Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
File: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: Z6J1Rt05Fwv1sji//rVNRenkFuJ67bmdZzccVevp+XM=
Subject key identifier: AF:40:2F:FC:19:4D:1C:73:E3:7B:25:E5:A8:24:4B:5E:66:0C:BD:3B
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 5FDEA2AE75FAC5B440EB650F921CF421515F2F23
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
Signing time: Wed 30 Aug 2023 08:03:41 +0000
ROA not before: Wed 30 Aug 2023 07:58:41 +0000
ROA not after: Wed 28 Aug 2024 08:03:41 +0000
asID: 3320
IP address blocks: 45.93.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:de:a2:ae:75:fa:c5:b4:40:eb:65:0f:92:1c:f4:21:51:5f:2f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 30 07:58:41 2023 GMT
Not After : Aug 28 08:03:41 2024 GMT
Subject: CN=AF402FFC194D1C73E37B25E5A8244B5E660CBD3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:03:99:2e:86:27:2f:ea:11:a4:aa:48:25:
a1:03:38:1a:f7:01:4b:83:db:74:3b:ee:8a:79:39:
95:22:d1:91:98:e5:f1:39:1f:71:96:90:79:97:bc:
11:ec:15:76:c2:ad:48:4a:b2:67:5f:54:04:5a:25:
f6:d9:75:9f:c1:4c:dd:72:ed:b5:d6:06:82:c7:3a:
d2:78:05:e2:13:bf:51:a1:eb:0c:bf:2e:27:5a:d6:
c0:7c:19:3d:7b:b2:aa:f0:af:c5:47:7f:02:0d:aa:
e9:70:d7:eb:bb:62:32:a7:9a:43:88:27:af:be:a6:
2e:95:74:8e:55:fc:28:fc:f6:a6:73:c7:27:e8:1c:
54:18:33:61:a2:35:d2:91:74:50:da:da:b3:f2:28:
ef:52:68:b3:43:9d:43:c9:33:3a:69:bc:14:0a:ae:
da:19:bb:12:77:6b:62:24:4d:14:91:6a:7a:e3:59:
82:25:4a:8a:8a:39:34:c6:73:0f:13:6f:f9:a7:b7:
b4:bb:71:ec:e3:3d:27:22:4a:8b:66:08:aa:1c:01:
eb:a9:2d:52:97:83:93:ad:b1:90:fe:f7:c0:36:32:
d3:c2:c0:47:29:bd:17:98:c3:83:37:e6:50:0d:ef:
f2:19:c7:03:ac:e5:b1:0f:d3:ec:54:72:9c:69:a5:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:2F:FC:19:4D:1C:73:E3:7B:25:E5:A8:24:4B:5E:66:0C:BD:3B
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.186.0/23
Signature Algorithm: sha256WithRSAEncryption
95:79:ea:1c:fd:f1:b0:8e:ea:a6:59:e1:2b:0f:3c:73:d1:b3:
53:24:bc:76:7e:c2:8a:2d:06:9b:29:09:f5:a4:ec:35:e3:45:
88:a0:bc:e4:7a:d3:0b:46:98:87:7a:0f:cc:df:95:68:40:61:
67:6b:b6:29:b9:57:e3:72:19:92:17:5c:5c:77:7e:5b:19:72:
68:12:14:4a:78:0b:77:70:4f:1c:cf:3e:96:99:d4:a9:45:5d:
21:4b:b8:44:cd:72:c4:70:6f:3e:2a:35:0c:c6:e8:37:cb:55:
8a:e5:9d:84:84:27:fb:aa:4d:b7:33:79:2b:c1:f0:51:7c:15:
15:3d:d7:4a:ac:11:50:d6:3c:33:9e:fc:13:43:fe:a0:88:6a:
da:c5:04:02:52:f4:2f:b6:50:9a:37:8d:9a:2a:da:ff:74:4c:
a9:63:4e:3d:db:5f:c7:27:1f:ca:cc:d1:af:fe:b0:f3:d2:c2:
33:fb:f3:77:07:e4:a3:5d:b7:6c:28:cf:41:e2:26:aa:72:8d:
0d:20:c9:0c:f7:f3:a9:15:34:60:52:05:8c:af:60:bc:24:65:
b3:6c:b5:b1:d5:58:21:77:79:a9:8c:59:47:03:ab:a1:aa:87:
68:19:52:7d:f2:69:6d:9a:15:25:4f:2a:3a:ac:0b:20:62:7f:
61:a0:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:10:20 2023 by rpki-client on console-ams.rpki-client.org