Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32342d3234203d3e20333937353633.roa
File: 34352e3132382e31342e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: k9oyqkHQFRDxvE/+P96BPM7eOUvG3F5fx+tuaxaVWjU=
Subject key identifier: 88:2A:BA:EE:D3:E4:63:54:E2:5B:2F:79:47:3B:EF:E5:25:18:DA:32
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2FABD03B58516F8B8F90750896F34E8D4C872C73
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32342d3234203d3e20333937353633.roa
Signing time: Wed 05 Jul 2023 16:56:23 +0000
ROA not before: Wed 05 Jul 2023 16:51:23 +0000
ROA not after: Wed 03 Jul 2024 16:56:23 +0000
asID: 397563
IP address blocks: 45.128.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ab:d0:3b:58:51:6f:8b:8f:90:75:08:96:f3:4e:8d:4c:87:2c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 5 16:51:23 2023 GMT
Not After : Jul 3 16:56:23 2024 GMT
Subject: CN=882ABAEED3E46354E25B2F79473BEFE52518DA32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:ba:fc:ca:cd:6a:de:72:36:96:5b:17:e3:
fe:cf:cb:ff:89:76:ac:65:ce:e6:eb:cb:ee:ee:b5:
b1:06:db:79:63:4b:9b:9f:56:05:cb:e8:dc:c5:11:
2a:2d:ba:70:42:f0:41:fb:14:ec:b7:88:f2:3c:de:
d4:47:06:bc:bc:fe:eb:e2:af:7b:5d:f6:dc:7c:8e:
12:f6:7d:66:33:4f:9f:92:b5:dd:6f:51:fb:46:91:
94:86:10:e2:9b:73:aa:78:54:5b:be:e3:17:fa:8c:
a6:a9:7f:4c:bd:d2:b7:ac:a6:43:36:38:a0:26:a1:
d4:06:0b:8e:74:05:3a:8e:29:b4:6c:f9:7c:ae:1d:
3f:55:8b:f6:ac:fb:fd:bf:e4:31:da:86:6f:36:47:
bb:f6:ac:31:0b:30:3a:43:21:c8:3f:75:3c:00:8e:
73:92:ee:27:d7:80:4d:f4:43:c6:6c:db:8e:79:08:
6b:e4:8f:15:5b:62:ff:c1:cd:90:b5:e7:c4:8e:d5:
88:e7:06:39:4b:fd:a1:dc:49:e6:ce:4e:26:d9:23:
54:a3:7e:36:9c:82:1c:77:1e:e2:26:32:f8:c2:7c:
2b:ce:4c:79:fe:7d:6c:6d:34:93:12:c4:cb:13:74:
d8:a8:72:d4:34:dd:75:da:ef:b2:df:43:a0:12:9e:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:BA:EE:D3:E4:63:54:E2:5B:2F:79:47:3B:EF:E5:25:18:DA:32
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3b:a2:c9:e2:1f:f8:d7:89:ce:01:24:66:66:df:12:ae:3b:
b6:b0:2f:92:c0:b3:49:32:02:7c:69:ed:53:ab:83:26:ee:ca:
d5:ae:fb:67:79:b5:32:69:7c:fc:3c:a2:77:6e:03:09:0d:1c:
c9:09:eb:82:fa:72:71:ef:9b:1f:53:fd:87:0e:a3:09:66:33:
f7:01:86:d2:82:dc:08:6f:cf:b7:91:98:3d:ff:c1:7f:0b:e0:
e6:e6:2b:e0:eb:2b:b3:fb:5e:18:25:6c:cc:2c:4e:15:cd:e2:
4a:b4:bc:6e:d0:18:4a:59:8e:c4:92:d1:6d:b0:f6:bf:61:bd:
62:0a:b8:cc:b1:9a:71:44:70:a0:33:ee:37:33:a8:09:f3:b4:
97:e5:5a:8d:7d:5e:1c:59:e8:a7:63:4d:f6:a1:e1:e8:ca:0f:
c5:5f:2e:51:17:a5:e8:4d:0f:e7:b5:a7:4f:98:2c:0b:68:92:
b0:8e:2d:c7:02:4b:0f:77:05:8f:bb:91:51:06:bb:77:c9:8a:
86:e4:82:93:c0:3e:4d:14:65:c9:96:7e:e0:fa:c8:37:51:ba:
40:df:0d:f8:f8:b0:cf:4c:38:37:0d:bb:88:cc:88:e5:50:a0:
95:91:35:6e:4c:0a:35:72:18:a1:20:33:d7:e1:0a:21:30:4b:
6b:15:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:38:48 2025 by rpki-client