Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
File: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: m7w27Q9Qqf87+jgkccgCWD+R0gWaJQozck3xY/uLfOQ=
Subject key identifier: 4B:59:89:82:35:0A:4C:12:FE:42:45:C2:7A:6C:A6:32:9A:FB:F1:25
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 3F2F6B00E59437DBB474FB7F74F0CDD8D34592B6
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
Signing time: Wed 05 Apr 2023 11:55:32 +0000
ROA not before: Wed 05 Apr 2023 11:50:32 +0000
ROA not after: Wed 03 Apr 2024 11:55:32 +0000
asID: 56913
IP address blocks: 45.132.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2f:6b:00:e5:94:37:db:b4:74:fb:7f:74:f0:cd:d8:d3:45:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:32 2023 GMT
Not After : Apr 3 11:55:32 2024 GMT
Subject: CN=4B598982350A4C12FE4245C27A6CA6329AFBF125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:f1:59:a1:b6:e4:4d:3a:ba:7a:a3:7f:57:
89:60:3e:0c:7a:ce:c6:ac:4d:10:54:7a:e6:e1:f2:
b7:eb:74:94:99:4b:ec:06:81:c7:54:b1:c4:86:52:
0a:97:4a:54:1a:b7:53:eb:2d:8c:19:cf:36:10:c0:
cf:8f:5a:93:f8:bc:92:48:63:9c:67:a6:25:39:3b:
37:1c:c9:65:d7:54:c4:88:e1:0c:2c:8b:90:ed:0c:
4f:cf:a4:1a:99:1b:2c:e2:d3:5e:e2:7c:f0:57:2d:
8a:81:3a:ed:c7:f5:64:7c:9d:e5:db:83:df:0f:c8:
a8:1d:29:59:2d:e2:c9:09:b0:9f:f0:70:32:04:bf:
ba:fc:ba:40:8f:9f:0a:bf:02:87:2b:25:03:c9:42:
f4:e8:b9:0c:e3:66:ae:83:77:c6:31:bc:2f:c3:d2:
9e:e0:0c:20:19:5c:0f:f7:57:4b:55:5f:27:df:ab:
9e:c9:50:fe:82:ba:1b:62:a8:5a:bc:0b:5f:28:75:
3e:3c:ba:86:ec:99:d0:df:97:9a:ad:eb:25:9b:48:
58:2b:8c:83:6f:f2:ce:de:3a:03:84:b6:ff:8d:8c:
2b:c0:69:d6:80:e8:d4:4e:cb:15:cc:c2:b3:70:ce:
86:c8:a1:70:57:e4:49:fa:5e:9f:4e:32:85:78:2f:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:89:82:35:0A:4C:12:FE:42:45:C2:7A:6C:A6:32:9A:FB:F1:25
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6d:68:42:e3:d4:88:f2:20:15:91:ce:26:77:6d:54:4e:02:
f3:cb:73:79:a9:b3:80:dc:4c:af:f6:4f:96:87:dd:a9:87:0c:
0c:68:9e:36:0a:d1:26:03:02:2f:14:0c:98:95:22:9b:f5:69:
40:50:0a:70:6c:ca:2a:6f:6d:9a:78:e9:01:b1:be:55:cd:61:
4c:13:48:2e:e4:e0:fa:34:29:d5:b2:de:ba:46:6e:11:c7:a5:
99:a2:a8:c9:59:80:54:d1:36:24:83:bf:dd:74:67:86:0c:4e:
91:5d:a6:88:54:63:30:0f:e9:3f:a3:74:09:03:2d:25:ef:24:
b7:b5:8a:c4:2e:3c:dc:21:3f:ea:3f:63:4b:85:1c:32:52:f7:
70:dc:39:8d:66:78:f0:f8:c4:70:28:8b:b5:7e:eb:bb:0b:8c:
77:2d:4c:0d:10:f5:de:37:a5:d2:84:32:72:ce:02:0e:e9:71:
22:46:14:e7:22:06:76:46:0e:1d:e8:92:99:29:52:ce:29:85:
ee:48:c3:3f:81:02:cc:76:cd:62:b4:c2:17:78:dc:0b:82:df:
a3:4f:e8:c4:26:d2:2c:66:da:61:f8:b6:68:40:73:3d:98:12:
a0:54:c8:9c:c6:35:6d:43:3c:e2:10:00:9a:16:01:ec:0c:45:
fe:a7:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:35 2025 by rpki-client