Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20383334.roa
File: 34352e39352e3231322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pzy/r3tmjK7ZSPrtyr8px59Vx/9/2HywHjxgUXxVqMk=
Subject key identifier: 47:D3:42:D5:63:4A:93:B0:E9:79:C8:C8:EF:90:43:A4:E4:7D:6C:02
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 54D037D0D6445F7166207C97CA7B1EF99EBCBC9E
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:26:50 +0000
ROA not before: Thu 11 Jul 2024 09:21:50 +0000
ROA not after: Thu 10 Jul 2025 09:26:50 +0000
asID: 834
IP address blocks: 45.95.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d0:37:d0:d6:44:5f:71:66:20:7c:97:ca:7b:1e:f9:9e:bc:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 11 09:21:50 2024 GMT
Not After : Jul 10 09:26:50 2025 GMT
Subject: CN=47D342D5634A93B0E979C8C8EF9043A4E47D6C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:a1:7c:e6:d6:17:97:67:c5:c6:08:df:7b:
8d:b1:1b:3c:f7:ff:23:68:20:f4:45:13:85:79:37:
75:2f:7a:f3:e5:74:85:e4:55:72:85:3e:3a:ba:35:
83:c8:e1:03:42:f1:87:fa:ac:b1:9d:35:16:a7:9d:
e0:ea:cc:92:3d:e3:3f:b7:d5:3c:33:50:65:52:9d:
ca:51:a5:12:4b:68:81:a0:b2:2f:27:fa:83:67:ff:
bd:2d:99:fc:65:62:5c:d8:16:61:ab:5c:16:d4:fd:
ae:5c:c1:e3:7f:66:58:14:1f:e7:0e:41:c6:1d:1e:
2d:45:f1:0c:0a:0d:f0:4f:7c:3b:40:ca:7a:31:80:
69:d2:03:e5:19:b7:39:79:dd:2d:c0:74:6b:a0:29:
92:c3:2d:7a:6e:4e:05:9c:78:b5:38:7b:99:8c:cb:
36:50:c5:c3:00:3b:d8:40:9f:f2:f3:d0:a1:04:7d:
fb:0a:b2:d3:a5:d3:32:78:79:d8:73:f6:90:53:03:
7e:8d:5f:f7:25:54:37:b5:99:29:d4:75:3d:78:8e:
20:4a:28:cd:2b:cd:1f:09:e9:1c:fd:41:07:ea:e6:
57:b9:57:ba:ae:50:1c:bf:0b:ae:00:99:1b:2b:82:
c6:19:e7:42:0f:9c:0e:db:9e:f2:d4:e7:5c:2f:0a:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:42:D5:63:4A:93:B0:E9:79:C8:C8:EF:90:43:A4:E4:7D:6C:02
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6b:44:af:ae:7b:d3:3f:17:6a:ce:42:de:cd:68:e5:88:98:
0c:5d:5e:37:df:ed:0e:bf:f6:f3:b4:51:6e:45:a0:9f:fe:b2:
47:d9:9c:b5:fc:6d:e0:01:d0:ac:a0:f8:7b:41:54:ca:d7:aa:
a8:fc:5c:e2:78:89:f5:4e:9d:8d:da:a4:79:61:14:b3:af:24:
cf:9f:83:df:30:66:72:4f:a0:10:24:1b:86:d2:fa:98:8d:2b:
7f:49:ce:08:60:65:3f:22:fa:e1:4d:46:ae:08:01:99:39:d6:
bd:d6:43:0e:8e:a7:bb:00:b1:98:da:ad:a2:8d:eb:f7:36:b4:
9d:ef:fa:eb:10:fa:a5:10:5b:fc:c3:d9:66:e8:f4:4d:e5:71:
bf:6c:5a:14:45:30:6a:ee:36:04:c9:66:36:d1:8b:05:9b:ba:
4a:2c:a7:46:10:df:ec:2d:6e:46:cc:a5:ab:bf:d4:ae:4c:06:
1c:97:37:a1:95:bc:94:c3:30:03:d1:78:4e:05:78:ee:e7:8c:
ce:93:76:73:04:f9:56:61:d3:fc:30:c1:b3:60:7a:4b:b3:8d:
11:d6:99:f3:b9:7a:48:53:b4:63:78:d7:8c:5e:46:8f:eb:8f:
f0:79:a7:57:7f:ab:ef:68:d1:09:d5:79:1a:88:0e:45:1a:96:
b5:2a:c6:db
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUVNA30NZEX3FmIHyXynse+Z68vJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNDA3MTEwOTIxNTBaFw0yNTA3MTAwOTI2NTBaMDMxMTAvBgNV
BAMTKDQ3RDM0MkQ1NjM0QTkzQjBFOTc5QzhDOEVGOTA0M0E0RTQ3RDZDMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCabqF85tYXl2fFxgjfe42xGzz3
/yNoIPRFE4V5N3UvevPldIXkVXKFPjq6NYPI4QNC8Yf6rLGdNRanneDqzJI94z+3
1TwzUGVSncpRpRJLaIGgsi8n+oNn/70tmfxlYlzYFmGrXBbU/a5cweN/ZlgUH+cO
QcYdHi1F8QwKDfBPfDtAynoxgGnSA+UZtzl53S3AdGugKZLDLXpuTgWceLU4e5mM
yzZQxcMAO9hAn/Lz0KEEffsKstOl0zJ4edhz9pBTA36NX/clVDe1mSnUdT14jiBK
KM0rzR8J6Rz9QQfq5le5V7quUBy/C64AmRsrgsYZ50IPnA7bnvLU51wvChj5AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUR9NC1WNKk7DpecjI75BDpOR9bAIwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzQzNTJlMzkzNTJlMzIzMTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV/UMA0G
CSqGSIb3DQEBCwUAA4IBAQB8a0SvrnvTPxdqzkLezWjliJgMXV433+0Ov/bztFFu
RaCf/rJH2Zy1/G3gAdCsoPh7QVTK16qo/FzieIn1Tp2N2qR5YRSzryTPn4PfMGZy
T6AQJBuG0vqYjSt/Sc4IYGU/IvrhTUauCAGZOda91kMOjqe7ALGY2q2ijev3NrSd
7/rrEPqlEFv8w9lm6PRN5XG/bFoURTBq7jYEyWY20YsFm7pKLKdGEN/sLW5GzKWr
v9SuTAYclzehlbyUwzAD0XhOBXju54zOk3ZzBPlWYdP8MMGzYHpLs40R1pnzuXpI
U7RjeNeMXkaP64/weadXf6vvaNEJ1XkaiA5FGpa1Ksbb
-----END CERTIFICATE-----
Generated at Sat Jul 27 04:51:21 2024 by rpki-client on console.sobornost.net