Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32342d3234203d3e20333937353633.roa
File: 34352e3132382e31322e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: 4OkKJiXpxQagJUoqqOyxTTvIcLLxLrmawlwIK7wmNYU=
Subject key identifier: 61:F8:6B:DC:C5:D3:B8:69:ED:0C:20:EC:3D:A9:4E:D8:2A:5D:1F:19
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 15ED0D410C6C8F9B306123E39880A40538699F8C
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32342d3234203d3e20333937353633.roa
Signing time: Sat 03 Jun 2023 12:07:38 +0000
ROA not before: Sat 03 Jun 2023 12:02:38 +0000
ROA not after: Sat 01 Jun 2024 12:07:38 +0000
asID: 397563
IP address blocks: 45.128.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ed:0d:41:0c:6c:8f:9b:30:61:23:e3:98:80:a4:05:38:69:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 3 12:02:38 2023 GMT
Not After : Jun 1 12:07:38 2024 GMT
Subject: CN=61F86BDCC5D3B869ED0C20EC3DA94ED82A5D1F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:98:92:a9:3e:47:0c:6c:29:16:9d:37:bc:
a0:8c:ca:ff:39:e2:51:53:24:20:c5:07:b1:66:a3:
d3:85:df:9e:80:49:2e:9a:40:d1:c6:e8:87:59:ec:
d8:ca:c4:21:5e:cb:29:10:cd:2f:89:0c:8e:0e:0e:
b9:47:90:0c:ff:94:60:bf:c6:a9:45:6e:10:63:66:
b4:e5:f1:65:f8:81:72:83:ee:55:be:76:b8:b3:d0:
dc:66:e9:25:3c:67:98:44:51:e2:04:30:cb:df:b7:
d0:63:2c:8b:d7:1f:50:5a:dd:b6:f4:fd:86:ae:56:
d4:b9:ac:98:90:a7:59:3c:1a:81:89:53:ef:5a:11:
ec:36:90:1f:2b:2a:eb:37:68:a8:e8:fe:d2:60:50:
9c:6e:2b:73:ae:a2:f6:14:35:1b:09:45:03:38:66:
0d:44:e7:8e:7c:53:b6:c1:7c:11:53:f0:bd:1d:b0:
71:6f:2c:aa:bc:1c:5e:38:bf:cd:04:e7:fc:77:30:
43:57:80:d4:8f:e5:97:05:f4:13:c3:ab:f0:d1:6c:
c9:0d:a2:93:25:43:3e:a5:57:48:ef:03:bc:af:b5:
de:f6:d3:52:b6:e4:2a:f7:d9:8c:69:26:66:c0:a5:
a9:4e:c9:17:41:cf:68:55:6e:4b:e0:f1:b4:94:68:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:6B:DC:C5:D3:B8:69:ED:0C:20:EC:3D:A9:4E:D8:2A:5D:1F:19
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8a:1e:f5:46:c6:7d:f1:17:d4:9d:7f:12:02:6c:d3:0b:92:
3b:4e:8e:68:70:a7:f8:87:a8:ab:da:dd:10:97:8e:d7:bb:0c:
1f:f9:69:22:07:35:33:01:c3:b3:c3:7f:82:fd:82:ef:1f:ba:
ab:2a:89:bc:55:31:9f:a6:84:e9:54:01:f2:cb:46:35:c3:9e:
20:7f:b5:fc:bc:49:20:bc:38:79:f6:94:5f:10:f6:1f:68:73:
d4:72:0a:b4:3b:9b:2b:6b:55:ab:85:19:25:1f:83:36:91:be:
97:59:cd:39:32:b2:ff:dd:aa:4c:5d:33:8c:f3:54:bc:19:db:
b6:8e:81:66:8d:10:86:24:71:ef:fd:7a:5e:a6:a5:1f:a8:91:
1a:7f:3a:72:17:5e:e8:d3:01:91:e5:b4:61:ac:cf:21:e4:59:
63:fc:52:fd:07:b5:de:8b:7a:a5:4c:4a:86:49:83:f9:c5:1d:
a0:b4:fb:40:b4:45:1f:3d:6b:ce:01:30:f6:b8:56:42:99:47:
44:ed:b0:8b:f2:74:18:0e:71:73:79:65:b3:7c:bc:66:f5:97:
01:61:0b:00:02:ff:b3:8a:cf:64:f7:bc:cd:43:a0:6a:9b:75:
69:76:d5:1a:a8:88:96:d3:b5:b2:fd:3a:c9:c4:48:38:bc:30:
2d:02:7a:be
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFe0NQQxsj5swYSPjmICkBThpn4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA2MDMxMjAyMzhaFw0yNDA2MDExMjA3MzhaMDMxMTAvBgNV
BAMTKDYxRjg2QkRDQzVEM0I4NjlFRDBDMjBFQzNEQTk0RUQ4MkE1RDFGMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxw5iSqT5HDGwpFp03vKCMyv85
4lFTJCDFB7Fmo9OF356ASS6aQNHG6IdZ7NjKxCFeyykQzS+JDI4ODrlHkAz/lGC/
xqlFbhBjZrTl8WX4gXKD7lW+driz0Nxm6SU8Z5hEUeIEMMvft9BjLIvXH1Ba3bb0
/YauVtS5rJiQp1k8GoGJU+9aEew2kB8rKus3aKjo/tJgUJxuK3OuovYUNRsJRQM4
Zg1E5458U7bBfBFT8L0dsHFvLKq8HF44v80E5/x3MENXgNSP5ZcF9BPDq/DRbMkN
opMlQz6lV0jvA7yvtd7201K25Cr32YxpJmbApalOyRdBz2hVbkvg8bSUaFypAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUYfhr3MXTuGntDCDsPalO2CpdHxkwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzMjM4MmUzMTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzUzNjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYAMMA0GCSqGSIb3DQEBCwUAA4IBAQCUih71RsZ98RfUnX8SAmzTC5I7To5ocKf4
h6ir2t0Ql47Xuwwf+WkiBzUzAcOzw3+C/YLvH7qrKom8VTGfpoTpVAHyy0Y1w54g
f7X8vEkgvDh59pRfEPYfaHPUcgq0O5sra1WrhRklH4M2kb6XWc05MrL/3apMXTOM
81S8Gdu2joFmjRCGJHHv/XpepqUfqJEafzpyF17o0wGR5bRhrM8h5Flj/FL9B7Xe
i3qlTEqGSYP5xR2gtPtAtEUfPWvOATD2uFZCmUdE7bCL8nQYDnFzeWWzfLxm9ZcB
YQsAAv+zis9k97zNQ6Bqm3VpdtUaqIiW07Wy/TrJxEg4vDAtAnq+
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:56 2025 by rpki-client