Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qeBVwfYhwkZ0B9u0jV6UwEHzikAsTJEfvvCGfsxV2Ww=
Subject key identifier: 05:FB:61:04:EA:BA:39:0E:FB:15:BD:90:7D:AE:C2:42:D5:A6:3E:86
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 48AA9BE4EE2DCFCF82B47A81E292A588FF8A49E4
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
Signing time: Mon 10 Jul 2023 11:00:15 +0000
ROA not before: Mon 10 Jul 2023 10:55:15 +0000
ROA not after: Mon 08 Jul 2024 11:00:15 +0000
asID: 834
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:aa:9b:e4:ee:2d:cf:cf:82:b4:7a:81:e2:92:a5:88:ff:8a:49:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 10 10:55:15 2023 GMT
Not After : Jul 8 11:00:15 2024 GMT
Subject: CN=05FB6104EABA390EFB15BD907DAEC242D5A63E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:37:9c:68:bd:83:c7:7a:01:dd:49:32:b1:
b1:fe:3f:19:b3:a7:c9:d0:11:ed:2b:00:93:fa:9a:
1f:b2:cb:fe:48:96:94:92:6c:8d:c1:81:9d:14:c0:
45:7b:8d:bf:55:9e:99:a4:64:df:67:1d:b5:48:72:
eb:4f:99:eb:76:e1:87:2a:31:e7:2f:b2:08:37:18:
87:52:ce:00:da:5f:be:da:fa:06:f9:fc:39:33:e5:
83:14:62:c9:93:59:46:4a:8a:99:14:b1:c5:0c:47:
5a:99:b8:c1:82:bb:22:0e:16:b2:45:bd:0f:dc:6d:
64:80:26:4a:e6:69:28:2e:5d:ab:9b:6b:bf:c7:bf:
b7:d4:db:09:df:77:2d:8f:4f:0e:df:b0:c0:88:55:
27:41:ca:b5:b4:85:b6:bc:8b:f6:7d:aa:51:dc:42:
07:af:f1:d7:b3:4a:48:a4:da:76:75:07:bb:ca:c9:
d8:e3:9d:d8:f9:44:d7:88:e2:28:6e:d1:2f:4b:26:
ba:80:ed:6b:4b:c0:f0:ce:3a:ee:d7:40:c7:39:0d:
01:28:f6:64:28:ac:4f:5f:93:d1:5e:dd:70:d6:28:
03:09:cd:dc:ec:df:8e:39:1a:8a:0f:56:e3:84:32:
e9:92:87:a8:f9:74:0c:b5:ef:9f:54:4b:41:e0:c2:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:61:04:EA:BA:39:0E:FB:15:BD:90:7D:AE:C2:42:D5:A6:3E:86
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:bb:52:23:44:3d:df:20:e0:27:be:e0:0f:ad:7c:41:8a:58:
bc:53:16:0a:c1:7a:aa:07:c3:35:f6:46:dc:d9:62:e7:cd:ec:
2d:19:b1:01:d3:dc:f9:e3:f7:c8:48:69:01:3b:95:35:29:6d:
81:da:99:5a:25:06:b4:cb:c6:0b:8f:71:ef:0e:2b:5e:b6:b7:
13:61:f0:e3:6c:0a:60:3b:54:78:31:04:89:d0:48:33:5a:63:
29:da:a8:04:89:66:7f:8f:25:39:88:12:eb:a7:08:f0:c4:7a:
24:a4:28:12:9d:83:2d:a5:82:22:08:14:c2:0f:67:d0:bd:29:
f7:6b:95:ec:d3:04:8d:f2:0d:a7:33:b1:67:7e:1b:fc:b3:11:
4f:d8:a6:86:76:73:f4:eb:56:23:67:e8:15:dd:79:a7:fa:61:
f9:20:26:5c:47:90:6b:54:f6:28:81:da:dd:08:9b:ae:5a:28:
d6:ee:a3:57:30:03:d0:a8:1e:6b:20:ba:e9:98:8c:af:4c:ef:
28:71:f7:1d:7b:83:91:7c:2b:fd:24:de:33:ee:1c:23:f6:80:
d7:83:90:08:6f:8e:50:02:d6:00:27:1f:85:4c:90:42:75:19:
fa:b1:86:9c:62:1c:2d:8f:59:a4:d2:f9:9c:52:8c:b5:d9:38:
39:aa:f8:b5
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUSKqb5O4tz8+CtHqB4pKliP+KSeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA3MTAxMDU1MTVaFw0yNDA3MDgxMTAwMTVaMDMxMTAvBgNV
BAMTKDA1RkI2MTA0RUFCQTM5MEVGQjE1QkQ5MDdEQUVDMjQyRDVBNjNFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiDecaL2Dx3oB3UkysbH+Pxmz
p8nQEe0rAJP6mh+yy/5IlpSSbI3BgZ0UwEV7jb9VnpmkZN9nHbVIcutPmet24Ycq
Mecvsgg3GIdSzgDaX77a+gb5/Dkz5YMUYsmTWUZKipkUscUMR1qZuMGCuyIOFrJF
vQ/cbWSAJkrmaSguXauba7/Hv7fU2wnfdy2PTw7fsMCIVSdByrW0hba8i/Z9qlHc
Qgev8dezSkik2nZ1B7vKydjjndj5RNeI4ihu0S9LJrqA7WtLwPDOOu7XQMc5DQEo
9mQorE9fk9Fe3XDWKAMJzdzs3445GooPVuOEMumSh6j5dAy1759US0HgwigXAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUBfthBOq6OQ77Fb2Qfa7CQtWmPoYwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthNow
DQYJKoZIhvcNAQELBQADggEBAKa7UiNEPd8g4Ce+4A+tfEGKWLxTFgrBeqoHwzX2
RtzZYufN7C0ZsQHT3Pnj98hIaQE7lTUpbYHamVolBrTLxguPce8OK162txNh8ONs
CmA7VHgxBInQSDNaYynaqASJZn+PJTmIEuunCPDEeiSkKBKdgy2lgiIIFMIPZ9C9
KfdrlezTBI3yDaczsWd+G/yzEU/YpoZ2c/TrViNn6BXdeaf6YfkgJlxHkGtU9iiB
2t0Im65aKNbuo1cwA9CoHmsguumYjK9M7yhx9x17g5F8K/0k3jPuHCP2gNeDkAhv
jlAC1gAnH4VMkEJ1GfqxhpxiHC2PWaTS+ZxSjLXZODmq+LU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:31 2025 by rpki-client