Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e203536393133.roa
File: 34352e3134352e3234312e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: JAGUyk6zaint0dTP53MDRvGWOI3XTIHo9pmH06bSdGY=
Subject key identifier: BF:66:E1:E2:88:E7:99:10:00:7E:17:16:CA:3E:8E:03:08:29:AB:48
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 687E3768F3A92BA658A10241BE7DC7569E8211D6
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e203536393133.roa
Signing time: Wed 05 Apr 2023 11:55:30 +0000
ROA not before: Wed 05 Apr 2023 11:50:30 +0000
ROA not after: Wed 03 Apr 2024 11:55:30 +0000
asID: 56913
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7e:37:68:f3:a9:2b:a6:58:a1:02:41:be:7d:c7:56:9e:82:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:30 2023 GMT
Not After : Apr 3 11:55:30 2024 GMT
Subject: CN=BF66E1E288E79910007E1716CA3E8E030829AB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:43:c2:f2:4f:0f:e6:5c:2d:d0:a7:99:f3:
d4:bd:c4:4e:7a:87:6c:11:d9:49:a8:00:97:17:da:
d5:a2:19:bb:06:62:9d:75:7e:97:26:79:65:0b:a3:
97:82:23:0f:58:26:d5:16:ea:9b:3c:55:0d:1b:f8:
01:0c:4d:ed:c1:1e:c0:46:92:c0:b7:87:22:08:57:
c6:81:fc:28:13:7e:71:7b:4f:19:9f:1f:66:a9:d5:
68:34:f8:85:99:bc:db:cf:65:ef:d4:96:72:63:f0:
76:64:0c:68:da:69:69:84:17:2c:d0:3d:88:dd:53:
61:49:df:ae:aa:05:06:ea:85:18:75:6b:1e:05:d2:
36:1c:71:78:ee:21:c6:9c:de:75:8a:7c:eb:77:86:
25:eb:22:17:83:72:8a:2a:62:b4:8c:33:90:b6:d3:
98:f1:00:61:e5:a0:f0:17:bb:e0:26:3e:33:3e:7d:
7c:de:c5:02:a0:26:ad:89:f5:aa:a4:e0:05:0e:b3:
8c:e5:f3:f4:9f:1e:30:66:51:7f:84:3b:5c:18:23:
34:63:5f:21:54:ac:4d:3b:33:5d:77:66:a5:71:65:
fb:99:0b:1a:4c:c2:b5:19:80:dd:82:6b:df:15:2e:
63:98:6b:57:1d:3b:5a:4a:8c:55:d3:f0:29:12:68:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:E1:E2:88:E7:99:10:00:7E:17:16:CA:3E:8E:03:08:29:AB:48
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b7:88:4c:af:73:27:14:4e:b3:55:9c:41:fa:14:cb:e4:7e:
5f:5f:cf:a2:60:dc:43:35:be:a6:05:09:9a:25:34:ba:7e:fc:
a2:f8:a1:d1:23:b0:8a:3b:42:c8:07:89:94:04:05:25:55:77:
75:58:68:4e:49:4c:93:ec:cb:60:56:c6:d3:e3:28:38:5c:a0:
eb:5b:76:14:ac:f2:04:e2:5f:4b:28:3e:2f:47:5f:68:77:91:
db:b8:35:f2:6f:8f:cf:6a:8a:cf:79:2d:d5:9d:21:35:ab:14:
62:9a:8c:e0:bb:96:6a:73:44:c1:8f:65:c1:64:23:1f:25:63:
24:6a:49:13:83:5b:cc:e9:12:f6:1f:8e:32:00:7e:c6:ae:50:
66:4e:0d:be:23:1b:ca:09:75:a9:09:67:0a:12:47:de:82:53:
f9:bc:b5:8e:3a:ec:7a:6f:61:ca:d3:26:6a:63:34:f8:9b:82:
49:e9:49:3a:57:f4:c3:dc:86:fd:a0:3d:a8:a5:9d:f9:c5:d6:
b3:32:38:bf:09:3e:7c:9d:68:ab:39:69:ab:c8:a5:b0:b7:2a:
56:60:79:5e:13:44:85:aa:ab:70:a0:d4:c7:22:42:cb:cd:67:
98:af:64:a8:f0:db:d9:bd:4a:db:45:0f:f7:5c:aa:0c:64:c0:
78:8b:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:15 2025 by rpki-client