Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e2039303837.roa
File: 34352e39332e3138342e302f32332d3234203d3e2039303837.roa (raw, json)
Hash identifier: SrCBsxJBSc/3UrOfULulwdeurWBpaJfPHE6gwjXhZ6k=
Subject key identifier: 50:CD:0E:38:69:92:6D:48:BB:69:8A:41:02:8B:3D:B6:DD:93:7C:3A
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 7BC704CABD48CBA602CF30483BF10407A4BF380B
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e2039303837.roa
Signing time: Wed 13 Sep 2023 19:28:33 +0000
ROA not before: Wed 13 Sep 2023 19:23:33 +0000
ROA not after: Wed 11 Sep 2024 19:28:33 +0000
asID: 9087
IP address blocks: 45.93.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c7:04:ca:bd:48:cb:a6:02:cf:30:48:3b:f1:04:07:a4:bf:38:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 13 19:23:33 2023 GMT
Not After : Sep 11 19:28:33 2024 GMT
Subject: CN=50CD0E3869926D48BB698A41028B3DB6DD937C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:5e:7f:38:6c:b9:72:ab:4f:d1:04:79:c9:
11:9d:d6:8e:29:3c:e0:4a:46:86:00:89:fd:55:11:
88:ab:b4:3b:36:ff:4c:cb:0a:1e:92:c0:20:fe:53:
b3:b4:2d:35:ad:c8:19:2e:c3:7a:a8:3e:32:74:08:
92:80:34:2e:3a:2f:69:31:99:da:0a:b4:ee:08:ab:
26:08:cc:1f:b8:22:19:eb:68:31:c2:6c:b6:54:f6:
1c:bb:a9:36:23:2e:d4:d6:f1:2b:0a:fb:c4:6c:7c:
97:30:22:3d:d7:1e:b0:6f:52:61:b7:3f:1a:98:9d:
a2:fd:a4:c4:a3:ef:41:c1:f2:ae:d2:b6:46:2f:c9:
a1:a5:22:6a:f7:b8:e8:58:0e:2f:8c:fd:25:64:a4:
4f:16:bb:a9:71:e8:b2:15:a8:12:fb:1b:b5:75:cb:
76:80:5d:13:2f:79:93:fa:b6:15:89:ff:c5:59:70:
5b:06:1c:57:59:76:4c:ed:f4:0e:75:ab:67:2f:f3:
ba:f6:6f:b0:ad:15:af:23:c1:82:0f:d6:4f:78:f5:
8e:87:3c:aa:a4:02:1f:21:86:a8:cd:2c:6d:ef:7a:
57:cf:ed:1d:54:dd:c5:16:00:e1:c6:cf:f2:27:99:
b0:6b:9c:87:24:35:10:bc:01:6f:90:a8:ec:78:4b:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CD:0E:38:69:92:6D:48:BB:69:8A:41:02:8B:3D:B6:DD:93:7C:3A
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/23
Signature Algorithm: sha256WithRSAEncryption
60:09:ec:2d:fe:f6:89:1d:4a:ac:27:6c:44:31:24:1d:fc:4e:
0f:b0:86:21:eb:31:3e:5d:21:bc:af:cb:43:a6:64:0a:10:1e:
b8:3c:ac:15:a0:31:0d:a9:a8:c4:0e:d4:bb:4e:93:58:7b:e7:
28:ec:f2:d3:eb:0a:2c:77:41:29:3f:09:be:1f:fb:0e:9c:7b:
6f:ea:59:97:17:52:32:40:7e:51:1c:6f:c8:46:ee:3c:f5:a0:
19:74:17:ed:39:78:3d:1d:ce:c6:a2:49:fb:f3:bc:76:cf:e9:
b1:9a:3d:f9:0f:e4:24:73:61:df:3d:f3:2f:ac:6a:ed:d5:f5:
0c:32:e5:d0:49:a2:f8:f0:d8:7f:31:90:c6:c5:fb:b7:97:4f:
98:14:06:35:88:41:d7:5c:6c:89:37:4d:89:4f:89:a0:88:20:
2a:19:60:f9:62:6b:c5:8f:19:59:4f:ce:44:46:2f:da:40:05:
8c:cb:d5:f0:79:75:4d:68:13:e6:98:46:bc:43:98:12:be:be:
c8:8d:e9:7d:cb:e3:ec:d5:c7:a4:e7:f7:de:c2:d3:1f:22:26:
8a:38:2c:ed:e0:77:8e:19:d6:bb:b5:24:95:02:21:24:af:a1:
a8:4d:cf:35:00:d7:83:17:be:9b:64:0b:70:b2:9a:b1:f9:d6:
0e:74:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:54 2025 by rpki-client