByTq9uojgbyPaxMFRinTgKcbYYQgga21UiA40DgHXW
pXNtkKskHDIt330fMAC/djUmOsNeWE+0V+Dtb/tn1yxwEJIHRxRIKpCri6yH2Tem
pFAZUxPTy/PJrQdT/74aCldmDn7xNRSyakG1Lw1LPoh78K2zO5d/Kh9h9nl3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhE92mmnHXt/TYvr8gBQLeRwrlR8wHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzNDMwMmUzMzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMDM2MzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2M
JjANBgkqhkiG9w0BAQsFAAOCAQEAOaLBnbPJzicbCbgk7JCz0N3AS2iK01V/dw4m
6pYHIyDbcvq0NwtRiK6ic1eBZaF3IjQavuv+aOq8TgaW1yXtbAe58dFBviuAkbwU
wHwv3Hq/KdAFOw238UkWkb1msNMMOqmZnfhOCpTF0Uecmi3TSlZoM7PF/KpTf2wq
o8tcm9m+944HMnZxxi97ERMd+2sp6a2K9b0NuYrKrgqo2h8fJbBD2eyKTdD3pP6Z
Tk2qZKhaof55LjE0V/Qu6T0PvlEJsz8UUeKdq2hL9X+hrH/bsvvbVdl6NSqCCDko
GFbLh0fCFNegEq2qOJbQEGTcGEHGWnQuf1ANgIfCZju4PKetdA==
-----END CERTIFICATE-----
Generated at Wed Sep 27 11:10:20 2023 by rpki-client on console-ams.rpki-client.org