Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33392e302f32342d3234203d3e20343030383636.roa
File: 34352e3134302e33392e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: 3uhVVHAzEkHvgozZa3a6HyQvCgL4dJWJU1xBt9vw6FM=
Subject key identifier: 00:15:9A:4A:75:BF:F8:B9:98:8D:3F:64:C6:84:E4:77:15:F5:90:87
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 03E9BC3C297AF382AE74A9F373DE5682C96C6DB1
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33392e302f32342d3234203d3e20343030383636.roa
Signing time: Wed 20 Sep 2023 10:38:12 +0000
ROA not before: Wed 20 Sep 2023 10:33:12 +0000
ROA not after: Wed 18 Sep 2024 10:38:12 +0000
asID: 400866
IP address blocks: 45.140.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e9:bc:3c:29:7a:f3:82:ae:74:a9:f3:73:de:56:82:c9:6c:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 20 10:33:12 2023 GMT
Not After : Sep 18 10:38:12 2024 GMT
Subject: CN=00159A4A75BFF8B9988D3F64C684E47715F59087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d0:0e:b4:cd:c8:28:ee:90:e3:63:78:37:e5:
34:c1:d4:2f:61:cb:75:36:54:a5:f9:09:cb:98:9c:
63:d3:b3:05:3c:85:dc:24:35:b4:29:f2:12:49:46:
c1:89:cd:10:42:5b:7f:4d:d0:bd:2c:d2:eb:87:77:
4e:04:c2:bf:82:76:74:23:2e:e8:4e:4f:39:7b:5e:
96:95:e3:46:3b:ca:1d:a9:f6:d4:cd:e6:62:77:77:
75:c6:7b:54:c8:a1:c7:b0:57:bf:09:6c:c6:c7:8c:
18:79:c9:55:4e:34:39:13:03:c9:4a:58:a8:56:59:
71:98:0d:25:86:ee:a6:49:b1:59:99:87:3c:5e:ae:
c3:b4:5a:3d:41:23:66:0c:4c:be:ec:76:a6:f1:10:
d1:d9:82:91:2f:ea:17:e6:93:86:55:10:40:53:3c:
98:71:50:47:b0:ab:b0:2e:8e:ca:c7:91:86:93:30:
4e:38:ce:6a:0b:80:71:1d:4b:4a:b3:86:6b:04:31:
21:18:21:fe:24:7e:37:0c:fd:b6:43:e1:3c:eb:3d:
b1:2d:97:9e:f4:4d:fb:1e:80:09:43:52:75:c8:b2:
12:db:4a:1a:f7:4c:47:c3:4a:a9:d8:bd:a2:fe:1d:
d6:e5:46:00:96:9c:68:4d:7b:3c:27:57:1b:13:9b:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:9A:4A:75:BF:F8:B9:98:8D:3F:64:C6:84:E4:77:15:F5:90:87
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33392e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.39.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f3:08:05:5a:58:ab:cc:ac:bc:63:4b:69:19:07:d3:e5:d1:
d5:09:34:c9:74:4b:62:cc:5f:f7:7c:75:5e:de:0e:f5:63:39:
e5:e6:fd:68:9a:1f:96:9b:0a:8d:77:a5:f2:80:fe:7a:94:f9:
81:43:cc:92:37:8d:c9:95:07:99:f1:f7:11:e2:49:f4:27:1e:
ff:ad:c6:75:b1:e9:34:e7:07:3a:20:ec:89:4b:06:92:3c:b7:
1a:24:c2:ca:51:92:ea:e6:d9:57:cf:06:84:b6:4e:75:e0:a0:
e3:c8:53:41:7a:09:9f:b2:ee:dc:3c:2b:da:a3:63:4b:73:1f:
a1:8e:41:d3:d2:57:03:22:fa:74:dc:9f:64:38:06:f3:27:04:
18:a2:1d:b9:0b:ae:20:6c:ed:e8:5d:84:96:75:c2:29:87:db:
67:fa:54:17:52:81:c2:94:81:54:78:8a:06:6c:61:0e:94:cc:
10:6b:0e:8d:92:17:6e:24:31:71:df:bc:8a:3e:83:c6:7f:32:
06:5e:36:a1:10:6a:9c:5a:90:a3:35:9b:df:da:2d:98:6c:12:
a9:1c:aa:b8:53:ed:f5:a0:67:77:7a:82:57:23:65:1e:64:ed:
f3:6c:15:81:03:1a:69:9a:a9:56:3a:72:ae:07:34:8a:f9:71:
c7:78:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:44 2025 by rpki-client