Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e20383334.roa
File: 34352e3133322e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6lYycGzlQxm7ca+ejboyQIzf4eozGBSQZ3Ki7x6ZQWM=
Subject key identifier: AC:65:03:75:27:71:8B:5B:91:6E:CB:A6:DB:98:59:39:71:15:DF:4C
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 50829399CCD6E025DD00DA33727E3EAFDCDF9942
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e20383334.roa
Signing time: Mon 10 Jul 2023 11:00:06 +0000
ROA not before: Mon 10 Jul 2023 10:55:06 +0000
ROA not after: Mon 08 Jul 2024 11:00:06 +0000
asID: 834
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:82:93:99:cc:d6:e0:25:dd:00:da:33:72:7e:3e:af:dc:df:99:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 10 10:55:06 2023 GMT
Not After : Jul 8 11:00:06 2024 GMT
Subject: CN=AC65037527718B5B916ECBA6DB9859397115DF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:56:f4:e5:7e:2f:b9:7b:b0:a0:c9:33:1c:
87:b0:5f:86:4c:46:18:6e:64:b5:b5:72:2b:4f:a6:
e0:6a:a3:f6:14:cc:ef:a5:77:85:61:96:97:81:90:
55:35:6a:3b:07:14:14:09:de:81:76:36:82:d6:5b:
f1:50:42:35:d3:26:fc:10:62:ac:28:88:20:5e:31:
1e:67:bf:8e:18:ed:d4:81:f9:a9:0b:60:41:2a:ec:
33:13:79:72:cb:f8:a0:45:d7:71:20:cd:f3:70:22:
7e:1c:0e:3d:50:55:64:61:77:f2:c8:0a:de:59:10:
27:b4:3a:6f:c8:fe:a8:88:bf:16:de:b4:6b:85:04:
b9:66:8d:ac:d2:13:db:3a:3d:46:fd:bc:7c:00:d9:
bd:76:00:5d:ac:ce:8a:b6:de:78:5d:6d:bd:d8:40:
e7:14:b2:ae:53:66:90:47:7d:b3:58:04:5c:4d:82:
c4:01:24:37:9f:84:fb:21:70:97:e0:63:4e:da:c7:
ea:4b:44:cd:3d:e4:fc:37:95:79:96:7c:72:1d:73:
29:e2:04:1e:bc:f7:d9:1f:f7:aa:28:b1:57:96:4d:
c2:66:02:2a:bd:97:8c:16:1d:f7:78:5e:83:55:87:
22:83:59:44:9b:4f:37:fc:b6:3c:46:be:55:d8:a7:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:03:75:27:71:8B:5B:91:6E:CB:A6:DB:98:59:39:71:15:DF:4C
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e3:38:b4:ba:1b:e3:c1:f6:97:5e:1e:c7:e9:fb:21:90:66:
98:0e:72:2b:7b:d1:bf:ca:36:0c:65:05:06:d5:6e:36:5e:83:
5a:80:4d:6c:fb:97:8f:52:5b:63:f5:1c:4c:1e:7f:a5:7d:5b:
05:dc:48:1c:70:2a:c3:5b:cc:70:b7:04:44:9f:c8:63:d4:62:
cb:8c:2a:ca:be:54:9d:e1:7e:a4:a0:05:73:af:b4:f4:03:72:
81:1d:c9:12:2c:a2:8f:05:76:25:f0:15:c6:44:d0:c8:5d:99:
2a:2b:03:0f:8a:57:3a:3d:bf:9e:8c:a1:a1:ac:8f:7c:a2:2a:
70:0e:bb:dc:7d:0e:e1:ce:ed:38:e8:5a:a5:18:05:87:a6:5d:
34:0a:57:b4:d8:bd:f2:08:db:6e:7f:7f:58:e1:ed:52:a9:55:
4e:3d:3a:11:a5:cd:8b:83:36:9d:aa:2f:bf:80:14:74:bb:b6:
5b:0f:77:97:e0:e9:20:b9:b1:1d:35:88:af:20:28:32:20:61:
ab:5f:2f:ad:e2:69:fe:3f:95:4f:7d:0d:f9:c5:12:10:1e:50:
1b:50:74:74:d6:90:dc:43:5a:8d:9d:ae:69:e9:b5:cf:94:e5:
7f:e6:9d:50:a1:af:6c:e1:a4:d5:90:69:61:37:97:76:c8:58:
38:30:df:b9
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUIKTmczW4CXdANozcn4+r9zfmUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA3MTAxMDU1MDZaFw0yNDA3MDgxMTAwMDZaMDMxMTAvBgNV
BAMTKEFDNjUwMzc1Mjc3MThCNUI5MTZFQ0JBNkRCOTg1OTM5NzExNURGNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvFb05X4vuXuwoMkzHIewX4ZM
RhhuZLW1citPpuBqo/YUzO+ld4VhlpeBkFU1ajsHFBQJ3oF2NoLWW/FQQjXTJvwQ
YqwoiCBeMR5nv44Y7dSB+akLYEEq7DMTeXLL+KBF13EgzfNwIn4cDj1QVWRhd/LI
Ct5ZECe0Om/I/qiIvxbetGuFBLlmjazSE9s6PUb9vHwA2b12AF2szoq23nhdbb3Y
QOcUsq5TZpBHfbNYBFxNgsQBJDefhPshcJfgY07ax+pLRM095Pw3lXmWfHIdcyni
BB6899kf96oosVeWTcJmAiq9l4wWHfd4XoNVhyKDWUSbTzf8tjxGvlXYp52dAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUrGUDdSdxi1uRbsum25hZOXEV30wwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthNgw
DQYJKoZIhvcNAQELBQADggEBABHjOLS6G+PB9pdeHsfp+yGQZpgOcit70b/KNgxl
BQbVbjZeg1qATWz7l49SW2P1HEwef6V9WwXcSBxwKsNbzHC3BESfyGPUYsuMKsq+
VJ3hfqSgBXOvtPQDcoEdyRIsoo8FdiXwFcZE0MhdmSorAw+KVzo9v56MoaGsj3yi
KnAOu9x9DuHO7TjoWqUYBYemXTQKV7TYvfII225/f1jh7VKpVU49OhGlzYuDNp2q
L7+AFHS7tlsPd5fg6SC5sR01iK8gKDIgYatfL63iaf4/lU99DfnFEhAeUBtQdHTW
kNxDWo2drmnptc+U5X/mnVChr2zhpNWQaWE3l3bIWDgw37k=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:44 2025 by rpki-client