Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: P3oBbkD3+rjjenT7dQ7o2NLnDTMe673ar1SuSYooG+M=
Subject key identifier: 38:A3:DF:BF:80:71:03:5C:2F:E9:82:8B:62:64:13:34:AC:3A:80:46
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0883F080FD63F1C93F71480D815FAC6C64C0D8D0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
Signing time: Thu 10 Apr 2025 16:01:14 +0000
ROA not before: Thu 10 Apr 2025 15:56:14 +0000
ROA not after: Thu 09 Apr 2026 16:01:14 +0000
asID: 834
IP address blocks: 45.152.240.0/23 maxlen: 24
45.157.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:83:f0:80:fd:63:f1:c9:3f:71:48:0d:81:5f:ac:6c:64:c0:d8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 10 15:56:14 2025 GMT
Not After : Apr 9 16:01:14 2026 GMT
Subject: CN=38A3DFBF8071035C2FE9828B62641334AC3A8046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:06:42:d4:17:ec:f2:26:14:81:d9:45:01:
1b:d3:28:67:e8:8f:df:a6:86:06:bd:ba:be:2b:83:
36:0c:99:80:96:83:6a:53:12:17:c0:b3:43:f2:54:
03:2b:aa:72:67:5a:47:5d:ee:63:54:f6:a3:8d:c1:
af:38:7f:8a:ea:d7:e5:17:a8:d3:cf:82:ea:bf:22:
41:dc:9c:4f:5d:98:b2:e3:05:c5:44:dc:b8:08:08:
81:d4:91:af:ac:6d:f4:5c:da:67:46:b0:02:78:66:
97:88:ec:b8:b6:c6:61:1f:a4:49:29:29:01:d2:c5:
77:e3:db:e8:06:83:c7:0a:7a:00:53:63:f9:46:63:
bb:1e:b6:9c:77:2d:6d:97:b0:77:f2:de:b4:47:ce:
9b:a3:f0:a8:e0:8a:b2:98:07:81:aa:7d:56:1e:59:
c6:57:6b:41:df:ec:7c:4c:04:48:af:90:68:08:49:
85:c6:a8:50:f0:19:79:cd:cb:60:82:38:75:02:39:
84:df:00:83:2e:63:65:19:90:ff:23:5f:99:24:a3:
2f:ff:fb:bd:40:22:42:5b:1e:9c:a5:33:d1:ca:58:
be:26:60:30:6c:e9:d2:b4:86:41:00:6c:e0:0a:77:
f4:cd:77:31:97:14:71:c7:65:8e:cd:83:e5:3c:89:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:DF:BF:80:71:03:5C:2F:E9:82:8B:62:64:13:34:AC:3A:80:46
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
45.157.19.0/24
Signature Algorithm: sha256WithRSAEncryption
43:80:b7:f2:84:da:0b:4d:ff:48:39:bd:94:b5:44:ce:49:f6:
d5:d4:a8:56:ec:6f:41:a5:9f:f2:98:f7:24:45:82:0e:4e:a3:
f3:03:8a:a8:24:01:7c:03:7b:45:86:17:30:e7:eb:65:ec:6d:
7b:c6:44:79:39:50:ef:4a:1a:41:f8:92:bc:7c:1d:53:d3:a8:
18:76:66:bb:e5:46:35:1f:fc:52:25:b5:50:20:8f:fd:df:4b:
82:fe:f9:36:17:b0:5a:66:e1:36:cd:84:2c:7a:a7:a9:09:28:
1b:01:86:e1:18:75:b7:c2:e1:ce:60:27:43:1e:3a:99:2b:2a:
65:f6:47:59:1c:3a:38:07:30:75:3b:e7:58:f4:c0:0d:da:96:
29:43:bd:2a:c9:f0:2f:6f:5f:79:69:e7:1e:60:82:4a:63:06:
c7:a8:dd:12:68:d1:84:d0:86:2a:ee:5f:d4:49:40:a3:56:82:
2d:3e:c8:f0:44:3c:a9:f1:ca:c6:33:a8:3a:00:d0:76:f1:07:
72:f7:72:78:38:6f:84:79:f5:fe:ba:e4:4d:7d:a9:29:fd:ba:
ab:ee:ba:b1:54:bd:22:6d:c6:bc:b8:f3:69:0b:41:b6:1b:b1:
67:21:ef:f6:ea:2c:81:b2:61:e0:59:4b:9d:37:e7:b8:9a:bc:
29:58:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net