Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e2033333230.roa
File: 34352e3133322e3231372e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: VvgTeL5WQ9o3xgROcBOOKvan57BOgLXqcCGWRv2Oq/A=
Subject key identifier: 99:C5:60:8E:46:2E:64:1A:7D:CC:FC:E0:F4:FA:2D:7C:25:19:36:49
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 76E09986BE72DC16637F71A740ACC255BC3A7FB6
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e2033333230.roa
Signing time: Sat 23 Sep 2023 17:20:50 +0000
ROA not before: Sat 23 Sep 2023 17:15:50 +0000
ROA not after: Sat 21 Sep 2024 17:20:50 +0000
asID: 3320
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e0:99:86:be:72:dc:16:63:7f:71:a7:40:ac:c2:55:bc:3a:7f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 23 17:15:50 2023 GMT
Not After : Sep 21 17:20:50 2024 GMT
Subject: CN=99C5608E462E641A7DCCFCE0F4FA2D7C25193649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:fc:45:0d:e3:6f:d1:d8:98:55:96:9d:c9:
b3:fb:30:70:00:cd:ad:8a:0c:db:15:7c:22:b6:48:
f6:c8:29:ad:09:e9:bd:6d:42:77:2e:e5:67:a8:dc:
12:30:77:c7:50:77:78:50:cf:1e:fc:05:61:a0:cb:
e8:5a:7d:e5:0c:d0:52:55:9d:1e:c2:62:dd:6f:c4:
54:17:86:a7:30:53:61:3e:7c:4e:87:80:a4:9a:1e:
e3:76:78:9a:8b:e6:95:5c:c7:d8:f0:f6:2e:c4:70:
f5:5a:5b:00:41:1b:62:98:77:a1:13:6c:a2:4e:08:
f5:d1:86:70:cf:05:1b:0c:3b:db:90:bc:20:cb:d5:
79:2a:4c:34:c0:ea:a4:b1:7e:72:fb:df:ca:b5:97:
29:7b:2f:37:b4:c6:49:95:8f:51:e3:85:66:79:fb:
dd:37:48:da:b3:b2:7d:29:28:cb:9f:8c:26:da:7f:
5e:c5:bd:07:b3:43:d0:7d:c7:26:60:98:f7:93:66:
76:7e:37:a4:d0:d6:41:12:65:35:5e:51:ab:b6:90:
73:09:03:f0:1b:93:ea:ee:96:1f:40:a4:54:c4:40:
e0:78:a5:25:a3:49:14:81:ba:78:be:6c:97:fe:d8:
c9:fa:9b:30:32:d2:84:22:3b:bf:bf:27:b3:8d:0b:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C5:60:8E:46:2E:64:1A:7D:CC:FC:E0:F4:FA:2D:7C:25:19:36:49
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:61:e1:cf:f0:cd:33:db:b3:19:ef:a3:a2:51:69:ae:27:
11:65:37:85:ca:e8:ed:9c:9f:35:c7:03:5d:59:90:96:2b:68:
0d:07:26:74:32:98:ee:19:62:e6:11:9c:b3:57:e6:57:04:5e:
cc:65:85:88:bc:cb:17:d6:33:90:52:c4:22:90:b5:7a:28:4c:
cb:81:8d:16:49:a1:80:36:59:41:a1:57:df:8c:38:11:d2:2f:
5c:06:4e:3a:43:65:89:53:fd:df:0f:fc:b5:1f:cc:84:d9:3c:
58:e7:22:cd:5d:01:7e:99:39:f5:42:7f:6c:35:70:2f:31:d6:
a0:71:59:aa:c7:ab:9d:5c:6f:65:b1:de:c8:51:8d:bc:90:dc:
93:d3:5b:83:89:e9:f6:4a:56:0d:e8:69:50:b6:56:19:2b:ac:
2c:9a:7f:47:ed:dc:18:18:5c:16:03:32:bf:f9:ea:2c:53:29:
cd:05:58:5c:1b:c8:01:89:6a:b6:7b:c5:ce:5d:0a:74:e9:eb:
25:75:a7:51:9d:6b:e2:24:d2:dc:e3:1c:b4:f0:c1:c1:d1:52:
08:09:dd:8e:c5:4f:d2:cf:3e:c4:79:f9:5b:7f:9f:dc:a0:a0:
1e:e8:a9:33:9c:c0:74:fe:95:67:dd:e1:4f:29:c2:6a:b9:61:
69:ff:d0:66
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUduCZhr5y3BZjf3GnQKzCVbw6f7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA5MjMxNzE1NTBaFw0yNDA5MjExNzIwNTBaMDMxMTAvBgNV
BAMTKDk5QzU2MDhFNDYyRTY0MUE3RENDRkNFMEY0RkEyRDdDMjUxOTM2NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenfxFDeNv0diYVZadybP7MHAA
za2KDNsVfCK2SPbIKa0J6b1tQncu5Weo3BIwd8dQd3hQzx78BWGgy+hafeUM0FJV
nR7CYt1vxFQXhqcwU2E+fE6HgKSaHuN2eJqL5pVcx9jw9i7EcPVaWwBBG2KYd6ET
bKJOCPXRhnDPBRsMO9uQvCDL1XkqTDTA6qSxfnL738q1lyl7Lze0xkmVj1HjhWZ5
+903SNqzsn0pKMufjCbaf17FvQezQ9B9xyZgmPeTZnZ+N6TQ1kESZTVeUau2kHMJ
A/Abk+rulh9ApFTEQOB4pSWjSRSBuni+bJf+2Mn6mzAy0oQiO7+/J7ONC5erAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUmcVgjkYuZBp9zPzg9PotfCUZNkkwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMzMzIzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2E
2TANBgkqhkiG9w0BAQsFAAOCAQEAV9dh4c/wzTPbsxnvo6JRaa4nEWU3hcro7Zyf
NccDXVmQlitoDQcmdDKY7hli5hGcs1fmVwRezGWFiLzLF9YzkFLEIpC1eihMy4GN
FkmhgDZZQaFX34w4EdIvXAZOOkNliVP93w/8tR/MhNk8WOcizV0Bfpk59UJ/bDVw
LzHWoHFZqsernVxvZbHeyFGNvJDck9Nbg4np9kpWDehpULZWGSusLJp/R+3cGBhc
FgMyv/nqLFMpzQVYXBvIAYlqtnvFzl0KdOnrJXWnUZ1r4iTS3OMctPDBwdFSCAnd
jsVP0s8+xHn5W3+f3KCgHuipM5zAdP6VZ93hTynCarlhaf/QZg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:32 2025 by rpki-client