Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32332d3234203d3e2039303837.roa
File: 34352e3132382e31342e302f32332d3234203d3e2039303837.roa (raw, json)
Hash identifier: 4HOOMnjm+MojOj7lIjw+v/q3/ZqZaY3dLO72oaCMblo=
Subject key identifier: 5D:FE:6D:4B:16:13:9F:A4:05:D3:6E:D3:6D:F2:AD:77:8B:82:C4:95
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 0AEAA59FE98A1ACE991E1C183F877DE82814AF5D
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32332d3234203d3e2039303837.roa
Signing time: Fri 01 Sep 2023 20:57:22 +0000
ROA not before: Fri 01 Sep 2023 20:52:22 +0000
ROA not after: Fri 30 Aug 2024 20:57:22 +0000
asID: 9087
IP address blocks: 45.128.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ea:a5:9f:e9:8a:1a:ce:99:1e:1c:18:3f:87:7d:e8:28:14:af:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 1 20:52:22 2023 GMT
Not After : Aug 30 20:57:22 2024 GMT
Subject: CN=5DFE6D4B16139FA405D36ED36DF2AD778B82C495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:45:20:c4:f0:9e:8f:07:0a:9b:0f:a0:49:
b2:8d:10:e4:96:6e:ec:4f:6f:4f:b4:f1:58:2e:04:
a4:8a:14:e8:25:13:fb:a9:d2:74:7b:a3:5e:a6:8e:
86:bd:04:1d:0d:f1:7a:61:ac:e9:74:99:47:b2:b2:
9e:ba:7b:f9:e2:d7:ad:aa:0b:43:56:5b:05:83:cc:
29:01:37:d2:83:a5:20:da:94:e3:f7:07:8d:99:51:
91:cf:71:aa:b7:9a:bf:34:e2:23:36:f1:a0:b6:9b:
15:a2:ee:97:89:13:50:36:5a:f0:fe:7b:cf:de:61:
55:99:f7:45:5b:94:05:11:29:19:79:3c:1f:51:ed:
85:cc:32:01:3f:df:fd:2b:38:ac:70:d1:c8:52:39:
fc:7c:50:de:1b:81:c7:52:4b:62:2e:2a:24:37:be:
4f:41:95:01:a7:27:e3:5d:68:8e:03:8a:a1:85:bd:
a2:0a:36:15:c4:a5:d1:c5:5d:14:d5:2d:ba:58:8d:
27:d7:60:a7:3b:4c:96:4d:23:a3:3b:b3:f2:ad:06:
0e:15:c7:2b:3c:55:60:f3:96:62:1a:92:37:69:6f:
73:30:41:79:48:19:1d:ec:e8:bb:8f:86:c9:d6:47:
9b:f3:64:b8:cc:fd:f1:41:00:c0:aa:e7:2f:ee:a9:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FE:6D:4B:16:13:9F:A4:05:D3:6E:D3:6D:F2:AD:77:8B:82:C4:95
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32332d3234203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/23
Signature Algorithm: sha256WithRSAEncryption
41:da:8a:31:5b:7f:cd:d0:b7:74:b6:25:88:8e:ef:62:3b:ab:
34:a2:e8:3b:43:74:55:14:6b:e3:9c:54:6c:44:05:70:86:c2:
01:c4:ed:9e:9a:c4:37:2c:9a:79:80:6e:9a:dc:df:54:67:7e:
98:f9:b3:5e:27:ce:0e:bb:5e:0e:5b:ba:b8:5d:c8:b7:b4:0d:
2e:05:99:b9:45:44:a6:a3:b9:28:3f:03:04:4d:65:61:c2:3a:
02:55:7d:dd:6a:83:7b:b5:62:bf:6d:0c:51:af:1e:0e:97:57:
5d:d6:7d:1f:4d:08:42:d0:73:39:18:c7:4b:4e:50:36:07:0f:
c6:66:c6:e3:a7:f5:8c:59:b9:12:2d:c4:cf:2b:68:00:9f:8c:
c9:5a:1f:7c:93:75:e6:1f:7c:bc:43:58:42:96:60:93:31:d5:
18:66:59:e7:db:d3:78:dd:96:21:a4:ae:fc:9c:9b:8e:8c:7b:
30:19:b7:25:d2:f7:b6:79:6e:bf:71:48:4f:51:5f:eb:a6:5c:
be:19:e9:2c:d3:24:94:9c:87:4a:41:84:f6:dc:ae:62:90:08:
7e:10:b2:91:7c:2f:6c:4e:ac:d4:55:50:bb:00:af:ef:80:4f:
bc:1f:3d:86:ca:aa:6b:07:0e:04:06:59:91:66:2f:f5:30:62:
1c:d2:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:10:20 2023 by rpki-client on console-ams.rpki-client.org