Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e203631333137.roa
File: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: k9o4uPn92mYpKDdrvkK3nMOkQUumkNxkptXLJkFqIdw=
Subject key identifier: 30:7F:F3:8B:F0:FC:5B:39:9F:4A:B4:E6:71:B7:2C:7F:03:41:FA:83
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4FB2ADA6643B33F9E12A5F346E7501A5400A1A99
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e203631333137.roa
Signing time: Wed 07 Jun 2023 20:58:09 +0000
ROA not before: Wed 07 Jun 2023 20:53:09 +0000
ROA not after: Wed 05 Jun 2024 20:58:09 +0000
asID: 61317
IP address blocks: 45.145.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b2:ad:a6:64:3b:33:f9:e1:2a:5f:34:6e:75:01:a5:40:0a:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 7 20:53:09 2023 GMT
Not After : Jun 5 20:58:09 2024 GMT
Subject: CN=307FF38BF0FC5B399F4AB4E671B72C7F0341FA83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:53:08:b7:62:38:4e:aa:b6:75:d9:3b:a5:
dd:51:9a:e5:de:33:1b:61:fa:74:40:10:30:a1:7b:
9a:5a:ed:3c:ac:8e:53:82:b5:69:c3:82:1d:04:6a:
17:9b:d0:40:c9:ce:fa:61:a9:48:78:9e:03:28:3a:
cb:06:ab:2a:ce:85:1d:ee:e2:c9:09:1a:a3:c6:d4:
f4:84:6f:3e:74:13:18:2b:fa:f0:2b:3d:ab:f3:c0:
ca:eb:e9:b9:c8:2c:f8:72:82:5e:f2:75:a7:14:6b:
4f:6e:01:93:94:7b:bb:83:91:d6:fc:c5:15:3b:de:
2c:e8:47:e2:8c:67:6f:5f:fc:b7:3b:05:73:8f:22:
a5:63:42:04:84:28:c6:7e:a4:74:7e:0a:1d:ca:e4:
dd:c3:25:ae:ee:4b:ee:d5:49:87:0b:e9:12:57:d0:
4c:e2:f3:18:29:44:03:1d:0f:9a:ba:3d:31:45:e0:
fb:c7:96:f8:d3:8f:e5:1d:dc:e1:bd:f0:5c:ed:8d:
cd:cf:d1:ab:27:eb:75:26:67:bb:b7:37:a8:7f:68:
08:72:3d:b8:79:cc:11:9b:11:f5:2f:1d:73:bb:c6:
0a:dd:38:ea:78:ad:53:31:ee:35:3e:34:48:ab:eb:
fc:7e:4f:80:10:f0:05:1e:b8:ac:f1:5d:3e:09:9d:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7F:F3:8B:F0:FC:5B:39:9F:4A:B4:E6:71:B7:2C:7F:03:41:FA:83
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.242.0/24
Signature Algorithm: sha256WithRSAEncryption
76:90:6c:1e:b4:82:ac:51:b1:d7:1d:8f:a7:84:19:c1:c2:8d:
dc:9e:a0:a8:f6:fa:be:8f:c6:d6:70:f3:a2:e8:c6:fd:bd:2d:
e7:ac:1a:55:18:6f:89:ae:67:ec:92:50:ef:2b:aa:99:df:8f:
97:a3:74:c2:90:c8:b1:c8:4d:29:80:ab:16:79:d2:46:f1:2c:
e5:32:eb:ae:35:b5:24:fa:a1:d2:62:bb:4c:b6:c2:bd:b7:12:
d0:3b:8a:62:06:3e:f8:ae:62:e5:14:42:6b:42:a5:5b:eb:68:
2b:84:25:a7:f0:05:7f:7d:13:ab:ca:64:01:08:af:36:1c:98:
50:e7:d1:91:b4:5d:65:e3:d2:01:dc:9f:6c:72:dc:2c:d3:dc:
e8:66:e1:3a:93:a1:19:0d:65:b4:3c:58:bb:d2:21:e8:cf:35:
67:c4:2c:c6:83:d9:3e:9e:7f:ef:98:d8:2b:0b:be:20:2a:63:
75:11:fa:02:6a:bf:5c:2e:8c:62:f6:3c:65:50:98:b6:8d:19:
bd:1f:7c:f8:c2:af:88:b9:b0:9d:a7:f3:d9:a3:2e:e4:fc:78:
11:ee:de:34:ee:ac:19:15:30:ad:16:66:b4:5b:20:73:e6:f6:
2e:22:96:ad:ea:d7:8a:0c:70:a1:9c:f2:9f:d8:d0:9c:46:0e:
c5:9e:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:06:44 2023 by rpki-client on console-fra.rpki-client.org