Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e2039303837.roa
File: 34352e3133322e3231372e302f32342d3234203d3e2039303837.roa (raw, json)
Hash identifier: s8ixp2ut5VCpiaKpwgFnUWLh5Bl17yscEN0WSX6x8DA=
Subject key identifier: 45:5C:97:91:8F:77:99:AB:E6:45:94:BE:68:4D:22:E4:91:EE:F2:2B
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 712F9612F476E5EF4B2BB1DED81C0F42A2F64E44
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e2039303837.roa
Signing time: Sat 23 Sep 2023 17:20:50 +0000
ROA not before: Sat 23 Sep 2023 17:15:50 +0000
ROA not after: Sat 21 Sep 2024 17:20:50 +0000
asID: 9087
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:2f:96:12:f4:76:e5:ef:4b:2b:b1:de:d8:1c:0f:42:a2:f6:4e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 23 17:15:50 2023 GMT
Not After : Sep 21 17:20:50 2024 GMT
Subject: CN=455C97918F7799ABE64594BE684D22E491EEF22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:b0:36:d4:39:a7:96:f4:99:a8:9d:b3:9d:
40:1e:30:32:63:8f:1d:36:4f:10:ac:15:2d:40:2b:
6f:e2:1b:05:88:d7:2b:b1:4c:11:f0:af:45:0c:39:
08:e9:af:e4:65:68:93:b3:6d:55:62:da:85:de:92:
24:68:4a:1a:44:2b:94:8d:cc:34:22:77:98:e6:7e:
83:26:50:bb:8d:da:ca:7a:f3:45:b7:1f:99:1e:b3:
4b:fc:63:f6:90:3f:79:0c:56:ac:a0:77:a5:cc:a7:
0d:8d:a5:f9:c7:03:62:a2:69:e0:3f:8c:54:20:b1:
15:45:01:88:b1:6b:c8:3d:a7:96:ac:97:9f:1b:a4:
7c:8a:69:db:b4:6e:af:2d:91:d6:d1:2c:ba:3c:c8:
33:be:25:20:2b:04:48:31:9c:d6:e8:f9:ce:29:e9:
84:df:ed:3a:63:b9:d8:28:55:ef:59:19:1e:78:04:
38:df:78:77:98:69:16:22:b1:b3:38:be:3e:28:e1:
ec:d0:a4:52:7f:40:a9:bc:9d:ec:17:20:dd:c2:f3:
ba:d9:b5:dd:3c:40:ed:59:52:3c:2a:05:e5:5b:e5:
89:69:08:a3:43:bf:41:f3:13:1c:42:75:31:00:b0:
3d:54:ac:c3:50:d1:d4:03:fb:11:46:4c:42:46:9b:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5C:97:91:8F:77:99:AB:E6:45:94:BE:68:4D:22:E4:91:EE:F2:2B
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d8:ac:88:f2:7d:0c:3b:52:1c:09:0a:8c:0d:47:16:5f:36:
3d:51:63:18:35:a2:92:5a:12:d2:45:1e:3c:1c:32:ac:49:ad:
1c:c6:61:cc:d2:cb:5b:25:ee:0b:f7:cc:20:79:2d:77:73:4f:
78:43:ec:f2:63:13:35:df:2b:cd:94:0b:81:23:58:17:06:ea:
8d:a4:72:8c:97:78:0d:99:23:28:e2:b3:f9:9d:ab:da:5e:40:
7a:18:44:d1:dd:44:64:0c:70:9b:92:7f:5c:6b:f7:d8:f6:1c:
d0:27:f2:74:0e:cc:21:bc:40:89:e6:48:c8:de:f1:fb:a7:b6:
13:7d:b8:e3:04:7f:02:fc:df:25:8e:af:3c:ba:e3:d7:f0:d5:
35:9b:80:53:95:4d:7d:6a:40:2f:18:c7:c4:43:56:64:57:f3:
1f:4b:2f:4c:6f:1f:bf:6e:93:f2:35:63:eb:8b:81:11:70:d9:
29:15:8e:1d:d9:20:2c:43:85:09:42:93:1c:0c:89:62:45:63:
e4:08:41:11:f8:5d:9d:68:d9:cc:6e:7b:45:31:d7:5f:2e:36:
0b:76:c5:aa:21:c1:58:ea:4b:d6:39:dd:07:c3:be:77:31:7f:
d6:6a:ee:bb:f0:e9:9e:d3:4d:00:6f:95:df:90:a0:c1:c0:c6:
c0:fd:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:06:44 2023 by rpki-client on console-fra.rpki-client.org