Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e203536393133.roa
File: 34352e3133322e3231372e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: JnjF3iXAInLJMo0ujN8WPgB3bE49QpgK6sQJ+7WTYLQ=
Subject key identifier: DF:77:44:C1:1C:55:D8:1C:95:A7:E0:92:DF:39:EC:81:8D:C5:38:82
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 7979B179A15D719C80B82C1C80C0A8A1668A180E
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e203536393133.roa
Signing time: Wed 05 Apr 2023 11:55:32 +0000
ROA not before: Wed 05 Apr 2023 11:50:32 +0000
ROA not after: Wed 03 Apr 2024 11:55:32 +0000
asID: 56913
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:79:b1:79:a1:5d:71:9c:80:b8:2c:1c:80:c0:a8:a1:66:8a:18:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:32 2023 GMT
Not After : Apr 3 11:55:32 2024 GMT
Subject: CN=DF7744C11C55D81C95A7E092DF39EC818DC53882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:14:5f:8d:fc:24:43:9a:12:e2:f2:ec:c4:
b1:d1:37:21:7c:7a:dc:b4:2f:62:61:e9:2c:4a:dc:
1d:5b:b2:8f:ce:5a:3a:05:1a:a5:a8:f6:25:11:02:
29:8d:24:5c:a5:da:b9:a8:fb:b3:ac:88:2c:bf:6c:
0c:97:8d:80:50:ff:e1:1b:23:c1:a5:eb:52:31:d4:
ad:d0:91:67:b3:ce:af:ba:99:1d:21:c0:3c:4c:81:
22:5d:6e:f2:48:b2:28:0e:b0:4c:76:93:bf:64:5d:
74:81:d6:80:73:2f:bf:84:ff:67:ee:c6:c1:7d:69:
c2:03:77:7d:1f:9f:a7:24:d5:81:8f:49:ca:fc:fa:
a6:b8:ac:9d:25:02:13:06:56:56:78:82:51:67:9b:
a8:1c:92:5e:8c:a8:0e:97:af:83:37:37:3b:5b:c3:
e7:74:0c:87:d0:12:a9:30:e4:80:97:54:47:38:35:
89:69:30:45:45:cb:fe:77:ef:1e:e0:ca:a8:07:da:
4f:7c:a6:a8:9a:d3:2b:e9:d5:8e:47:3c:a5:13:92:
a4:51:6a:d7:e4:c2:12:6d:72:7a:fe:f1:b4:06:24:
b7:55:ae:9f:76:5f:33:3e:a4:29:65:60:69:80:26:
17:19:ba:85:aa:67:e2:b0:dc:d8:49:52:5c:e4:5c:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:44:C1:1C:55:D8:1C:95:A7:E0:92:DF:39:EC:81:8D:C5:38:82
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:84:d1:3d:62:75:31:1e:4f:21:e0:b7:1a:67:d0:b9:47:42:
64:0e:dc:8f:95:d4:15:66:57:69:d1:57:0a:02:a1:77:59:7b:
a2:bd:0a:b3:70:75:d4:59:e3:7b:07:9e:51:d7:fe:11:be:b7:
fd:79:2d:19:19:cf:a8:46:85:d6:f1:cf:dd:2e:ba:38:95:83:
d2:f6:0a:2b:09:5f:b2:63:0f:21:f3:6d:0b:0c:f0:a1:f2:5a:
04:5b:ff:45:3b:89:c0:d4:d8:a4:ab:6d:e5:11:90:c2:48:8d:
46:7d:84:eb:cb:eb:89:a0:72:f5:77:9b:54:53:0d:73:05:f3:
33:06:d4:99:72:93:ce:f3:28:51:6c:0e:45:58:61:3e:d1:fd:
ae:e9:c9:a9:40:25:f4:68:71:a6:a5:b3:6f:c7:c6:57:bf:83:
a7:98:3f:df:ca:b5:2a:53:72:e7:1c:06:8f:d3:6a:2a:32:9e:
03:a3:4b:e5:b0:76:9c:0c:25:57:5a:ff:df:18:37:36:04:16:
2a:f2:28:68:33:28:d3:f5:97:88:e9:b9:ed:eb:b6:25:81:4e:
e5:27:a0:e0:91:b2:f1:e2:ae:1f:64:2a:32:e2:5c:c6:2e:0b:
2f:2c:1b:02:95:9b:97:31:08:62:33:2a:f8:92:4d:4e:3e:a3:
f5:72:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:50 2025 by rpki-client