Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138372e302f32342d3234203d3e20383334.roa
File: 34352e39332e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ph/bXjz6TT0HvMJbxfUB9d3RX+3ll/zfPwPWObXp3cY=
Subject key identifier: 8D:91:8A:4A:3D:B4:76:76:7D:3C:26:77:1D:F6:3F:C5:A9:8D:91:16
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4A59AC67E86502DAC1011CABCAC670A80E6C3128
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138372e302f32342d3234203d3e20383334.roa
Signing time: Sat 05 Aug 2023 18:00:03 +0000
ROA not before: Sat 05 Aug 2023 17:55:03 +0000
ROA not after: Sat 03 Aug 2024 18:00:03 +0000
asID: 834
IP address blocks: 45.93.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:59:ac:67:e8:65:02:da:c1:01:1c:ab:ca:c6:70:a8:0e:6c:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 5 17:55:03 2023 GMT
Not After : Aug 3 18:00:03 2024 GMT
Subject: CN=8D918A4A3DB476767D3C26771DF63FC5A98D9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:73:e8:0c:51:3d:1a:cb:dc:f0:c6:08:7d:
92:32:e6:1a:db:8c:b2:1e:34:76:8f:c7:3a:ca:f3:
36:4d:54:fb:f1:05:f9:e1:51:e8:3e:87:58:63:1f:
7a:bf:e0:1f:eb:2c:c1:ce:92:a0:d5:6d:6c:f4:33:
6b:b2:18:bb:0d:83:3c:16:77:83:27:5c:5a:5c:f3:
c4:27:fc:a7:c5:1b:ea:1b:d0:da:a8:9c:b2:d7:bb:
bd:10:2e:82:b6:73:d8:64:22:d4:b8:e4:14:9b:cf:
d3:6c:1f:d1:8a:19:34:6f:af:00:cb:c7:39:da:c3:
b6:e1:5f:00:6d:b1:f0:a3:d1:8f:48:06:03:b5:3e:
65:8b:35:da:d7:21:aa:af:30:b8:83:bf:8f:03:da:
f1:ac:49:cc:bd:cf:a2:6e:e9:4b:ab:46:0c:da:37:
20:b8:65:71:b0:98:d2:a1:e8:9f:7e:b5:11:47:1f:
44:b3:a2:46:9c:49:f4:d3:37:75:9e:f8:20:9c:29:
2c:df:c0:b9:5b:79:1f:07:af:82:8e:a1:ff:09:ac:
d4:4f:6e:dd:91:b4:0b:9e:b7:31:2b:26:8e:60:7d:
64:cf:4d:fe:2b:fd:a0:5f:3e:19:4e:38:34:98:d4:
06:3f:f1:ee:f0:1e:a9:6c:95:72:c0:6c:94:87:d2:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:91:8A:4A:3D:B4:76:76:7D:3C:26:77:1D:F6:3F:C5:A9:8D:91:16
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:75:97:69:51:ca:19:6c:36:eb:b8:0e:e8:66:2a:65:cf:f1:
27:f0:97:e7:d9:b3:5d:3e:e4:98:d6:d3:c8:e4:f8:f5:2b:d5:
bf:14:45:5d:1b:96:7c:da:71:1d:1c:f9:99:7a:1b:7e:a9:a9:
14:c3:06:f3:20:9f:16:19:0d:3e:c9:03:38:18:3b:97:a5:c4:
eb:4e:fe:28:f1:0f:25:e6:62:90:c7:cb:84:7a:de:0b:e9:17:
c2:6d:62:eb:a4:a8:4c:2f:9b:55:77:2f:6c:2a:49:75:5d:c5:
c2:b4:c7:db:b5:5e:12:cb:31:8b:57:b9:b6:51:79:09:02:d0:
57:1a:56:50:60:25:cc:3d:77:c9:c8:69:27:4b:bc:31:9e:75:
dc:4f:72:81:23:8f:68:37:fb:5b:b4:64:5d:4d:18:ae:37:0f:
f2:fd:3d:fa:6a:f1:c5:81:2c:15:5d:57:9d:a3:2c:94:db:3f:
9b:fd:d3:9b:90:23:2b:5b:a2:3a:ec:02:30:4c:e9:9e:f9:e4:
59:83:e7:b5:f9:7a:64:70:e9:d6:5e:cc:ff:8a:4d:17:4f:d9:
b6:60:13:d3:1b:3a:52:73:85:8f:ba:4b:7a:17:0c:cf:b1:2f:
d8:86:bf:b7:aa:94:1d:1e:ef:2e:fe:76:64:d6:34:27:f0:2a:
aa:5f:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:16 2025 by rpki-client