Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LFgIrO3MFk9NGrbE+umtcapGah5PBXwSMGeBcOTAJMg=
Subject key identifier: 50:36:24:E3:BC:B9:61:A1:8D:E6:B4:4A:AB:2D:55:AB:35:E7:52:19
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 3E7669B3E22F5B5B324FADA701991833FB50E738
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Jul 2023 00:00:33 +0000
ROA not before: Sat 01 Jul 2023 23:55:33 +0000
ROA not after: Sun 30 Jun 2024 00:00:33 +0000
asID: 834
IP address blocks: 45.145.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:76:69:b3:e2:2f:5b:5b:32:4f:ad:a7:01:99:18:33:fb:50:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 1 23:55:33 2023 GMT
Not After : Jun 30 00:00:33 2024 GMT
Subject: CN=503624E3BCB961A18DE6B44AAB2D55AB35E75219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:eb:5f:73:d4:b5:fd:66:85:47:2d:ee:1e:
a5:0c:61:cf:04:56:97:54:fe:3c:49:e1:b4:ad:96:
55:59:12:7a:d5:9b:16:f0:24:93:2e:4f:fe:79:a3:
fd:5a:f7:36:16:1f:87:25:50:e1:61:54:06:c9:71:
30:f8:c4:93:cd:73:f7:62:bc:04:28:14:66:23:ea:
30:d4:32:50:04:ac:50:aa:ff:db:b4:d8:79:29:76:
fc:28:a1:6e:0e:31:51:ed:48:14:b8:ec:b8:6e:17:
f2:c1:a5:7b:13:4f:0f:e6:fa:c0:55:73:11:50:13:
47:0a:20:53:7a:0c:3c:98:fe:73:fe:77:64:0b:af:
53:f5:dd:f3:c2:da:93:1d:32:9c:19:20:1f:5d:f4:
72:f9:43:69:41:51:33:8a:26:8b:60:d3:94:d4:6c:
c9:fc:b9:a1:51:3d:d4:3c:4a:5a:65:b7:75:5d:a5:
90:93:ea:76:75:b3:cd:6c:37:6a:01:c1:58:e7:8d:
48:e8:0d:b1:f2:f7:92:86:6a:02:88:bb:55:87:71:
66:e8:83:f4:e6:39:46:e7:98:1b:93:d1:41:40:80:
b2:4b:55:cb:13:8b:aa:43:38:85:61:13:57:0c:1a:
a8:28:5f:2f:0a:29:a1:4a:c1:56:fd:3c:6b:ca:a6:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:24:E3:BC:B9:61:A1:8D:E6:B4:4A:AB:2D:55:AB:35:E7:52:19
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:53:de:6b:55:75:ea:cf:b8:74:2c:2a:33:bd:95:ae:ef:10:
78:5d:b2:f8:4f:d0:29:8e:f5:a1:0d:43:88:3f:f9:2a:e6:1a:
80:1d:f9:16:24:31:b5:8b:d5:26:53:e2:6a:0d:00:1a:79:e0:
ca:ec:5e:e3:76:40:f1:d3:50:3f:38:b9:d5:96:57:d8:b1:67:
c7:02:0a:9d:6b:f9:ac:30:87:c8:1f:9c:e0:50:4e:a4:6c:58:
a9:c2:e7:fd:ae:a1:1a:60:db:ae:d9:fd:bd:17:e1:13:44:c4:
a4:e3:a0:2d:49:74:a1:91:de:68:47:28:3d:43:8c:01:cd:94:
4b:c1:b4:dd:80:be:18:bf:18:c4:ea:42:8c:7b:a8:82:eb:ef:
aa:a2:4f:49:78:10:ed:d7:72:47:b8:5c:12:f9:60:e0:2b:a4:
b5:8a:de:40:02:d8:50:f3:0f:cf:1a:8b:ac:f3:56:be:af:77:
06:f6:cf:41:07:45:31:76:3a:bc:87:de:4b:8a:56:3a:a8:f2:
ea:ac:16:32:f3:7c:c3:b2:09:55:ed:46:d2:82:f0:26:78:6f:
b1:15:39:90:3b:a5:3e:10:27:06:b2:c2:46:29:5b:f7:62:bd:
42:60:f5:3d:0b:05:c3:14:bf:a8:bb:f4:66:3e:4f:3e:b2:76:
40:fd:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:07 2025 by rpki-client