Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31332e302f32342d3234203d3e20383334.roa
File: 34352e3132382e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: O8Dkv0xAC118IjoR+p9GyyFy87F6ikyiXBeCIOuJ10w=
Subject key identifier: 54:CE:2A:DB:58:9F:34:2E:E9:DC:31:09:AE:9F:0C:DE:B9:93:74:00
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 70FBAA53D843C31394C98FE31C9B92A06CC0E0E7
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31332e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Jul 2023 10:00:09 +0000
ROA not before: Sun 02 Jul 2023 09:55:09 +0000
ROA not after: Sun 30 Jun 2024 10:00:09 +0000
asID: 834
IP address blocks: 45.128.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fb:aa:53:d8:43:c3:13:94:c9:8f:e3:1c:9b:92:a0:6c:c0:e0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 2 09:55:09 2023 GMT
Not After : Jun 30 10:00:09 2024 GMT
Subject: CN=54CE2ADB589F342EE9DC3109AE9F0CDEB9937400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:ce:09:73:49:f3:c7:87:78:1d:04:ea:5c:
f9:90:b2:a8:9f:d6:79:40:ff:fe:be:31:f4:94:b1:
23:9d:6a:ae:cd:2c:cd:74:28:dc:ef:92:8a:c6:ba:
b0:18:d3:e8:75:19:aa:ab:cd:7a:6e:dd:23:61:39:
71:0e:20:95:c2:0f:12:65:59:77:e5:ed:7c:e0:cc:
d2:b9:c4:54:ef:f7:61:6a:fb:e1:ab:dc:78:21:6b:
e3:53:bb:0c:b4:58:a8:49:1a:05:8d:ae:69:aa:ad:
9d:6f:50:50:1e:38:98:f7:0b:ef:91:a6:08:1c:9d:
f0:d4:e7:cf:ae:95:de:a0:65:60:dd:0c:a5:1d:25:
3f:df:9f:6e:f4:53:52:8d:16:78:0c:66:58:60:f6:
63:dd:76:55:9f:dc:e6:58:16:7f:15:24:85:cd:d8:
e5:0e:38:5f:f9:2c:04:dc:a7:a6:b4:82:3a:7a:71:
15:34:79:60:d4:4a:2e:b4:7e:30:f8:5b:83:16:87:
19:34:77:33:e5:ac:11:ce:eb:c5:e8:a4:a7:d7:57:
e3:ed:5c:43:42:f2:43:28:b4:3a:59:05:1b:79:89:
b2:05:43:78:7e:0c:cb:93:e9:c1:0b:41:82:07:ca:
45:1d:84:97:f2:b8:1c:4d:b8:33:71:54:60:c3:2d:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:2A:DB:58:9F:34:2E:E9:DC:31:09:AE:9F:0C:DE:B9:93:74:00
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5d:65:03:a1:45:1f:a0:e9:16:33:22:85:42:af:61:ae:e1:
8a:3a:54:70:af:f8:43:1a:ca:1d:6e:5a:6b:5c:14:20:e0:cd:
d8:31:03:bf:7c:f6:75:7a:72:c5:f4:af:b3:ca:50:0a:a6:22:
0f:09:14:bc:d8:25:fe:9d:60:50:2e:dc:11:a6:39:03:35:8a:
60:dd:c1:40:9b:b9:41:e5:ff:8d:66:e2:a1:04:8b:9d:03:2a:
94:e4:73:d3:5e:78:47:20:1d:28:64:d4:9b:a9:58:54:20:c4:
73:21:78:df:b1:63:f7:b6:fa:c4:69:3e:52:18:62:ac:ec:6c:
4f:1a:8b:2a:23:57:84:83:35:ee:0a:9b:4a:62:f3:12:f7:0f:
fe:5c:4f:56:07:07:a8:a1:29:23:6e:15:82:66:8d:b5:7b:67:
8a:99:1d:f0:10:91:5b:2f:35:53:f6:99:c9:90:2e:26:48:ec:
30:6b:83:82:2a:c6:76:2e:42:df:2e:5c:3b:38:cf:88:14:70:
ec:9e:0a:5f:5f:81:4f:95:ab:f0:48:23:72:b7:8c:ba:a9:e2:
bd:b2:7b:63:74:06:e9:10:e0:e3:0b:5b:b0:dc:40:49:7e:7f:
f1:4e:3c:1d:64:45:1b:4a:7f:71:aa:74:ed:7c:6e:00:1c:96:
0c:01:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:08 2025 by rpki-client