Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e2039303837.roa
File: 34352e3134352e3234312e302f32342d3234203d3e2039303837.roa (raw, json)
Hash identifier: yvCvs1zpGqt7+8W170jNmsgamGWN60HRumBKP6fXJPs=
Subject key identifier: 72:D9:BF:FE:6B:76:82:97:C7:07:35:49:A3:EA:66:88:D2:62:AD:BB
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 38291638A078D5134F17D9B8F2D2C66B6E50E124
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e2039303837.roa
Signing time: Sat 23 Sep 2023 17:20:52 +0000
ROA not before: Sat 23 Sep 2023 17:15:52 +0000
ROA not after: Sat 21 Sep 2024 17:20:52 +0000
asID: 9087
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:29:16:38:a0:78:d5:13:4f:17:d9:b8:f2:d2:c6:6b:6e:50:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 23 17:15:52 2023 GMT
Not After : Sep 21 17:20:52 2024 GMT
Subject: CN=72D9BFFE6B768297C7073549A3EA6688D262ADBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:6b:f3:82:ec:b0:df:f1:c8:ae:2b:dc:98:
b1:ed:b9:6d:9b:c3:14:3a:da:ba:68:3b:3b:18:8e:
f2:7a:cb:f4:40:ed:d1:39:1e:b5:7f:50:4a:ca:70:
dc:b2:7e:a6:1d:19:22:83:62:cd:98:1a:23:72:6f:
05:ff:3f:eb:04:f8:2d:80:47:04:ec:d7:12:00:e7:
c5:71:90:2a:91:a7:45:87:63:03:a5:b5:15:df:d1:
75:78:06:10:52:22:b6:f3:a6:82:16:28:3a:37:a0:
3b:a4:0f:a8:f8:c9:47:3b:3c:53:b2:da:15:f6:3d:
26:38:0d:2f:25:e2:d8:46:06:08:9d:ff:2c:26:f3:
a8:16:40:70:a5:88:63:95:f8:7d:c6:db:9c:7f:72:
d9:c1:8f:37:7e:70:3e:ba:e3:bd:07:ac:3f:f1:ba:
c4:bd:3d:98:59:ee:12:ef:35:e8:6f:62:43:28:8d:
be:99:b8:5f:b2:4c:07:ec:67:6c:04:ea:8e:83:52:
b3:93:fa:9f:31:e3:64:8b:12:c9:79:c2:56:b3:d3:
64:75:18:da:6d:66:7b:13:2c:f1:22:82:8d:cd:a5:
91:28:f1:0a:56:a6:a7:04:60:5d:ca:d8:bd:08:b7:
22:d2:49:cf:70:f1:17:96:24:10:64:c0:eb:f1:b2:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:BF:FE:6B:76:82:97:C7:07:35:49:A3:EA:66:88:D2:62:AD:BB
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234312e302f32342d3234203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:13:4a:9f:f9:96:16:06:03:78:2b:86:d0:dd:ce:db:fc:ae:
1e:0c:84:f5:0a:d3:0e:73:67:36:2f:ed:29:cd:81:41:78:30:
15:dc:5e:5c:cd:19:1d:1f:bd:e7:19:16:3a:23:c5:a3:74:43:
3c:76:51:57:5d:3f:9d:8a:22:8b:10:ca:dd:13:85:a0:c4:01:
62:08:fb:23:33:b8:5b:cc:08:fc:19:7e:ed:5a:14:50:24:53:
c5:dc:ff:af:25:18:65:47:96:e2:b2:5d:e0:e3:c9:0e:67:df:
d7:b8:ea:64:73:b3:9c:21:c9:13:42:ae:41:8b:46:01:6d:e6:
20:ac:91:18:22:35:5c:52:0c:69:2b:8c:7a:85:39:e4:3e:dd:
a5:c1:8f:e0:bc:e1:50:49:bf:50:4d:37:f9:6b:34:c0:22:d2:
4c:d6:7b:52:42:18:e2:52:78:6f:98:d6:13:31:f9:11:8f:c6:
a5:94:a9:89:4c:0e:0f:94:27:a7:21:23:63:93:13:1c:73:09:
aa:85:22:2e:24:ec:e5:27:f3:47:5e:e6:ba:c7:ad:26:ac:4a:
22:69:ae:30:1c:06:1c:e4:26:7a:eb:53:08:1a:2a:17:a0:a4:
42:db:38:8e:7e:42:1b:07:1f:58:84:6c:9c:bc:4c:61:90:88:
5a:ee:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:34 2025 by rpki-client