Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
File: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: H2ZRFG9ha5MgHzEUYyIxZ+zRbIMTYZW8KqupMGm0Uts=
Subject key identifier: AF:60:D5:41:82:A1:FE:DF:CE:62:C0:C6:99:7F:6B:84:BB:4C:1F:47
Certificate issuer: /CN=cab05cd7fe658bba47f3f17724f8318158cb9103
Certificate serial: 0CD8C9ECEE3A4E4DEA41B1A490E4F69EAF2FCDA1
Authority key identifier: CA:B0:5C:D7:FE:65:8B:BA:47:F3:F1:77:24:F8:31:81:58:CB:91:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrBc1_5li7pH8_F3JPgxgVjLkQM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
Signing time: Mon 03 Apr 2023 17:23:06 +0000
ROA not before: Mon 03 Apr 2023 17:18:06 +0000
ROA not after: Mon 01 Apr 2024 17:23:06 +0000
asID: 3320
IP address blocks: 45.93.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d8:c9:ec:ee:3a:4e:4d:ea:41:b1:a4:90:e4:f6:9e:af:2f:cd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab05cd7fe658bba47f3f17724f8318158cb9103
Validity
Not Before: Apr 3 17:18:06 2023 GMT
Not After : Apr 1 17:23:06 2024 GMT
Subject: CN=AF60D54182A1FEDFCE62C0C6997F6B84BB4C1F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:a9:52:b4:0a:f5:4f:19:fb:5b:a0:db:a0:
54:79:dd:9a:2d:c9:26:b3:2d:1c:3e:61:15:90:fa:
fa:9e:a4:c7:e7:ef:05:89:e2:3d:9f:92:9e:29:a6:
02:1b:0b:ff:a0:50:94:91:4c:67:9c:a0:6d:62:8d:
6d:d1:aa:08:b9:6e:a4:5b:d4:a5:c4:3c:74:cb:2c:
85:66:a3:14:cd:eb:f6:25:d5:8c:c0:2a:dc:45:d9:
6c:5a:9d:24:9b:82:be:cb:8d:a2:29:e2:9c:3b:53:
a2:21:0c:a5:a4:8a:61:28:61:3d:9b:43:92:00:23:
6f:a3:99:a1:e9:9c:3f:7d:69:6a:e0:be:35:eb:73:
fa:bf:64:14:ca:96:4b:7c:5e:3f:55:43:12:b5:a0:
06:5f:88:81:6a:d4:f4:ae:71:7e:26:51:32:43:9b:
2d:62:b3:05:5c:b0:e8:72:ae:71:2b:fb:65:cb:f8:
b9:00:a2:cc:06:06:d3:99:32:8d:08:5d:96:20:9e:
c8:85:32:42:04:94:aa:c0:46:78:63:f0:94:ab:66:
b0:2f:d6:c9:d9:e5:7d:67:cc:cb:9d:1b:5a:f0:35:
3d:4d:da:b8:ec:19:4e:66:dc:c3:ea:f8:7a:3a:b8:
a8:1f:0d:70:3a:78:77:58:72:ba:1b:bc:70:52:c5:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:D5:41:82:A1:FE:DF:CE:62:C0:C6:99:7F:6B:84:BB:4C:1F:47
X509v3 Authority Key Identifier:
keyid:CA:B0:5C:D7:FE:65:8B:BA:47:F3:F1:77:24:F8:31:81:58:CB:91:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/CAB05CD7FE658BBA47F3F17724F8318158CB9103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrBc1_5li7pH8_F3JPgxgVjLkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.186.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:dd:9c:ea:f0:da:6e:eb:08:92:78:03:ad:dc:25:ca:3b:3c:
e7:9c:ef:03:0d:5e:42:fb:06:26:df:a1:70:6c:34:7c:d4:f6:
ed:1d:dc:9a:87:c5:89:8d:89:b3:dd:92:08:ce:09:41:7d:7a:
2e:a8:26:1a:53:8d:21:7b:8b:d7:00:32:2d:5a:13:3a:ce:67:
d5:12:89:a7:6a:b0:80:ec:9f:2a:ce:85:f6:2e:72:42:68:ee:
c9:7e:40:ed:4d:01:17:00:99:6b:ef:f4:2f:d7:f7:ce:2a:1c:
c8:43:7a:ca:88:55:d8:ee:73:8f:07:d9:06:b7:fd:30:58:d1:
c5:99:5e:9b:d1:e5:aa:ca:3d:7d:61:b3:31:7a:08:a1:2c:eb:
4b:0c:77:dd:e0:14:b7:c6:66:11:fd:af:c8:d4:8d:39:d3:60:
f6:3b:4d:30:d3:fa:67:a7:65:c4:3f:13:12:8a:6a:27:85:55:
57:52:f0:ae:f8:64:d7:4a:30:a8:3e:ec:02:0a:94:37:a2:ab:
5c:35:6b:af:60:6c:30:79:67:4b:28:37:9b:2e:86:e4:1a:b0:
27:3f:15:9b:27:c8:6e:cf:3b:46:c4:5b:48:47:05:95:2f:ad:
a8:72:c3:43:81:b8:f8:5d:ee:0c:ee:e3:35:27:b8:de:5e:6d:
ab:26:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:54 2025 by rpki-client