Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32342d3234203d3e20333937353633.roa
File: 34352e39332e3138362e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: XF4Z4nQE2fcJpvqhiM4fnZ2GVIlV8VscWhLobWrNlBc=
Subject key identifier: DD:B0:B1:CD:E6:BE:3F:50:D2:8C:1B:72:D0:1F:65:85:75:F7:56:1E
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4E22159A63297A982508EADC85D22FA9BAA43F6E
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32342d3234203d3e20333937353633.roa
Signing time: Sat 03 Jun 2023 12:07:30 +0000
ROA not before: Sat 03 Jun 2023 12:02:30 +0000
ROA not after: Sat 01 Jun 2024 12:07:30 +0000
asID: 397563
IP address blocks: 45.93.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:22:15:9a:63:29:7a:98:25:08:ea:dc:85:d2:2f:a9:ba:a4:3f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 3 12:02:30 2023 GMT
Not After : Jun 1 12:07:30 2024 GMT
Subject: CN=DDB0B1CDE6BE3F50D28C1B72D01F658575F7561E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:20:7f:83:44:54:64:84:06:16:61:9b:ad:
81:d3:19:3e:f6:33:76:31:34:cd:38:ee:09:74:16:
b7:41:d5:41:a5:05:3d:f8:9a:37:00:37:ea:62:2c:
33:4b:ec:5c:bf:41:1c:78:7f:13:71:35:9a:a2:2d:
96:90:5c:db:de:bd:7d:63:1b:7e:d9:27:3c:d4:42:
fa:b1:33:0d:e6:a3:23:b0:dc:34:6d:9e:7b:c9:7f:
c5:e5:2e:f3:11:d6:b1:f3:db:1d:0e:20:d9:cb:49:
eb:0e:75:53:8a:e8:45:6a:dd:79:73:62:2d:0a:0e:
f0:21:a6:80:23:bf:5b:23:6e:f4:f6:a1:0a:f9:c3:
05:ed:8c:d8:9b:b0:5f:f0:e6:a5:d0:91:d1:ef:1b:
6d:59:6e:c9:ce:28:9c:95:ab:4d:2f:a6:02:d9:6a:
aa:0b:f7:a8:3d:0e:cd:fb:9d:0a:e9:e4:3c:d0:bc:
a3:04:af:cf:3f:01:b6:eb:9c:ee:37:49:75:17:c0:
49:72:72:a8:13:a1:59:1b:6c:df:95:cc:23:bb:65:
1a:51:d5:a7:7b:3c:fd:7f:ab:79:2c:f4:50:62:01:
35:44:ac:b9:a7:d5:80:68:c7:d1:18:33:31:05:e9:
45:a8:62:55:70:d7:9a:14:07:1b:84:c9:ea:a0:10:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:B1:CD:E6:BE:3F:50:D2:8C:1B:72:D0:1F:65:85:75:F7:56:1E
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.186.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:47:a3:58:03:7a:f7:09:13:09:fb:d3:c0:31:2b:61:26:a0:
e8:74:09:a9:90:0d:20:b9:0e:8b:2e:cd:9a:9a:6d:56:c6:c0:
ee:df:0c:9f:cd:a5:ff:27:5f:fc:42:fc:41:f8:ed:94:7c:28:
14:ad:5f:69:6c:52:fa:6a:06:e3:27:1b:c6:49:06:4a:28:67:
58:a0:a2:cd:af:5d:c6:7c:41:ef:85:76:83:98:5c:56:f2:7f:
9f:05:fb:65:55:7c:cb:ed:7c:57:e7:d5:ba:ca:53:aa:3c:99:
e6:0e:91:25:3e:7d:63:ca:26:a1:b3:01:0a:be:bb:85:65:47:
5c:f1:4c:3f:ad:5c:05:20:74:2a:e0:6c:1e:80:0f:41:67:79:
80:7b:3c:8e:c8:21:6f:fb:d6:df:f1:13:08:df:dd:ca:49:0f:
e8:db:c1:97:86:b7:51:ff:ee:f3:ea:4d:dd:30:9c:63:21:31:
4c:ec:6b:9e:04:e3:08:cc:8f:b3:61:e9:ed:a1:8c:65:62:9c:
86:fb:79:33:66:57:a9:4c:dd:3a:b9:7a:0f:ca:bc:16:43:49:
13:32:cf:74:92:38:b3:89:5a:a1:54:f6:ac:87:1f:63:b2:6b:
80:cd:89:ae:f3:01:e6:9a:29:24:7c:37:aa:3a:fb:d4:91:d0:
ef:20:71:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:19 2025 by rpki-client