Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e2033333230.roa
File: 34352e3134352e3234332e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: 7lz6mgVXvzMHj+gJjbjpOFcInyr5V2oKt6MxxcrpqwQ=
Subject key identifier: 37:2E:94:B1:28:CF:8D:75:93:81:21:EA:18:9C:20:3C:50:BE:93:3A
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 3CEE9AD524AE6C84BC6310A79F878805AF838060
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e2033333230.roa
Signing time: Sat 23 Sep 2023 17:20:53 +0000
ROA not before: Sat 23 Sep 2023 17:15:53 +0000
ROA not after: Sat 21 Sep 2024 17:20:53 +0000
asID: 3320
IP address blocks: 45.145.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ee:9a:d5:24:ae:6c:84:bc:63:10:a7:9f:87:88:05:af:83:80:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 23 17:15:53 2023 GMT
Not After : Sep 21 17:20:53 2024 GMT
Subject: CN=372E94B128CF8D75938121EA189C203C50BE933A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:c1:3f:f1:3b:d1:7a:58:d4:86:df:b6:d8:
ee:8d:08:fb:75:67:6c:6e:63:ad:2c:cb:c3:d1:f3:
48:2d:b7:6a:3a:ab:a2:c4:d4:df:26:0d:57:7f:3c:
9d:9c:64:92:e2:4c:c6:9f:81:cc:6e:6d:29:69:81:
94:0c:15:eb:ec:c5:28:4c:68:4b:76:f5:e2:f3:12:
f0:9b:ed:63:61:08:d9:5c:2c:fb:39:35:7c:af:cb:
7d:4f:b2:89:29:18:2a:be:37:c2:d5:30:18:e8:8b:
e6:26:52:3f:80:06:fc:3f:a5:d9:c4:09:ee:05:b5:
3e:7c:54:57:fe:fb:58:80:e5:75:ba:11:42:28:05:
82:2e:50:bc:d7:dc:9f:39:5c:8b:d9:b0:99:c7:02:
b3:df:0d:2e:08:32:21:e5:da:07:49:96:92:8f:43:
46:03:c9:5a:13:00:b9:8a:0b:22:de:2c:e1:d3:89:
d5:8e:36:f8:0c:21:ac:89:ae:87:1d:e6:bd:2c:ea:
4a:1e:75:96:14:ae:ff:57:aa:55:72:36:1a:d8:b0:
97:73:d0:a7:83:96:40:a5:28:38:1a:c9:66:e4:df:
32:5a:20:3c:52:c0:0a:49:5a:72:0b:e3:3d:4d:28:
ff:80:f5:2f:2c:6f:60:c1:76:bc:9c:dd:2b:0e:a5:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:94:B1:28:CF:8D:75:93:81:21:EA:18:9C:20:3C:50:BE:93:3A
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6c:5a:8e:89:ff:66:17:e5:fd:9f:84:46:30:b8:c6:51:e2:
df:01:52:f7:09:19:de:43:aa:2a:41:45:1c:41:a1:66:72:0a:
a2:fa:ac:f7:5e:e6:78:a8:4b:2a:05:0f:f6:c9:35:3a:a8:8a:
7c:45:ca:d4:d1:9f:5b:6c:86:ec:20:e9:f7:51:15:22:45:2a:
4c:21:e7:7c:15:a0:2c:56:74:5d:af:70:da:52:df:36:1e:fb:
40:fc:b5:6a:a7:46:c3:9f:48:75:3b:12:7f:dc:ce:fe:e1:c3:
45:f3:ef:e4:d5:d5:83:5d:76:1b:24:75:de:b7:65:ba:ef:c9:
82:c0:ba:6f:8c:40:70:d0:fc:85:a8:88:9b:d1:b7:82:e4:d3:
f3:75:4a:4c:54:87:f9:e4:4e:bb:2f:ea:11:d6:23:48:20:ec:
e2:b9:45:74:ce:d4:41:f1:fc:46:01:32:26:73:80:24:fb:07:
1b:84:ae:aa:f1:ce:9a:1b:70:77:5d:7f:f8:e1:3e:11:35:e2:
0b:6c:03:02:5a:b4:61:9b:6a:a1:72:18:43:c5:c9:4b:da:d7:
46:07:f3:08:e5:92:f9:35:82:ee:80:57:65:2f:b7:c2:b3:3c:
07:11:ab:12:54:67:4b:f2:c4:cb:4e:05:08:4a:da:8c:ed:9d:
f5:d2:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:32 2025 by rpki-client