Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: ydf02qIuaRFSEA4FLxxyfEXBuOQDYdA5wxhlHfAjuDw=
Subject key identifier: 82:7B:4A:ED:E2:02:87:65:32:DE:E6:9E:23:3A:2E:6A:99:32:E1:4D
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2F7D8A223033F36A6418D1A5368DEB2EFB076048
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa
Signing time: Wed 20 Sep 2023 10:38:13 +0000
ROA not before: Wed 20 Sep 2023 10:33:13 +0000
ROA not after: Wed 18 Sep 2024 10:38:13 +0000
asID: 400866
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7d:8a:22:30:33:f3:6a:64:18:d1:a5:36:8d:eb:2e:fb:07:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 20 10:33:13 2023 GMT
Not After : Sep 18 10:38:13 2024 GMT
Subject: CN=827B4AEDE202876532DEE69E233A2E6A9932E14D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:3e:e6:c2:42:e5:a9:9e:78:16:6b:f1:bc:
0b:db:ea:81:83:fe:18:b3:dc:26:33:41:4a:fb:01:
98:8a:48:8f:24:17:76:07:3d:cc:cc:a2:1c:ef:74:
d0:d9:7e:76:d8:58:81:71:4e:cf:a2:b1:b5:ee:6c:
08:86:75:67:60:07:8c:0b:1c:51:62:52:ec:8e:00:
74:ab:de:ac:b6:c9:c9:7d:4c:b9:14:91:b2:24:6a:
27:63:f3:cd:12:66:d0:e3:b8:07:e5:fb:df:4c:40:
f9:16:ca:16:e0:a5:f9:ec:ee:3b:e5:12:37:19:78:
b7:a9:ea:b8:b3:59:34:2e:7e:8f:ed:99:e4:ab:32:
04:87:77:20:f1:6b:d7:44:2e:ca:5e:73:03:ee:ea:
57:cb:ba:06:92:ec:e0:17:a8:63:a9:20:55:39:d3:
ca:47:13:02:44:db:f7:17:57:49:9a:dc:59:35:20:
c7:31:eb:a8:d9:ee:91:f3:07:ee:40:f8:71:4b:5b:
ce:c5:1a:59:23:63:0e:b7:47:23:d0:83:ef:6a:b7:
88:d1:ef:07:7b:57:ab:5f:5e:97:6c:e2:c7:b2:18:
a2:26:a6:27:c6:fc:88:30:74:ff:9b:57:0b:28:ce:
13:93:f5:1a:72:db:1e:70:6f:52:96:04:81:e7:8c:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7B:4A:ED:E2:02:87:65:32:DE:E6:9E:23:3A:2E:6A:99:32:E1:4D
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7e:1c:3f:9a:e5:30:b6:df:8b:87:07:85:f8:db:97:2f:fb:
aa:a0:fd:49:d8:d2:b7:91:a1:f6:4f:0c:bf:7f:4f:35:da:4a:
c6:63:de:f3:3e:a7:33:64:c6:86:45:fc:46:c8:2e:ed:fd:1a:
bc:a0:15:fb:c6:b6:44:86:e8:2b:3e:5f:c9:04:30:6b:45:95:
7c:5d:90:81:9f:25:38:3b:4c:e9:19:80:72:0c:4d:1f:7a:da:
e2:bc:30:28:7b:a5:8b:49:dc:a5:71:01:43:1d:dd:fb:7d:1e:
33:72:03:80:fe:db:5b:f7:70:2f:a1:18:77:0c:74:ef:2d:49:
83:18:43:60:2a:26:e0:6e:25:88:e0:20:9f:c4:eb:fe:0b:ac:
c0:31:39:7c:89:44:69:ca:8c:f6:9d:3b:91:ae:79:4f:a5:50:
d6:5b:95:79:c6:94:71:c2:b6:af:41:a4:85:75:c3:f4:3c:2a:
7d:c4:1e:3c:a7:b7:cc:36:bd:db:8b:56:ca:ff:9d:95:f3:06:
b8:f2:7e:87:75:4d:cf:69:5d:15:3e:4d:fb:c2:5b:8e:86:fc:
5e:b1:72:f0:8f:96:c8:dc:1b:e1:a7:71:6d:8c:cf:46:b5:f4:
ed:56:a3:52:a5:3d:d6:e4:a4:6d:eb:a3:d7:d0:1d:d0:da:67:
04:1a:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:47 2025 by rpki-client