Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32332d3234203d3e20333939303733.roa
File: 34352e38392e3135302e302f32332d3234203d3e20333939303733.roa (raw, json)
Hash identifier: L5tdsDeAfp+WYWqW6TnkUu7sDI8ZfFCUruWTOpD74hc=
Subject key identifier: 64:9F:52:E5:E9:8D:EF:7F:87:47:7A:24:B6:06:79:97:A9:41:90:D8
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 18C625A939BD4D905B7FCDF76295265CC6E1C728
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32332d3234203d3e20333939303733.roa
Signing time: Tue 12 Sep 2023 16:33:45 +0000
ROA not before: Tue 12 Sep 2023 16:28:45 +0000
ROA not after: Tue 10 Sep 2024 16:33:45 +0000
asID: 399073
IP address blocks: 45.89.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c6:25:a9:39:bd:4d:90:5b:7f:cd:f7:62:95:26:5c:c6:e1:c7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 12 16:28:45 2023 GMT
Not After : Sep 10 16:33:45 2024 GMT
Subject: CN=649F52E5E98DEF7F87477A24B6067997A94190D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:09:65:86:cd:52:d7:0f:66:58:07:61:8b:
d8:40:0f:93:ae:3b:64:c3:d6:2e:7d:42:4c:26:e3:
da:50:95:5d:4e:66:c3:dd:a5:81:cd:80:04:d2:d5:
d8:73:0a:00:14:f9:56:13:72:ec:e0:76:f1:01:49:
ac:5d:27:ff:14:b5:00:91:07:b5:2f:09:78:d0:c4:
0c:04:02:7f:68:85:03:c6:70:d6:92:3d:77:5c:70:
e3:e8:be:22:36:91:e7:d3:64:53:8d:cd:9d:ad:b1:
3b:c1:c2:27:87:af:d9:95:c6:a0:28:0f:2f:f0:ad:
06:d2:3a:6d:30:60:f2:59:2f:e1:c9:78:b8:20:84:
2f:71:4a:2c:41:29:21:71:95:e2:71:4d:b4:df:85:
40:16:fc:72:6e:1d:55:2d:8a:48:58:4d:5d:3a:9f:
b7:65:68:ba:2f:11:90:fb:ab:81:c6:ac:ed:53:ea:
87:13:6b:7a:f3:7d:d4:f8:57:95:76:a0:7f:c2:c2:
8c:60:73:49:30:30:25:77:6c:44:b9:05:9e:dc:fc:
95:73:ac:d1:e0:e8:fd:a6:66:48:43:20:2c:48:ca:
5e:5f:b3:f0:7b:1a:28:11:52:f6:75:cb:8d:0a:9d:
59:69:1d:26:db:c1:07:68:80:6a:e8:ea:e5:aa:ea:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:52:E5:E9:8D:EF:7F:87:47:7A:24:B6:06:79:97:A9:41:90:D8
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32332d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:30:fa:87:fa:82:96:4a:75:6a:49:3c:96:b9:8c:8c:2d:2f:
15:27:65:23:05:d2:03:b0:7e:72:5e:db:b4:a3:ca:3c:e2:a6:
aa:8c:bc:89:e0:2a:53:48:9c:99:06:b2:05:94:01:69:d7:0f:
09:18:25:e0:3b:b4:d0:bd:5b:d0:83:1f:03:4a:84:eb:4d:87:
46:9e:1a:e1:7b:e1:86:24:0b:82:fd:de:08:3d:74:31:45:18:
ce:eb:09:7d:44:aa:24:53:b8:81:94:f6:a7:e2:cd:8a:3a:43:
d8:4d:fe:05:80:eb:09:30:90:8a:2c:d1:6e:fc:54:d2:f2:c3:
d3:85:bc:4c:4e:a4:a4:0f:71:9d:b9:e7:c7:ea:28:95:72:a9:
92:db:78:9a:70:b2:08:55:ab:16:86:90:c1:8f:33:55:dd:8a:
56:32:f9:6b:19:43:7f:79:cd:24:8d:d9:4f:94:b8:0d:92:8b:
db:27:51:ac:8b:79:c1:4e:fb:68:f2:d6:4d:88:f2:8c:f3:4c:
b8:65:63:6c:7e:6e:24:d2:b9:7d:dd:ff:70:2b:4c:03:b1:cc:
5f:21:f2:1a:f8:a4:1d:02:8c:d9:83:ec:c8:96:e3:ff:53:b7:
34:c2:ce:1f:68:87:81:b7:90:15:c9:61:3d:a3:a3:87:b9:87:
63:5f:27:47
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGMYlqTm9TZBbf833YpUmXMbhxygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA5MTIxNjI4NDVaFw0yNDA5MTAxNjMzNDVaMDMxMTAvBgNV
BAMTKDY0OUY1MkU1RTk4REVGN0Y4NzQ3N0EyNEI2MDY3OTk3QTk0MTkwRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVAllhs1S1w9mWAdhi9hAD5Ou
O2TD1i59Qkwm49pQlV1OZsPdpYHNgATS1dhzCgAU+VYTcuzgdvEBSaxdJ/8UtQCR
B7UvCXjQxAwEAn9ohQPGcNaSPXdccOPoviI2kefTZFONzZ2tsTvBwieHr9mVxqAo
Dy/wrQbSOm0wYPJZL+HJeLgghC9xSixBKSFxleJxTbTfhUAW/HJuHVUtikhYTV06
n7dlaLovEZD7q4HGrO1T6ocTa3rzfdT4V5V2oH/Cwoxgc0kwMCV3bES5BZ7c/JVz
rNHg6P2mZkhDICxIyl5fs/B7GigRUvZ1y40KnVlpHSbbwQdogGro6uWq6s8HAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUZJ9S5emN73+HR3oktgZ5l6lBkNgwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzgzOTJlMzEzNTMw
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzOTM5MzAzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LVmWMA0GCSqGSIb3DQEBCwUAA4IBAQClMPqH+oKWSnVqSTyWuYyMLS8VJ2UjBdID
sH5yXtu0o8o84qaqjLyJ4CpTSJyZBrIFlAFp1w8JGCXgO7TQvVvQgx8DSoTrTYdG
nhrhe+GGJAuC/d4IPXQxRRjO6wl9RKokU7iBlPan4s2KOkPYTf4FgOsJMJCKLNFu
/FTS8sPThbxMTqSkD3GduefH6iiVcqmS23iacLIIVasWhpDBjzNV3YpWMvlrGUN/
ec0kjdlPlLgNkovbJ1Gsi3nBTvto8tZNiPKM80y4ZWNsfm4k0rl93f9wK0wDscxf
IfIa+KQdAozZg+zIluP/U7c0ws4faIeBt5AVyWE9o6OHuYdjXydH
-----END CERTIFICATE-----
Generated at Wed Sep 27 11:06:44 2023 by rpki-client on console-fra.rpki-client.org