Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3234203d3e20383334.roa
File: 34352e39352e38322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: frw0+lIncjDquefRK1SPywkPVuuHH4cypuzNgcWVwZI=
Subject key identifier: B1:B7:33:56:BA:5E:C5:1E:CF:DA:54:ED:9D:B3:EC:97:F3:75:C3:36
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 623E8D4FCA202481CC046D2FA1C16BC6FD985F7E
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3234203d3e20383334.roa
Signing time: Fri 17 Jan 2025 07:13:42 +0000
ROA not before: Fri 17 Jan 2025 07:08:42 +0000
ROA not after: Fri 16 Jan 2026 07:13:42 +0000
asID: 834
IP address blocks: 45.95.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3e:8d:4f:ca:20:24:81:cc:04:6d:2f:a1:c1:6b:c6:fd:98:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jan 17 07:08:42 2025 GMT
Not After : Jan 16 07:13:42 2026 GMT
Subject: CN=B1B73356BA5EC51ECFDA54ED9DB3EC97F375C336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:bc:41:57:26:c3:96:0e:02:c9:5b:92:df:
26:e7:1b:bc:e9:89:d0:ff:08:54:c7:b7:81:6c:21:
99:da:b6:5f:e9:90:3c:e8:6b:cc:78:98:b5:05:79:
84:be:6d:2a:30:77:26:32:44:2d:ce:17:1f:ea:d5:
ba:ac:6f:f1:1b:a4:9a:bc:fe:8b:7c:6d:18:6a:55:
51:ea:a4:22:7c:fb:f4:d3:4e:64:74:ed:ae:bb:b7:
bf:80:98:97:38:75:bc:76:76:6a:04:01:75:bd:81:
54:de:bc:be:9b:30:2c:91:8f:5a:6b:c9:8d:54:74:
95:69:ce:b9:bd:67:db:f4:f6:f1:f8:f0:d1:02:9a:
44:e1:15:5a:d8:9c:59:46:3e:56:4f:42:28:87:4d:
eb:c9:5e:85:3b:a5:fc:69:78:97:08:9e:74:55:50:
d0:f1:a5:8c:c4:e5:bd:15:c9:65:ab:18:84:a1:fd:
ee:10:44:45:38:e0:7d:66:3e:18:cb:ed:67:2b:1b:
b8:3c:ec:9e:88:ca:00:86:16:84:a9:54:61:74:eb:
6c:4b:90:4d:d6:76:0c:e4:23:b5:44:bf:34:57:eb:
c3:1e:72:f7:2f:d1:88:e2:fe:88:6e:23:21:43:8f:
10:b1:6a:54:47:87:4b:0b:19:38:b3:f0:ff:30:4c:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B7:33:56:BA:5E:C5:1E:CF:DA:54:ED:9D:B3:EC:97:F3:75:C3:36
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.82.0/23
Signature Algorithm: sha256WithRSAEncryption
15:7a:81:dc:05:82:b2:f4:56:f5:d9:c9:bb:20:08:a0:29:d8:
85:da:84:10:03:23:50:c7:ef:e6:fb:0e:1a:8e:ea:3e:21:35:
db:98:a5:78:2d:d2:35:d7:a0:d6:ee:fe:7d:ff:1a:21:53:b8:
2b:8f:23:f1:eb:f5:ee:43:1d:b2:8b:56:73:d2:b8:14:34:a6:
a7:22:39:21:af:e3:de:3a:03:1a:6c:75:d1:f9:ca:3b:99:05:
90:31:e5:07:ed:cd:03:df:1f:ce:dd:d5:8b:35:c0:45:15:7a:
2d:f8:14:a2:f0:31:6b:c1:d8:fd:85:dd:e5:82:8d:cf:83:bb:
24:c5:bf:97:cf:56:f7:3f:0d:0c:84:c1:fc:07:43:6e:13:ba:
30:88:f6:64:e1:3c:d1:0c:6e:5f:0a:f4:3e:c4:63:d2:d6:36:
b8:32:5b:53:29:cb:39:72:6c:9a:18:cf:43:fc:19:0b:b5:81:
b4:4b:1f:0d:7c:f7:31:68:49:38:40:c6:64:bc:b2:40:4e:87:
4c:9d:e3:81:e1:07:1d:d4:65:b4:fc:91:10:b3:3f:05:e2:4f:
7a:b1:35:f8:74:e0:c2:d9:38:95:e2:99:2c:3c:f6:8e:df:ec:
ae:35:7e:9b:4c:67:2c:bc:a3:c0:2e:8d:f3:db:99:75:aa:5a:
97:38:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:13 2025 by rpki-client on console.sobornost.net