Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e2033333230.roa
File: 34352e3134352e3234312e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: 0kWirCHyFrcYKrdUzmzBQPPkaUfyKw7n/pv4tjFb7cg=
Subject key identifier: DD:7B:13:A1:9C:5C:F0:6A:52:EE:FF:80:01:5E:78:3B:BC:D8:BF:3C
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 581C1A490A4F4018833E90D1B85F22FE06E7C55E
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e2033333230.roa
Signing time: Sat 23 Sep 2023 17:20:52 +0000
ROA not before: Sat 23 Sep 2023 17:15:52 +0000
ROA not after: Sat 21 Sep 2024 17:20:52 +0000
asID: 3320
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1c:1a:49:0a:4f:40:18:83:3e:90:d1:b8:5f:22:fe:06:e7:c5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 23 17:15:52 2023 GMT
Not After : Sep 21 17:20:52 2024 GMT
Subject: CN=DD7B13A19C5CF06A52EEFF80015E783BBCD8BF3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:c5:e7:ce:6e:71:ff:6d:a8:f6:bc:a8:36:
d9:42:78:19:33:53:47:2b:4d:05:18:93:0f:b2:ac:
41:44:2d:bc:a6:ae:5f:15:97:3a:4f:75:0e:9c:d9:
2a:2d:53:f9:4b:4f:ff:1f:82:ea:cf:ae:2e:6b:b4:
02:c1:9f:1b:2c:9b:84:e3:f8:81:45:50:fd:18:78:
99:e3:cc:ae:67:ab:66:41:73:8f:03:dd:a6:f7:cd:
14:e8:3c:2e:ce:5a:ba:83:8d:04:e2:63:8b:54:41:
cc:1f:bc:ba:87:b0:43:e6:34:79:d7:d0:58:ee:ac:
26:1f:94:37:8b:4b:88:5d:e4:b3:9b:32:2d:12:5f:
d7:d5:ad:1d:32:92:7c:ad:d8:da:98:57:3a:15:f8:
c0:62:55:78:4e:07:42:30:5f:6b:88:a4:1f:92:4a:
06:0a:cb:60:27:35:94:8e:96:90:a8:77:2b:9d:89:
dd:41:64:7f:86:cf:bd:d7:39:db:de:4d:e5:09:b8:
39:a9:7b:dc:43:ab:55:07:ce:99:8b:6d:76:50:12:
05:52:e0:5c:ba:ce:eb:25:53:63:d9:83:52:37:09:
45:2b:c7:84:81:ab:70:c2:bc:f9:e4:d5:66:d6:1b:
37:54:f1:e4:12:11:df:f9:f8:5e:08:e5:2e:06:a6:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:13:A1:9C:5C:F0:6A:52:EE:FF:80:01:5E:78:3B:BC:D8:BF:3C
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fc:55:b2:e4:bd:35:73:a8:b9:00:b7:83:50:11:39:9f:d0:
9a:d2:94:7c:8d:93:b9:dc:9a:a0:40:d4:e7:87:a2:42:7d:94:
06:f3:f4:cf:78:2e:26:c8:16:92:01:6e:76:08:e7:74:db:24:
67:cf:44:53:bf:53:42:4f:6e:04:73:1f:91:af:b0:20:64:5b:
8e:ec:53:63:db:1c:7e:98:bc:72:66:cc:ed:2d:f9:30:6f:81:
22:9b:14:d5:e4:c2:0a:37:1a:00:f8:89:72:b3:42:9e:78:c0:
a8:28:25:c6:9b:b5:45:68:a6:37:16:2f:61:fa:f1:4b:4a:25:
ef:5c:c2:2e:ca:0c:ff:81:58:e6:22:14:ac:88:67:9e:5f:bf:
21:17:aa:b8:62:7c:5e:02:07:6d:75:84:87:09:52:86:e1:98:
5b:23:18:77:2c:0e:16:a6:ff:da:2d:19:40:c7:1b:d4:82:e4:
5b:ca:3c:15:0f:e1:f8:cf:df:2e:90:19:8d:8e:16:cc:d3:7e:
f6:a1:25:30:26:97:1b:83:93:72:25:92:3f:46:58:06:c4:8a:
d4:de:d4:0a:6f:f7:55:22:3a:f6:5e:f0:ec:2a:22:b8:c6:ec:
22:6c:d0:ad:35:2f:33:a3:11:7b:17:04:61:79:74:b6:36:13:
89:c0:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:45 2025 by rpki-client