Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: BOHr19g9F5C0ljj44ZAtc40A37sbRiChcC3IUN36BzM=
Subject key identifier: A4:B0:D2:F9:C9:A2:BD:F1:BF:81:0E:A7:C3:A0:ED:F5:BB:93:E6:EF
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 308944C5B5A4AABCC3C2C64A9FFC23AC031ACEBF
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
Signing time: Tue 28 Jan 2025 18:00:56 +0000
ROA not before: Tue 28 Jan 2025 17:55:56 +0000
ROA not after: Tue 27 Jan 2026 18:00:56 +0000
asID: 834
IP address blocks: 45.152.240.0/23 maxlen: 24
45.157.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:89:44:c5:b5:a4:aa:bc:c3:c2:c6:4a:9f:fc:23:ac:03:1a:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 28 17:55:56 2025 GMT
Not After : Jan 27 18:00:56 2026 GMT
Subject: CN=A4B0D2F9C9A2BDF1BF810EA7C3A0EDF5BB93E6EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:03:8e:2e:1c:4b:8b:bb:e6:1e:aa:6c:ea:
47:c6:61:ed:b5:9c:ee:d6:01:da:a3:4a:6d:e1:a7:
aa:20:ce:57:33:8a:2a:8a:44:76:51:1f:5b:8a:c3:
62:14:0d:e5:9e:8c:f1:08:4f:b2:13:01:5f:5c:ba:
91:44:51:4b:33:c1:7d:c6:55:1e:47:75:37:f0:c7:
e7:00:bd:7b:9b:c6:be:9c:e8:d8:f0:4d:73:08:0a:
38:95:e5:c9:2c:81:1e:95:55:ff:34:ae:af:78:56:
3d:0d:10:2a:3d:5c:25:29:f1:ec:c5:9b:03:e4:f8:
eb:ca:ae:11:be:d4:cd:3c:bf:b6:52:58:b1:47:2f:
a7:12:7e:f5:fc:01:d6:bb:d7:d9:36:2b:97:31:d0:
78:64:57:1c:67:bc:f6:50:da:45:1f:08:54:d8:1d:
0b:b0:ed:6f:01:31:54:2d:d7:6b:b9:b2:80:5a:44:
eb:94:f8:b0:7e:bb:a3:df:72:4d:7d:c9:93:c0:19:
97:7c:ca:8d:b6:30:04:77:79:37:73:ca:ba:7d:65:
dd:fb:74:f7:9b:d0:47:61:98:ae:0f:08:f6:79:ba:
7a:c8:f9:59:55:da:44:15:83:e7:a5:70:97:c1:c9:
e2:16:76:76:30:1e:f5:db:47:0d:f5:4d:7a:ed:b0:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:D2:F9:C9:A2:BD:F1:BF:81:0E:A7:C3:A0:ED:F5:BB:93:E6:EF
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
45.157.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:84:ff:5c:12:4a:b1:bb:52:93:d8:18:9e:dd:6e:e6:50:51:
02:f5:33:f3:e8:fb:35:60:d4:ab:37:37:fb:67:7f:97:d9:6a:
2b:46:fd:e1:0b:71:ef:2a:2a:52:b3:c9:59:71:79:bb:db:07:
34:c6:4b:8b:24:4f:c9:82:cc:3d:e5:2f:92:58:5d:72:ce:8f:
45:bf:c2:86:13:21:1b:01:c6:34:d4:61:58:2b:8d:cd:5d:83:
0b:50:38:7f:06:ed:15:49:20:51:33:d8:42:38:88:99:8b:47:
93:64:ab:10:bb:2e:b0:63:7d:d3:de:bb:a6:93:0e:54:02:6c:
88:54:c4:46:8b:a9:5e:e2:b0:0f:7d:4e:33:ac:cf:4c:14:ea:
6d:08:8d:a1:94:96:28:b5:30:5c:17:f9:33:19:6c:1d:f5:b8:
37:36:7a:db:18:cc:34:42:39:34:ce:59:92:90:f2:23:da:10:
14:ae:9b:16:44:b3:64:7f:5c:af:e2:6c:00:93:21:a1:56:24:
dd:6e:aa:a4:14:ea:4c:ff:85:88:30:64:20:6d:03:c1:a1:59:
a7:4c:18:2d:c9:46:c7:f2:24:b6:2e:05:e7:ba:c2:47:d1:35:
6c:e3:9c:16:70:f6:c0:23:5c:ab:14:85:a2:aa:90:2a:9f:40:
08:f2:fd:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUMIlExbWkqrzDwsZKn/wjrAMazr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTAxMjgxNzU1NTZaFw0yNjAxMjcxODAwNTZaMDMxMTAvBgNV
BAMTKEE0QjBEMkY5QzlBMkJERjFCRjgxMEVBN0MzQTBFREY1QkI5M0U2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LgOOLhxLi7vmHqps6kfGYe21
nO7WAdqjSm3hp6ogzlcziiqKRHZRH1uKw2IUDeWejPEIT7ITAV9cupFEUUszwX3G
VR5HdTfwx+cAvXubxr6c6NjwTXMICjiV5cksgR6VVf80rq94Vj0NECo9XCUp8ezF
mwPk+OvKrhG+1M08v7ZSWLFHL6cSfvX8Ada719k2K5cx0HhkVxxnvPZQ2kUfCFTY
HQuw7W8BMVQt12u5soBaROuU+LB+u6Pfck19yZPAGZd8yo22MAR3eTdzyrp9Zd37
dPeb0EdhmK4PCPZ5unrI+VlV2kQVg+elcJfByeIWdnYwHvXbRw31TXrtsH3NAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUpLDS+cmivfG/gQ6nw6Dt9buT5u8wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZjwAwQA
LZ0SMA0GCSqGSIb3DQEBCwUAA4IBAQC3hP9cEkqxu1KT2Bie3W7mUFEC9TPz6Ps1
YNSrNzf7Z3+X2WorRv3hC3HvKipSs8lZcXm72wc0xkuLJE/Jgsw95S+SWF1yzo9F
v8KGEyEbAcY01GFYK43NXYMLUDh/Bu0VSSBRM9hCOIiZi0eTZKsQuy6wY33T3rum
kw5UAmyIVMRGi6le4rAPfU4zrM9MFOptCI2hlJYotTBcF/kzGWwd9bg3NnrbGMw0
Qjk0zlmSkPIj2hAUrpsWRLNkf1yv4mwAkyGhViTdbqqkFOpM/4WIMGQgbQPBoVmn
TBgtyUbH8iS2LgXnusJH0TVs45wWcPbAI1yrFIWiqpAqn0AI8v1f
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:52 2025 by rpki-client