Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rJ8/5GFs3lpo5t6Z/wCiTs4r5E/9wtiixcZ36sLVdkU=
Subject key identifier: D2:F6:AB:4C:3C:4C:BA:0B:AB:1F:53:20:16:84:E4:83:8A:87:4C:75
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4C1E25575179CD29C85C039749B9C50929812275
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Jun 2023 00:00:20 +0000
ROA not before: Thu 29 Jun 2023 23:55:20 +0000
ROA not after: Fri 28 Jun 2024 00:00:20 +0000
asID: 834
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1e:25:57:51:79:cd:29:c8:5c:03:97:49:b9:c5:09:29:81:22:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 29 23:55:20 2023 GMT
Not After : Jun 28 00:00:20 2024 GMT
Subject: CN=D2F6AB4C3C4CBA0BAB1F53201684E4838A874C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:78:39:c0:b8:ba:b1:4c:54:0c:a8:d0:89:
b6:c8:d6:1d:20:c2:42:ca:81:cd:ae:6b:25:53:77:
31:30:10:46:de:45:fe:e1:03:6d:ee:59:1e:ed:90:
8a:e5:92:46:97:ca:94:ee:6d:c5:06:36:5f:a1:19:
c2:66:ee:34:0e:e6:ad:cf:69:f8:1b:89:17:d1:ca:
99:08:67:30:3b:0c:bd:2b:27:ef:7e:0c:49:42:16:
9d:33:d4:81:ca:a3:a6:54:14:8d:75:93:db:7b:69:
b9:59:24:eb:30:6e:33:45:54:07:7a:15:8e:a1:cd:
65:91:b2:cf:7b:42:91:62:02:45:38:63:2a:97:db:
dd:86:f2:48:64:8a:38:2d:2b:ad:af:a9:24:94:b8:
a0:37:e5:e1:ff:9a:d7:12:ca:76:16:eb:6c:38:a6:
12:9f:b2:02:2a:86:dc:4e:7e:de:39:2d:c6:41:80:
df:9b:a0:a1:52:3b:7a:f7:bd:a0:44:b2:2e:24:b4:
60:86:40:ff:57:2b:ec:dc:31:d3:5d:8b:bc:28:e2:
a6:a7:a9:19:4e:69:45:0c:1b:b7:a9:d3:b2:06:11:
a5:a4:49:1d:7f:ba:cb:d6:56:a3:f7:01:df:5d:0f:
56:dd:b9:14:9b:a7:ee:38:ea:eb:73:d0:ef:41:e0:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:AB:4C:3C:4C:BA:0B:AB:1F:53:20:16:84:E4:83:8A:87:4C:75
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d9:54:a1:d6:dc:61:90:fa:9a:15:27:dd:39:d9:12:a1:b4:
ec:61:3c:39:fb:6a:21:eb:5b:e6:bb:e9:72:55:94:75:61:39:
86:c9:48:ce:55:42:2c:0e:30:4e:4c:ac:1f:ee:2e:7d:db:48:
df:74:2b:67:d9:0b:ce:ef:c9:39:13:94:7d:90:35:4c:20:c3:
04:f6:62:84:5d:83:ed:42:0e:ad:5c:a8:8f:90:b1:05:60:8f:
2e:6f:bc:cc:b0:59:11:67:19:8f:7f:1f:84:9d:a5:b8:9f:6b:
5d:e9:87:c0:c5:48:77:6f:f2:28:47:fa:8c:d2:14:f2:68:85:
67:e8:8f:2b:99:bb:67:34:6c:22:9d:5b:09:60:16:e9:db:2b:
30:55:bd:3a:e2:a2:18:d9:9f:df:c7:ed:9b:b5:26:20:c5:03:
55:1a:88:70:f8:8b:98:c6:25:88:0f:34:74:c2:53:ee:d7:b2:
cd:72:ca:12:ca:40:a8:58:b0:24:e0:43:b1:8a:e9:b7:34:4f:
be:c5:e7:c4:50:41:56:70:38:21:78:15:5a:71:91:c0:ca:f2:
bb:af:2a:07:af:90:af:66:8e:ec:b4:d9:51:e2:fe:3a:03:0a:
b7:cf:7e:55:ae:e3:1c:76:9c:b7:ee:e9:ff:42:a2:ab:e1:07:
0c:e3:a0:4b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUTB4lV1F5zSnIXAOXSbnFCSmBInUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA2MjkyMzU1MjBaFw0yNDA2MjgwMDAwMjBaMDMxMTAvBgNV
BAMTKEQyRjZBQjRDM0M0Q0JBMEJBQjFGNTMyMDE2ODRFNDgzOEE4NzRDNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WXg5wLi6sUxUDKjQibbI1h0g
wkLKgc2uayVTdzEwEEbeRf7hA23uWR7tkIrlkkaXypTubcUGNl+hGcJm7jQO5q3P
afgbiRfRypkIZzA7DL0rJ+9+DElCFp0z1IHKo6ZUFI11k9t7ablZJOswbjNFVAd6
FY6hzWWRss97QpFiAkU4YyqX292G8khkijgtK62vqSSUuKA35eH/mtcSynYW62w4
phKfsgIqhtxOft45LcZBgN+boKFSO3r3vaBEsi4ktGCGQP9XK+zcMdNdi7wo4qan
qRlOaUUMG7ep07IGEaWkSR1/usvWVqP3Ad9dD1bduRSbp+446utz0O9B4MLjAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU0varTDxMugurH1MgFoTkg4qHTHUwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzNDM1MmUzMjM0
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkfEw
DQYJKoZIhvcNAQELBQADggEBAIvZVKHW3GGQ+poVJ9052RKhtOxhPDn7aiHrW+a7
6XJVlHVhOYbJSM5VQiwOME5MrB/uLn3bSN90K2fZC87vyTkTlH2QNUwgwwT2YoRd
g+1CDq1cqI+QsQVgjy5vvMywWRFnGY9/H4Sdpbifa13ph8DFSHdv8ihH+ozSFPJo
hWfojyuZu2c0bCKdWwlgFunbKzBVvTriohjZn9/H7Zu1JiDFA1UaiHD4i5jGJYgP
NHTCU+7Xss1yyhLKQKhYsCTgQ7GK6bc0T77F58RQQVZwOCF4FVpxkcDK8ruvKgev
kK9mjuy02VHi/joDCrfPflWu4xx2nLfu6f9CoqvhBwzjoEs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:07 2025 by rpki-client