Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32342d3234203d3e20383334.roa
File: 34352e39352e38322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NXdgyH7HTshPdBnHOhg0hTSGZdyfE4GToDWV7hJ0Uik=
Subject key identifier: 88:A5:DB:06:2F:28:E8:8B:BE:8E:09:F9:50:C1:AE:9C:05:8F:B0:BA
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 573C400D0935EF2A9C79252273A3EA11781CB320
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32342d3234203d3e20383334.roa
Signing time: Wed 27 Nov 2024 00:04:08 +0000
ROA not before: Tue 26 Nov 2024 23:59:08 +0000
ROA not after: Wed 26 Nov 2025 00:04:08 +0000
asID: 834
IP address blocks: 45.95.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3c:40:0d:09:35:ef:2a:9c:79:25:22:73:a3:ea:11:78:1c:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Nov 26 23:59:08 2024 GMT
Not After : Nov 26 00:04:08 2025 GMT
Subject: CN=88A5DB062F28E88BBE8E09F950C1AE9C058FB0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:76:0d:3c:ef:d1:dc:eb:bc:a7:75:17:56:
f2:a1:3a:f6:9d:30:c1:31:bb:56:26:ea:20:27:1c:
8a:f9:9e:66:3a:6b:a6:17:cb:2c:63:1c:78:ee:4d:
92:9a:34:7f:cd:d6:da:51:36:3e:2c:a6:4c:b6:a3:
11:b9:31:0f:af:8d:4b:d8:4f:68:fb:10:2d:d4:45:
99:c4:7a:69:5f:f2:1a:e0:8e:bf:87:6b:80:ab:94:
09:3e:7b:0b:98:5f:a5:70:7a:c6:f0:69:76:db:d7:
d2:3f:3a:f8:45:40:c7:c0:26:0c:50:92:10:42:c4:
d2:36:61:16:52:64:c9:51:7c:7a:4d:54:6e:fc:fb:
d7:40:a1:95:d7:06:f4:a6:83:84:dc:f3:d0:e3:92:
29:93:d3:a7:e5:17:26:3f:d3:0c:2d:16:64:02:94:
0d:46:14:81:56:9a:24:02:2a:0e:89:5e:66:0c:4c:
e5:b4:26:e2:30:b3:8f:87:b5:8a:24:cd:f6:71:3a:
a9:97:f2:3f:41:5c:0e:3e:be:f8:17:49:51:54:2a:
1a:f8:a5:3b:98:a3:d0:7c:7f:fd:6c:32:87:d8:8b:
67:6b:50:7a:5e:40:70:5e:41:1c:6d:96:90:6e:0a:
4e:b8:a0:c1:74:0a:61:05:7d:c4:42:73:53:68:7c:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:DB:06:2F:28:E8:8B:BE:8E:09:F9:50:C1:AE:9C:05:8F:B0:BA
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.82.0/24
Signature Algorithm: sha256WithRSAEncryption
29:37:45:8a:72:f9:5c:34:ca:75:81:d2:e1:1f:ce:81:92:ba:
64:c0:16:44:85:08:92:2f:10:9c:c6:15:65:42:9e:9a:5c:74:
c7:aa:21:d2:2e:26:b6:65:da:86:a7:a2:ea:7c:10:c7:61:32:
76:67:28:66:9e:64:f9:44:aa:47:55:c2:27:4c:51:55:d9:16:
ee:a4:be:c3:39:7b:98:4d:95:d4:13:e4:90:66:d7:bc:0f:9c:
60:38:a9:06:2c:65:6d:71:8c:52:0d:87:5f:e9:f9:92:1a:88:
21:84:f3:81:19:29:58:93:8d:5f:2e:bb:c1:0e:d9:69:bf:bb:
70:47:e7:72:1d:61:d4:2b:98:27:65:3f:66:06:e7:3e:e9:4a:
23:a3:81:9f:41:4d:32:cb:d9:78:5d:9c:8c:8e:5f:82:6d:32:
8b:75:fd:14:da:16:f6:ad:42:ca:a0:b5:74:1c:56:38:22:0c:
5b:03:4b:00:8d:ef:ac:bf:4f:12:55:5d:07:af:79:f0:03:68:
9f:d7:92:73:9b:74:4e:a1:dc:a7:d7:31:f8:9e:6a:6b:54:27:
a9:9d:ce:52:7a:b1:3d:2e:77:87:ea:68:bd:89:92:7c:4a:c2:
bc:25:4f:50:86:a8:02:af:66:bf:08:c8:88:4a:27:44:16:9b:
05:86:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:57 2024 by rpki-client on console.sobornost.net