Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138372e302f32342d3234203d3e20333937353633.roa
File: 34352e39332e3138372e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: C4nmzA1FQGQs4TqxsSnE8cdWIssmxWQuH5daLiwhYXQ=
Subject key identifier: 9C:5E:69:5A:DE:B2:CD:CB:54:58:24:B4:6D:8D:9E:B4:F3:04:40:09
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 3217593744AC829A7A6F9DBBF47BD11803798393
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138372e302f32342d3234203d3e20333937353633.roa
Signing time: Wed 05 Jul 2023 16:56:27 +0000
ROA not before: Wed 05 Jul 2023 16:51:27 +0000
ROA not after: Wed 03 Jul 2024 16:56:27 +0000
asID: 397563
IP address blocks: 45.93.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:17:59:37:44:ac:82:9a:7a:6f:9d:bb:f4:7b:d1:18:03:79:83:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 5 16:51:27 2023 GMT
Not After : Jul 3 16:56:27 2024 GMT
Subject: CN=9C5E695ADEB2CDCB545824B46D8D9EB4F3044009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:d5:0e:27:d9:44:0d:48:0f:cf:5a:c4:45:
ed:b8:b6:7e:35:56:98:ce:eb:96:f7:b7:85:40:f4:
7a:33:e9:84:a3:f7:8c:29:ff:09:94:56:68:a3:6c:
f3:8d:4a:68:03:d4:0a:a2:be:77:54:5f:e2:9a:05:
83:3c:84:17:f4:e7:30:95:43:5f:3e:28:7b:7b:bd:
b3:b3:20:b7:8b:9c:9b:92:fa:a8:81:ee:3d:5d:99:
35:c2:1a:5b:0d:3f:fc:b6:fd:6e:7b:bd:bf:1e:69:
fd:a1:ee:c5:09:ed:67:cc:f7:48:39:73:77:26:0b:
09:05:38:b5:f5:0f:a1:10:a8:22:c4:e0:2a:e0:a4:
ec:2e:21:5a:3d:f3:eb:76:ff:a1:a1:ff:2a:49:e7:
33:bc:ab:35:d5:72:79:c4:9b:6a:3d:13:a7:e3:80:
a0:54:fb:22:68:d7:01:59:55:e7:e3:e9:7d:1b:ff:
bf:c3:91:e4:fe:ce:8b:49:bc:16:25:21:12:d8:27:
2a:73:fb:ba:60:7c:43:d9:c9:f7:06:ff:c5:ff:5f:
7f:33:f6:70:06:2f:7f:bc:ab:59:1e:02:26:92:ef:
96:05:d7:5f:76:0f:cf:a4:ec:69:b0:08:80:fc:59:
b3:86:47:ef:64:7a:91:04:15:67:ed:c8:0e:e9:10:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5E:69:5A:DE:B2:CD:CB:54:58:24:B4:6D:8D:9E:B4:F3:04:40:09
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138372e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9c:5a:2c:5a:a8:25:fb:72:8e:ec:77:43:46:e7:86:10:43:
0d:f2:b5:c2:de:8b:58:f8:c7:9f:61:f0:9b:cd:f1:7e:ab:43:
52:d5:0a:45:e4:17:b7:2a:0b:a5:4e:01:53:7e:02:34:07:c1:
af:87:e4:16:89:a8:e9:7c:b6:70:f7:2d:af:25:75:f0:97:ff:
11:c9:f2:1a:bb:ab:3e:a0:8f:71:d7:ed:3f:6b:22:49:f7:82:
ba:12:47:6d:8d:32:c9:28:1d:64:f9:33:c3:91:57:3f:37:bf:
26:31:e0:04:7e:65:22:b0:9d:35:5f:05:52:40:3e:ce:c1:85:
8f:fb:e4:9c:67:49:89:ea:b4:26:7c:19:d5:41:da:0b:28:fd:
50:aa:1f:c0:25:74:90:c6:79:30:9d:0e:0b:ae:b3:c8:07:1d:
1d:f7:4f:83:f7:a4:0f:46:a8:e8:44:73:c3:ff:d7:59:21:79:
27:0b:c6:13:82:ec:e8:42:95:19:af:0b:59:33:c6:97:ba:d9:
77:67:88:23:61:a7:2e:ec:52:0a:e2:73:b1:b7:54:93:af:0a:
25:82:4d:44:14:40:17:83:b1:e8:9f:af:ac:6e:60:d1:c2:95:
2e:74:14:a9:86:5b:e9:91:09:ce:42:f0:3b:ac:7b:01:f6:68:
6f:54:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:53 2025 by rpki-client