Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33392e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HWFxpU0vw4DHzzv6w86vODcMOwN4VFRYIUZ22WlBpLI=
Subject key identifier: 98:18:64:29:30:E9:1C:84:72:DB:0D:0E:33:14:CE:19:8E:3A:28:63
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 6B57ED366876DB53E5A3189BD1639DE08F1D0BE4
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33392e302f32342d3234203d3e20383334.roa
Signing time: Tue 08 Aug 2023 09:30:06 +0000
ROA not before: Tue 08 Aug 2023 09:25:06 +0000
ROA not after: Tue 06 Aug 2024 09:30:06 +0000
asID: 834
IP address blocks: 45.140.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:57:ed:36:68:76:db:53:e5:a3:18:9b:d1:63:9d:e0:8f:1d:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 8 09:25:06 2023 GMT
Not After : Aug 6 09:30:06 2024 GMT
Subject: CN=9818642930E91C8472DB0D0E3314CE198E3A2863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:de:fd:c6:d4:c4:c8:c6:29:7c:89:55:1c:
87:a8:92:cf:b7:b8:60:36:ab:8e:77:88:95:0b:5b:
b0:a2:17:ac:57:e3:e8:19:d5:0e:1c:2b:8b:92:09:
10:27:41:d6:10:21:18:d2:d8:35:ab:1e:f3:58:69:
e3:16:4f:df:81:71:9a:dc:04:89:f7:f3:4e:eb:01:
41:3f:33:26:28:9d:9f:12:44:f7:8d:e1:f9:a2:0d:
37:c3:f6:ed:6a:55:a1:cc:58:52:11:ad:1e:0c:29:
33:97:43:af:e6:eb:28:b6:2f:0d:3a:cf:7e:54:c7:
17:20:31:c2:11:cf:78:51:f1:ca:08:6b:5b:29:10:
e7:01:b1:d8:2a:e5:88:18:05:44:e1:52:16:22:32:
26:6f:b4:6e:8f:fe:d5:59:96:98:74:f7:03:03:e5:
f5:06:9f:4e:91:06:39:49:6c:8b:fe:44:b2:48:18:
1f:55:63:b9:7d:8e:c1:1e:3a:cf:56:bc:5d:18:34:
5a:db:73:41:fe:27:33:77:6f:eb:35:c1:52:96:9d:
d9:23:3e:03:84:3a:0e:40:05:d7:d7:77:ac:42:d6:
75:fc:e1:77:4d:6e:89:c4:12:4a:98:ee:25:35:ab:
86:b2:b7:55:2a:d0:6c:7f:da:3a:57:61:49:99:c0:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:64:29:30:E9:1C:84:72:DB:0D:0E:33:14:CE:19:8E:3A:28:63
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.39.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c9:7a:8b:a5:3a:17:21:ef:29:ed:e5:73:d9:02:1e:b6:a4:
6a:f0:f4:2c:28:36:af:25:e6:49:cb:7a:bb:05:34:27:4e:c8:
2b:40:c0:58:ce:c3:ef:f4:37:8d:3a:f9:cd:1f:15:46:de:a5:
5b:cc:72:e2:04:88:f3:07:8b:e0:0e:6e:86:99:13:d2:8d:76:
60:7b:73:5a:b5:df:09:27:10:16:a8:2e:28:45:c1:17:b4:fd:
b4:59:e7:ad:1d:d7:84:5a:6d:f4:98:e0:d9:6c:bf:97:d0:59:
03:8f:61:35:bc:41:ae:3b:e2:76:e8:aa:a9:e8:26:3c:d6:23:
79:27:f6:a0:d1:20:5e:65:04:1c:fb:85:b1:69:61:a1:9f:03:
13:d8:a0:11:95:38:f1:53:7a:9f:d2:ea:f7:6d:bf:d2:65:15:
2b:63:6b:77:fb:a0:e9:96:48:b8:82:73:44:61:20:0b:5c:c6:
ba:8b:d6:3b:64:08:2a:f8:7e:77:c3:df:08:d4:68:32:ae:b2:
4a:21:f4:b2:13:b9:1e:84:b2:7e:9d:75:63:eb:4b:ba:a6:25:
5d:aa:b7:5c:a2:95:67:14:12:ad:50:50:32:7c:53:bc:b3:05:
a9:05:94:0b:c4:67:d6:d1:44:2a:c0:a3:36:07:e1:d0:c7:9f:
2a:1c:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:42 2025 by rpki-client