Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
File: 34352e3134302e33362e302f32332d3234203d3e203536393133.roa (raw, json)
Hash identifier: fOba1agUo8pnC4GPtuZ51uarqIM3RCxXW0JlbxPFmO0=
Subject key identifier: E4:6A:9D:A6:64:61:12:E4:B4:77:93:17:7C:28:5E:8A:B1:98:C3:2C
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 6730A94D35897C1F991F805DD736ADF8E59AAD3F
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
Signing time: Wed 05 Apr 2023 11:55:30 +0000
ROA not before: Wed 05 Apr 2023 11:50:30 +0000
ROA not after: Wed 03 Apr 2024 11:55:30 +0000
asID: 56913
IP address blocks: 45.140.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:30:a9:4d:35:89:7c:1f:99:1f:80:5d:d7:36:ad:f8:e5:9a:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:30 2023 GMT
Not After : Apr 3 11:55:30 2024 GMT
Subject: CN=E46A9DA6646112E4B47793177C285E8AB198C32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:25:f4:ff:ca:fc:0a:66:c4:3f:57:f0:ff:
44:ec:51:e4:51:80:a8:a2:bf:ee:b6:8e:16:de:3f:
50:14:af:77:8c:b2:6c:9e:e1:ae:6c:ba:47:ff:48:
b2:c2:dc:d8:5f:4f:19:77:0c:91:52:f4:a7:70:5c:
1e:7c:d5:ff:1f:cc:28:bd:76:a2:26:79:68:44:ed:
32:4b:67:06:df:ad:87:96:5c:1d:50:3c:56:22:e1:
6b:40:65:bb:b7:79:54:0f:e6:42:b9:fe:82:cd:b4:
04:29:29:9c:96:a8:84:0a:0c:73:6d:41:a3:da:f2:
f1:68:18:0a:79:f8:de:f3:05:6c:8f:19:b0:87:b0:
96:10:84:cb:2a:ac:62:b2:53:d7:a2:2c:74:ae:ef:
b3:fe:fd:b4:2d:c9:06:46:9c:6f:de:9a:94:7f:dd:
8f:78:3e:3d:5a:a7:37:86:7c:fe:39:f7:43:ae:0d:
bc:b2:23:53:cc:c1:38:41:3b:ea:b1:c2:77:c1:0e:
67:0e:ac:f6:84:21:3b:11:40:11:9b:f1:5b:d1:92:
eb:b5:5d:60:28:98:57:a6:c6:8f:ce:7b:f8:47:39:
5c:2e:00:b1:84:9c:69:42:3e:b2:f8:40:3f:e1:e6:
ec:fe:55:7d:21:2a:75:5b:8d:3c:8b:e9:72:57:96:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6A:9D:A6:64:61:12:E4:B4:77:93:17:7C:28:5E:8A:B1:98:C3:2C
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/23
Signature Algorithm: sha256WithRSAEncryption
01:5d:94:ef:ae:cb:af:34:84:a9:bd:b9:3c:46:31:68:1f:60:
88:91:d8:9f:b1:d6:6f:87:b3:ae:ce:19:8d:04:71:d6:45:e9:
a2:31:9e:4e:1c:5d:6a:4e:df:5a:fd:b6:4f:06:05:34:ef:d8:
20:a4:ca:ca:36:51:2e:25:41:fb:8e:0b:63:23:2f:12:b4:30:
1a:0a:c3:5c:a7:2b:2b:01:f4:bc:32:9c:ad:d7:60:8c:3e:61:
5e:60:43:61:4c:35:17:c3:e3:7c:be:3f:2d:96:b2:dd:a9:5d:
b8:34:1f:6e:4e:2b:72:96:69:01:a3:04:ec:50:53:27:7d:7c:
a9:59:44:e9:eb:82:ad:bd:c8:38:c4:6a:c0:18:4e:b6:58:03:
d1:49:5c:e2:b9:0a:98:f8:29:c2:7d:38:1e:f9:27:0b:e4:74:
5a:7c:eb:bf:1e:0b:31:8f:f1:09:68:8a:97:b0:7c:bd:25:27:
77:04:33:72:06:0c:d3:90:78:ba:5b:14:8e:75:0f:c1:29:52:
79:9b:b3:c4:5a:1f:20:08:55:02:ce:76:83:95:0f:9a:51:a4:
e5:3b:8c:a5:72:fe:db:a7:71:a0:bf:89:dd:4c:10:5b:49:1c:
4c:78:d7:6e:ee:16:a3:68:cc:54:e2:f4:ef:39:9a:b9:63:e3:
b6:da:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:02:01 2025 by rpki-client