Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: eEKY2y2tQkpwy9gtdY9SsfrYifSNew4eQxYOUv6r6E0=
Subject key identifier: E4:CB:68:C4:1F:D9:B4:BF:43:7D:00:B5:C1:FA:FA:1A:3B:64:B8:56
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 159C4D102F39EB7185E30EC8E90B6ACC4C73E761
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Sun 26 Jan 2025 10:56:56 +0000
ROA not before: Sun 26 Jan 2025 10:51:56 +0000
ROA not after: Sun 25 Jan 2026 10:56:56 +0000
asID: 834
IP address blocks: 194.60.88.0/24 maxlen: 24
194.60.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9c:4d:10:2f:39:eb:71:85:e3:0e:c8:e9:0b:6a:cc:4c:73:e7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 26 10:51:56 2025 GMT
Not After : Jan 25 10:56:56 2026 GMT
Subject: CN=E4CB68C41FD9B4BF437D00B5C1FAFA1A3B64B856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:46:55:91:fc:f6:2d:79:20:67:79:52:3f:
43:36:53:ee:f7:db:e1:00:34:7a:e9:71:70:41:4b:
44:c3:a5:55:d6:f2:e2:b9:66:5b:37:7c:77:16:ce:
8c:96:62:7f:02:92:ab:91:eb:33:3a:39:bb:bc:7b:
22:6c:1a:fc:c4:cc:74:9d:90:12:72:18:53:1f:be:
54:26:4b:d6:e6:d5:16:4e:e5:05:b2:df:95:de:68:
8d:cd:d6:a4:5e:59:f2:25:b1:4e:2e:d3:d4:62:73:
db:68:67:10:bb:fe:97:74:ea:66:8f:24:7f:35:09:
82:d7:ab:a9:41:5a:9c:fd:63:71:9a:f4:79:84:0a:
d8:d7:8b:d2:bb:dc:e1:ad:b5:c4:12:a8:e3:d1:e9:
f3:3e:84:5b:4d:fe:43:e8:10:a1:3e:b4:35:a4:bf:
fe:d8:98:f3:a2:2f:78:6b:56:a4:33:19:34:e7:00:
e1:2f:16:a9:75:bf:04:7d:69:0e:50:df:89:98:2c:
41:57:c0:6d:78:0c:64:14:4d:0b:93:e3:62:fe:c1:
c7:18:e9:5c:5e:fc:a5:30:f7:00:f7:5b:b3:8a:73:
f2:06:53:5a:f4:2c:21:66:84:49:bc:59:59:04:fe:
ff:b7:3a:b0:ba:c5:a9:63:a7:41:05:c3:ce:96:84:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:68:C4:1F:D9:B4:BF:43:7D:00:B5:C1:FA:FA:1A:3B:64:B8:56
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.88.0/24
194.60.91.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:00:dc:60:f0:0f:9f:23:ea:e8:c2:6d:3f:7f:01:56:10:62:
8b:b6:32:d2:59:d3:57:cc:65:41:e0:41:74:66:df:7b:65:72:
b2:fa:e1:65:05:5a:d5:90:a8:e2:87:ec:25:5c:08:4b:22:70:
d3:e6:e3:2e:14:a9:2c:9c:fb:7d:60:1a:6c:94:e8:e9:e8:0b:
87:93:94:d0:54:4a:45:16:9f:34:9b:65:d4:f2:81:56:82:55:
9c:70:40:b9:21:84:04:a8:13:58:a0:0a:7f:ed:ec:52:6e:b3:
f8:85:81:e9:a6:d5:f9:c8:58:bf:17:1d:3e:2e:9e:64:08:b0:
9d:6e:82:57:06:c2:41:33:ae:e3:11:09:37:93:d1:38:58:ea:
bf:4b:e7:5d:10:50:b9:3e:c3:fa:97:50:f2:75:8d:64:8c:0a:
02:6f:ee:b4:5c:fe:5a:7d:0d:07:52:da:4f:cf:83:dd:fb:70:
2d:a0:f6:b1:b5:51:63:09:8f:b5:c6:62:04:b0:4e:a9:29:ee:
28:f6:0d:38:cb:e2:6a:56:c7:3f:f2:97:52:17:7f:d5:75:a2:
7f:b1:c1:b5:20:5d:13:41:11:74:31:3b:86:33:6a:bd:15:0a:
68:56:1a:d1:26:4c:77:86:c1:80:1c:b1:4a:95:36:66:9e:51:
b3:7a:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:56 2025 by rpki-client