Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20343030393039.roa
File: 34352e3132382e31342e302f32332d3233203d3e20343030393039.roa (raw, json)
Hash identifier: z3i4AOLprWDUXaIIzdneRQWJbig8vY70P2TPv7sAmRA=
Subject key identifier: D8:D8:20:6B:54:25:AD:BA:D4:6B:DC:51:23:41:32:20:32:A2:47:E2
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 37CBE8B951C5E46379312E29A3A87EF03F65039A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20343030393039.roa
Signing time: Tue 24 Dec 2024 08:39:19 +0000
ROA not before: Tue 24 Dec 2024 08:34:19 +0000
ROA not after: Tue 23 Dec 2025 08:39:19 +0000
asID: 400909
IP address blocks: 45.128.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:cb:e8:b9:51:c5:e4:63:79:31:2e:29:a3:a8:7e:f0:3f:65:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Dec 24 08:34:19 2024 GMT
Not After : Dec 23 08:39:19 2025 GMT
Subject: CN=D8D8206B5425ADBAD46BDC512341322032A247E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:f2:1e:c2:cc:78:6a:15:df:27:8f:f7:62:
d3:66:1f:b4:46:b6:4f:20:72:a7:fb:65:39:3d:fe:
96:e5:d8:9c:f8:23:c8:f3:bf:46:90:4a:3e:2f:a9:
25:1a:83:68:7d:81:e9:da:b8:75:b1:80:47:5e:33:
bf:d0:82:4f:51:ce:2e:3c:d6:16:7a:5a:82:eb:57:
03:28:76:5d:a9:03:dc:fb:92:6a:77:39:48:39:e2:
86:a5:a0:b6:9e:0c:43:8e:e0:77:bc:60:44:26:ea:
cd:56:b4:55:31:42:5d:5e:ec:75:33:36:51:aa:1f:
dc:db:30:0a:26:fa:d8:dc:96:53:ea:7e:cf:de:d1:
6c:fd:a5:49:29:23:7a:94:08:2b:c3:5d:93:62:ae:
f1:64:1b:9f:49:b1:c9:78:b7:8b:4e:09:08:48:c8:
33:e7:7b:c8:29:89:8e:df:12:b9:a3:b8:cf:ee:e9:
62:89:71:3c:eb:e3:2e:4c:be:38:eb:0b:a9:e4:5c:
f8:a5:73:06:80:d7:ef:0d:b8:9a:65:46:b2:ab:df:
4b:d6:7d:67:0a:e9:d3:58:5b:f2:28:64:a2:7d:52:
87:ae:40:1f:9a:b6:11:38:32:d7:e1:2a:c3:e4:46:
f5:b0:41:3e:c9:cd:ad:05:6d:e5:85:88:0a:ca:0a:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:20:6B:54:25:AD:BA:D4:6B:DC:51:23:41:32:20:32:A2:47:E2
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20343030393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/23
Signature Algorithm: sha256WithRSAEncryption
08:16:cc:e7:72:71:5d:17:b1:06:72:50:92:67:2c:91:f5:9d:
15:28:0b:81:15:76:a8:4a:8c:cf:0d:ea:9e:dd:fb:f3:ce:31:
70:cf:e6:b8:31:13:c5:b1:5e:13:e6:ea:47:ae:1c:61:34:b7:
bd:2b:05:48:a6:bf:e5:3d:9b:83:33:8a:df:37:be:22:47:31:
3a:eb:b2:42:47:b3:68:21:a0:47:61:a4:25:a9:ad:ba:71:a4:
9c:9a:9a:e9:c4:af:6e:06:f9:e8:9c:62:5f:c8:3f:fb:7e:db:
8b:09:b7:68:55:70:e3:35:db:d0:c6:ce:7f:26:41:5d:bd:9d:
5d:47:59:36:6b:88:4a:5f:b9:a6:9d:40:9e:1a:11:f4:4d:db:
c2:36:08:3e:54:f7:fa:cb:e6:cc:13:1e:8a:ed:7d:8a:4e:4a:
54:95:e7:0e:61:d2:6d:f9:19:1b:a4:86:c4:1d:1f:08:69:fc:
70:37:79:d7:5c:83:df:89:a2:40:90:e6:f6:28:9e:fe:2b:1d:
89:45:cd:5d:34:c5:4b:df:32:f1:ca:33:ab:7f:37:73:64:c6:
97:3c:b2:a5:d8:70:85:b1:af:e8:88:ed:12:7c:e6:ff:56:9a:
73:71:bc:e0:0d:ed:b6:e6:c8:26:40:4d:18:58:28:58:e0:5e:
1c:e9:4e:da
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUN8vouVHF5GN5MS4po6h+8D9lA5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNDEyMjQwODM0MTlaFw0yNTEyMjMwODM5MTlaMDMxMTAvBgNV
BAMTKEQ4RDgyMDZCNTQyNUFEQkFENDZCREM1MTIzNDEzMjIwMzJBMjQ3RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThPIewsx4ahXfJ4/3YtNmH7RG
tk8gcqf7ZTk9/pbl2Jz4I8jzv0aQSj4vqSUag2h9genauHWxgEdeM7/Qgk9Rzi48
1hZ6WoLrVwModl2pA9z7kmp3OUg54oaloLaeDEOO4He8YEQm6s1WtFUxQl1e7HUz
NlGqH9zbMAom+tjcllPqfs/e0Wz9pUkpI3qUCCvDXZNirvFkG59Jscl4t4tOCQhI
yDPne8gpiY7fErmjuM/u6WKJcTzr4y5MvjjrC6nkXPilcwaA1+8NuJplRrKr30vW
fWcK6dNYW/IoZKJ9UoeuQB+athE4MtfhKsPkRvWwQT7Jza0FbeWFiArKCoOVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU2Ngga1QlrbrUa9xRI0EyIDKiR+IwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMjM4MmUzMTM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzQzMDMwMzkzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LYAOMA0GCSqGSIb3DQEBCwUAA4IBAQAIFszncnFdF7EGclCSZyyR9Z0VKAuBFXao
SozPDeqe3fvzzjFwz+a4MRPFsV4T5upHrhxhNLe9KwVIpr/lPZuDM4rfN74iRzE6
67JCR7NoIaBHYaQlqa26caScmprpxK9uBvnonGJfyD/7ftuLCbdoVXDjNdvQxs5/
JkFdvZ1dR1k2a4hKX7mmnUCeGhH0TdvCNgg+VPf6y+bMEx6K7X2KTkpUlecOYdJt
+RkbpIbEHR8IafxwN3nXXIPfiaJAkOb2KJ7+Kx2JRc1dNMVL3zLxyjOrfzdzZMaX
PLKl2HCFsa/oiO0SfOb/VppzcbzgDe225sgmQE0YWChY4F4c6U7a
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:13 2025 by rpki-client on console.sobornost.net