Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e20323034383433.roa
File: 34352e3133322e3231362e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: kTOyhf36+K8cVp01Y6HXrRwV1fDJpRs4ZMPu1cgXO8o=
Subject key identifier: AC:B8:90:49:F9:31:78:B3:D2:EC:67:B7:BC:25:F7:A9:09:68:D1:34
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4B4DE719A82BDB4EA6BCFDE06D021DEA4C68CDE4
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e20323034383433.roa
Signing time: Thu 08 Jun 2023 10:02:27 +0000
ROA not before: Thu 08 Jun 2023 09:57:27 +0000
ROA not after: Thu 06 Jun 2024 10:02:27 +0000
asID: 204843
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4d:e7:19:a8:2b:db:4e:a6:bc:fd:e0:6d:02:1d:ea:4c:68:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 8 09:57:27 2023 GMT
Not After : Jun 6 10:02:27 2024 GMT
Subject: CN=ACB89049F93178B3D2EC67B7BC25F7A90968D134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:2e:d2:72:23:d6:7f:9e:66:72:9d:d2:ee:
6f:44:67:cb:5a:35:40:1f:fb:cc:1b:2d:b7:51:a6:
cf:59:ca:b3:98:05:22:25:25:1c:3c:07:0b:c2:d8:
35:36:fb:28:15:a0:7b:36:38:33:1c:d1:df:1d:7e:
ee:16:c9:16:41:36:cf:e0:dd:c9:72:49:ba:d4:12:
0e:2d:45:17:64:8d:2d:f9:be:28:30:20:ff:73:93:
28:63:89:1b:de:b0:6c:7e:9f:ee:e6:89:4a:db:91:
4d:e7:73:92:26:be:e3:f8:bc:19:f1:d8:5b:38:2e:
a5:f2:b2:88:48:c9:a0:64:11:d1:43:02:3e:b1:86:
3d:75:36:cd:75:84:a7:bb:53:4b:6d:6e:37:ba:96:
2f:00:16:62:e8:84:cd:a1:b9:fb:55:33:31:e2:a4:
f0:0e:44:48:e5:8b:c5:42:ea:32:1e:8e:fb:37:c4:
a5:79:d8:72:c3:6a:c9:70:93:19:ab:a3:a3:9a:3f:
e7:f8:da:c5:55:a2:49:5d:7c:8d:dd:e5:a6:c8:b0:
09:c4:27:25:58:07:f1:f5:f0:5b:aa:5c:8e:1d:34:
8e:32:e7:74:a7:23:b8:5e:ca:cd:1e:82:0d:a0:86:
8d:ee:93:c4:a0:56:09:de:30:10:21:7a:0f:77:c7:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:90:49:F9:31:78:B3:D2:EC:67:B7:BC:25:F7:A9:09:68:D1:34
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bc:42:21:09:01:d5:05:47:71:2c:b0:e2:0e:a2:72:3c:b7:
2d:ce:1b:e6:53:92:83:d6:94:f0:a2:7b:a4:48:51:8f:35:90:
22:69:e9:80:46:ff:e8:4b:11:62:2c:a9:3f:b3:66:02:81:dd:
68:a9:70:12:aa:8f:46:d8:11:f5:36:82:4f:37:7d:c3:19:fc:
99:d7:9d:98:3f:0f:1c:aa:97:99:8d:73:07:4f:c4:5b:6e:08:
0b:6b:94:07:51:dc:d0:28:d0:47:06:1f:84:c6:93:40:60:62:
87:fd:0f:9a:53:ee:1c:20:f0:4b:d1:7a:d2:cd:a1:bd:be:0e:
0e:03:52:7e:a0:e2:81:65:f1:4a:f6:55:eb:27:d0:4f:13:a7:
91:d7:a5:1a:ea:56:f1:73:bd:36:8d:4b:0a:2c:75:c2:c6:60:
01:fd:16:7e:54:02:37:93:ed:83:c1:14:2b:cc:5f:19:0e:98:
86:5a:e9:5e:25:f0:ad:73:49:79:0e:43:51:7f:d3:f5:d7:c4:
50:92:1b:c5:83:c4:44:84:4b:cd:c1:cd:b1:c4:51:d2:c1:2e:
68:5d:d9:ec:4b:59:e5:02:67:52:4a:4b:d5:17:9e:b8:ec:d6:
03:e4:07:b8:61:9e:d3:1b:2d:18:e4:11:13:0a:04:7e:de:86:
9d:8d:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:55 2025 by rpki-client