Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31352e302f32342d3234203d3e20333937353633.roa
File: 34352e3132382e31352e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: Y47PUyYtK+ih+uhMOTtlIuuSmngzQqzq4tO7/vIChe0=
Subject key identifier: 1B:B1:77:94:C4:D3:35:6A:2C:24:60:A7:A8:5F:26:C8:ED:3F:92:9F
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 0EB27BEACE6DFAB088DBD2BEAAF99D4256399F59
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31352e302f32342d3234203d3e20333937353633.roa
Signing time: Wed 05 Jul 2023 16:56:25 +0000
ROA not before: Wed 05 Jul 2023 16:51:25 +0000
ROA not after: Wed 03 Jul 2024 16:56:25 +0000
asID: 397563
IP address blocks: 45.128.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b2:7b:ea:ce:6d:fa:b0:88:db:d2:be:aa:f9:9d:42:56:39:9f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 5 16:51:25 2023 GMT
Not After : Jul 3 16:56:25 2024 GMT
Subject: CN=1BB17794C4D3356A2C2460A7A85F26C8ED3F929F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:3f:88:99:a2:d5:16:bc:dc:8a:14:39:d1:
4f:84:a4:6f:31:cf:3f:7f:af:bb:49:60:79:1a:3e:
8f:a4:18:c4:a7:c2:db:50:6e:9d:85:d6:d0:7e:66:
76:86:5f:37:4a:f1:c9:75:fa:ac:5d:30:9f:5f:b7:
97:7f:32:25:f7:31:24:02:24:ac:c0:1a:73:c9:a5:
76:fa:65:b4:34:d8:ee:d1:7d:dd:ad:7d:75:35:5e:
a6:55:f3:67:2b:35:7c:2d:b8:ad:ee:78:6b:02:22:
ef:d3:f5:eb:2f:92:20:a2:d2:6b:89:4a:84:5d:cb:
7f:fd:bf:35:69:dc:77:43:9e:5b:56:48:d0:6f:e9:
9c:7c:44:6e:d6:45:f8:da:d2:1e:3a:c9:88:af:92:
bb:aa:41:a4:5a:6b:ac:01:af:7f:b6:84:8e:e7:a1:
5e:eb:05:b6:ae:9b:89:e7:c4:43:9c:9e:97:87:da:
fc:9c:67:72:8d:2f:9e:08:a6:95:c0:fe:92:b8:81:
cc:58:24:be:43:20:b9:93:a6:58:30:b3:4f:a2:0d:
71:35:c4:94:2c:b8:4b:d4:16:7f:6d:23:31:13:1e:
f7:0f:56:08:52:cd:ae:60:55:98:13:71:52:0b:b6:
9f:22:8a:5a:4a:b0:ff:24:9f:de:e4:5c:3b:02:0f:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:77:94:C4:D3:35:6A:2C:24:60:A7:A8:5F:26:C8:ED:3F:92:9F
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31352e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.15.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ae:7e:a0:d1:49:03:ba:23:36:e5:fd:c8:27:be:5d:49:ab:
fe:05:3c:53:f6:05:84:65:ca:a4:7a:b1:24:2d:af:c7:90:26:
ed:14:89:bf:26:e7:d7:42:fe:da:39:a5:11:7a:86:2b:1d:d3:
46:ca:60:30:c5:14:55:1f:3b:66:d8:52:0a:9b:4f:eb:ad:c3:
37:d6:4b:d7:8d:14:90:df:30:91:45:08:9b:eb:6f:df:40:89:
cb:6d:d3:bb:27:a6:6a:5f:07:a0:ff:ba:0d:24:6e:e5:11:c2:
30:ad:13:78:7f:72:55:32:6f:0e:c3:ea:81:78:ef:3d:c5:65:
81:57:65:c3:a9:72:ef:d1:e7:b0:ec:ab:f6:78:2e:68:be:1d:
75:13:03:8d:e3:29:26:0c:8d:32:d3:cd:3b:dc:10:bd:f8:ee:
5c:c3:60:b8:8d:cc:9d:7f:06:6b:03:23:2f:14:a9:4b:3e:31:
7c:c1:d7:98:e8:21:51:2c:44:a0:56:a1:d2:98:99:4f:43:8c:
10:29:c1:d4:6d:f6:b1:a4:93:a8:a0:87:0a:11:dc:e4:5f:00:
a1:c5:f0:d1:89:d4:83:71:fc:95:00:25:65:ed:b0:8a:b1:00:
24:62:28:d6:95:2f:5a:7d:99:88:c4:3a:ad:1b:ab:8e:33:4b:
31:8a:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:28 2025 by rpki-client