Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QjLfVlStdnUHwzl2FFRU/m7KpeI07qci8iPutLM9GrE=
Subject key identifier: 77:41:8E:15:6B:6E:79:DD:91:7E:23:03:FE:FD:F6:8D:4A:36:BA:8A
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 406984619D4BE253D15C5724A595B8464DC1F7EC
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Jun 2023 00:00:24 +0000
ROA not before: Thu 29 Jun 2023 23:55:24 +0000
ROA not after: Fri 28 Jun 2024 00:00:24 +0000
asID: 834
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:69:84:61:9d:4b:e2:53:d1:5c:57:24:a5:95:b8:46:4d:c1:f7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 29 23:55:24 2023 GMT
Not After : Jun 28 00:00:24 2024 GMT
Subject: CN=77418E156B6E79DD917E2303FEFDF68D4A36BA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:35:6b:49:2d:ad:14:c2:6e:a7:42:d2:a9:
2b:9c:de:4b:66:ba:d9:f8:46:1b:67:77:d5:80:53:
ea:7f:fb:c3:67:52:db:ed:92:d1:f7:e9:76:09:c2:
72:74:1d:a4:07:8f:51:d7:ca:65:d1:b6:cb:4c:ce:
88:5c:7a:1d:f4:78:85:e0:80:cb:a5:00:70:65:18:
70:fe:9a:36:61:01:a0:8b:32:2f:cb:2b:b1:70:90:
81:31:b5:e0:3d:e0:cb:01:e7:36:f6:78:da:ee:f3:
ea:0a:88:54:42:f6:04:2d:2f:cf:e3:f9:9c:e9:1f:
09:56:f7:f5:eb:f1:5f:b8:ee:1b:9d:a0:90:14:2b:
41:be:c8:9a:44:c7:23:27:f3:b4:db:5f:59:dc:cc:
f7:2a:22:b6:e8:64:0c:08:d7:e2:2f:97:22:79:2e:
c9:ff:5c:78:df:e5:3e:d7:e9:ac:4f:c0:16:c3:e6:
39:2d:ae:94:d6:78:30:49:21:b3:5d:0f:73:dc:58:
1b:4e:01:56:14:88:95:0b:7c:cc:d1:53:2e:26:c3:
d8:dc:81:76:44:ac:d7:0b:07:a3:cc:ae:a3:4a:68:
ec:f1:16:db:82:94:87:a7:e8:5e:21:78:a6:5c:db:
b5:ab:1b:73:63:c4:b2:81:e2:98:9b:2f:06:2d:55:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:8E:15:6B:6E:79:DD:91:7E:23:03:FE:FD:F6:8D:4A:36:BA:8A
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d8:cf:4b:e5:2b:6d:8e:c9:db:33:eb:ce:b2:ac:ef:a6:c2:
e8:85:50:48:af:22:57:10:3d:db:ab:1e:37:80:d1:91:98:c7:
71:29:5f:eb:c9:f1:cb:82:ca:b8:9f:e9:8b:62:0e:4d:11:61:
55:80:a1:fa:38:34:03:da:f3:51:15:81:89:8c:8c:d3:cf:ec:
a3:6c:fa:93:a0:aa:fe:4f:61:05:e4:fc:3e:55:01:ae:21:5f:
46:c9:3f:c2:d6:8a:40:0d:69:35:27:be:e0:80:f7:19:de:2c:
6f:ad:97:f2:37:db:cb:27:e3:29:1c:6e:11:df:ed:3f:be:e7:
7a:d6:95:d0:1c:0a:2e:2e:f6:de:2d:eb:ce:b3:46:00:3c:a9:
dc:95:6b:1b:82:56:79:6c:96:13:f5:b0:a3:ff:90:cf:48:e0:
0e:01:71:84:3b:e6:d8:06:55:2f:d5:22:5e:f7:a9:d5:0f:02:
ee:69:bc:8a:3a:a6:60:54:e6:1a:70:a7:fb:19:db:cc:48:2c:
df:aa:65:57:82:cb:b6:fd:58:b4:15:32:11:99:fe:3b:5a:99:
19:d8:4c:b4:9c:09:c0:c4:0e:e5:82:04:ed:63:3c:81:71:92:
ef:21:10:50:88:66:39:45:ce:4a:43:ca:0f:45:9f:f5:4e:56:
4b:c3:a8:61
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQGmEYZ1L4lPRXFckpZW4Rk3B9+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA2MjkyMzU1MjRaFw0yNDA2MjgwMDAwMjRaMDMxMTAvBgNV
BAMTKDc3NDE4RTE1NkI2RTc5REQ5MTdFMjMwM0ZFRkRGNjhENEEzNkJBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2jVrSS2tFMJup0LSqSuc3ktm
utn4Rhtnd9WAU+p/+8NnUtvtktH36XYJwnJ0HaQHj1HXymXRtstMzohceh30eIXg
gMulAHBlGHD+mjZhAaCLMi/LK7FwkIExteA94MsB5zb2eNru8+oKiFRC9gQtL8/j
+ZzpHwlW9/Xr8V+47hudoJAUK0G+yJpExyMn87TbX1nczPcqIrboZAwI1+IvlyJ5
Lsn/XHjf5T7X6axPwBbD5jktrpTWeDBJIbNdD3PcWBtOAVYUiJULfMzRUy4mw9jc
gXZErNcLB6PMrqNKaOzxFtuClIen6F4heKZc27WrG3NjxLKB4pibLwYtVcILAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUd0GOFWtued2RfiMD/v32jUo2uoowHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzNDM1MmUzMjM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkfAw
DQYJKoZIhvcNAQELBQADggEBABnYz0vlK22Oydsz686yrO+mwuiFUEivIlcQPdur
HjeA0ZGYx3EpX+vJ8cuCyrif6YtiDk0RYVWAofo4NAPa81EVgYmMjNPP7KNs+pOg
qv5PYQXk/D5VAa4hX0bJP8LWikANaTUnvuCA9xneLG+tl/I328sn4ykcbhHf7T++
53rWldAcCi4u9t4t686zRgA8qdyVaxuCVnlslhP1sKP/kM9I4A4BcYQ75tgGVS/V
Il73qdUPAu5pvIo6pmBU5hpwp/sZ28xILN+qZVeCy7b9WLQVMhGZ/jtamRnYTLSc
CcDEDuWCBO1jPIFxku8hEFCIZjlFzkpDyg9Fn/VOVkvDqGE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:06 2023 by rpki-client on console.sobornost.net