Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32332d3234203d3e20333939303733.roa
File: 34352e3132382e31322e302f32332d3234203d3e20333939303733.roa (raw, json)
Hash identifier: k5VZGYKXMkcaCiPxZA8841WMZ3NoGwPK+tMhJeVyF1Y=
Subject key identifier: 49:CE:4F:16:64:B9:26:84:49:7C:6E:16:8D:32:0D:17:95:2B:9E:50
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 7548B34B02336D26847F8F808EE63311BB7C8D82
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32332d3234203d3e20333939303733.roa
Signing time: Tue 29 Aug 2023 14:06:39 +0000
ROA not before: Tue 29 Aug 2023 14:01:39 +0000
ROA not after: Tue 27 Aug 2024 14:06:39 +0000
asID: 399073
IP address blocks: 45.128.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:48:b3:4b:02:33:6d:26:84:7f:8f:80:8e:e6:33:11:bb:7c:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 29 14:01:39 2023 GMT
Not After : Aug 27 14:06:39 2024 GMT
Subject: CN=49CE4F1664B92684497C6E168D320D17952B9E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:d1:ee:d1:93:d0:92:14:3a:3d:18:32:46:
f5:13:68:f9:41:a3:54:de:8f:f6:0b:f2:9e:15:0f:
53:8c:9d:02:1c:bc:2f:c2:c3:3a:98:38:e0:46:f8:
9f:8b:cc:c2:88:61:ab:4c:b8:04:c1:8d:56:73:55:
94:ec:8d:84:71:15:c8:8b:d6:af:71:50:3c:67:0b:
00:12:87:55:19:10:5b:5c:ea:09:9e:b1:73:ff:92:
70:21:84:0d:ca:8e:dc:7b:4c:dc:3c:8f:32:a9:21:
37:ea:94:fe:e9:da:18:5b:10:45:41:d0:a2:9b:ed:
59:10:ce:d9:91:25:b7:a2:4c:01:e7:65:f8:c2:a4:
52:a4:c9:c7:c8:2f:5b:f2:7c:e3:9c:f4:14:51:81:
07:b4:d5:69:00:b8:62:8d:80:a3:cd:89:28:d1:d9:
58:f0:ae:df:e4:e7:03:a3:4b:3b:1d:39:8a:cc:8b:
41:a6:31:83:ad:5b:a4:41:e1:fb:e0:29:e6:c5:65:
a1:fd:6d:87:63:bc:73:71:df:29:bc:1a:7d:f0:2c:
79:55:ad:66:5b:e7:26:3c:e8:d5:ac:90:ca:7e:7c:
51:d3:c3:74:87:ce:ba:e1:b8:78:aa:95:13:06:29:
75:04:5d:a2:ee:cd:c6:e0:33:01:39:51:ea:09:1c:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:4F:16:64:B9:26:84:49:7C:6E:16:8D:32:0D:17:95:2B:9E:50
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32332d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/23
Signature Algorithm: sha256WithRSAEncryption
85:9b:f8:b6:f7:87:6c:2f:af:ee:17:66:82:35:ac:4f:69:65:
6b:9b:14:3d:d2:19:e0:e1:b3:b3:ce:dc:bc:08:18:dc:6e:b8:
fa:e5:7d:19:98:07:66:16:de:02:fa:6e:fe:d5:7c:e1:d2:c7:
85:69:91:07:e9:18:4b:b9:a0:6a:5c:26:56:87:99:8e:95:dd:
f2:5d:0e:81:ba:58:40:2b:87:3c:f0:8d:04:a5:63:fd:a2:d7:
b1:bf:57:8e:1f:92:5c:36:25:05:99:06:39:97:00:63:9a:8a:
41:58:03:16:e0:77:a5:a7:2e:13:be:d0:7d:fb:85:0a:ea:e6:
00:58:c0:f8:5e:79:0e:ea:19:30:0d:b3:d7:be:ac:6b:7e:63:
9f:a9:ef:e0:8a:07:17:47:f7:d1:8b:7d:a0:9e:a6:65:87:bd:
e5:64:ae:93:8a:88:2d:a9:0e:bc:34:ea:f3:53:db:12:43:99:
e0:24:71:81:a0:20:a0:0e:fc:60:80:f0:33:d1:14:6c:b5:1f:
a2:04:e0:84:c3:4d:be:f5:8d:54:09:94:99:93:10:27:e9:e2:
58:fa:99:b2:50:58:17:58:f3:5d:10:e7:ed:90:72:48:2a:b8:
27:65:2f:f3:b7:0a:66:b8:15:67:13:8d:69:1c:b3:4d:17:2e:
54:d4:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:10:20 2023 by rpki-client on console-ams.rpki-client.org