Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e203531383437.roa
File: 34352e3134352e3234302e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier: X9RHAL3Xiw+8NCves4kxYM7wjqGEH7bmPe07s2/P5cE=
Subject key identifier: 0B:36:42:F3:92:2C:29:3D:F4:6D:AC:BE:EE:14:4B:FA:E7:4B:25:D1
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 610DBE6EE1AD2B960B658A4B9EA5374CFE43C7FF
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e203531383437.roa
Signing time: Mon 03 Jul 2023 14:11:10 +0000
ROA not before: Mon 03 Jul 2023 14:06:10 +0000
ROA not after: Mon 01 Jul 2024 14:11:10 +0000
asID: 51847
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0d:be:6e:e1:ad:2b:96:0b:65:8a:4b:9e:a5:37:4c:fe:43:c7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 3 14:06:10 2023 GMT
Not After : Jul 1 14:11:10 2024 GMT
Subject: CN=0B3642F3922C293DF46DACBEEE144BFAE74B25D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:6a:eb:33:4b:6c:b3:61:98:8b:50:df:43:
07:d9:d8:bf:ad:16:c1:36:7c:b1:c7:77:df:ce:06:
20:6a:34:2d:06:2c:17:2c:d0:c9:4b:ac:a5:c9:43:
46:27:bd:09:df:bf:4d:57:58:69:68:8b:03:40:56:
c2:2e:f8:d5:d2:90:7d:cd:0a:6a:1f:5f:36:7e:33:
dd:4d:4c:ce:de:d1:27:21:6f:6d:a0:f3:8c:71:50:
f3:15:37:88:da:19:a5:d6:f4:4a:da:7d:47:db:92:
d9:d5:92:dc:01:48:61:b8:1d:b1:16:40:80:d5:44:
16:5e:f8:c9:3d:a9:cd:ed:30:07:e0:25:fd:4d:54:
16:1a:21:f4:06:72:f3:87:49:8d:ce:4d:58:dc:23:
d4:a1:8c:0b:4a:ab:82:41:a6:8a:39:35:ff:4c:f6:
8f:71:74:ff:b6:e1:48:72:97:1a:1a:03:d2:33:ab:
da:34:96:39:40:d6:ee:73:9d:c9:0c:13:92:02:63:
51:41:06:e3:f6:1a:e8:ff:5d:40:ab:6c:76:1f:ac:
98:d9:39:d8:c6:78:fa:6d:7d:ed:0d:4e:d2:d4:71:
48:21:12:3c:62:c1:1b:44:13:ee:66:e3:a5:b0:7a:
b7:fb:ac:35:78:50:8a:42:da:10:66:c1:6f:8e:6c:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:42:F3:92:2C:29:3D:F4:6D:AC:BE:EE:14:4B:FA:E7:4B:25:D1
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:26:b3:d4:92:c2:a9:3f:cb:79:2f:d7:e3:c2:95:fb:39:2c:
1f:58:29:5a:81:06:d3:95:e1:42:f7:b6:b5:2f:9e:5f:28:ea:
a6:e1:03:c0:c5:14:df:89:29:cf:c8:57:e1:6c:49:1c:d8:db:
97:1f:f1:9c:73:0e:a1:59:bf:ce:85:ee:08:ef:20:47:41:cd:
c1:9e:e6:38:cd:56:0e:5c:79:1a:c9:67:70:20:a6:df:87:09:
87:26:c0:82:84:84:a0:29:6c:9c:04:15:3a:80:3b:a5:26:68:
15:07:d7:e9:b2:3f:21:7a:e9:ad:17:81:6c:d2:f5:7e:cb:4a:
8a:5e:5c:33:cf:80:5f:8d:d9:f1:de:da:94:72:98:63:0a:20:
1d:e0:a7:2b:04:90:d4:d1:f2:e3:c4:b7:45:72:5a:a2:14:ee:
82:09:a2:2b:89:bb:d6:dd:91:6b:ee:31:c6:c2:76:78:82:de:
2e:fc:80:30:90:10:97:de:cf:ab:29:67:7b:65:74:bb:34:82:
3a:db:56:50:49:9a:9f:ec:4a:de:57:a5:3b:64:90:84:0a:0b:
0a:14:63:e7:16:52:df:d8:e5:b2:4d:dd:75:76:c4:fd:fb:87:
17:6d:63:17:46:ef:b7:d4:8d:11:a1:e3:1e:06:69:e7:db:9c:
c8:6c:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:06:44 2023 by rpki-client on console-fra.rpki-client.org