Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e2039303837.roa
File: 34352e3134352e3234332e302f32342d3234203d3e2039303837.roa (raw, json)
Hash identifier: 5UcaomwbRAhOXY5FtschX6MHybdb7JeqtetSCRPMYGE=
Subject key identifier: 19:CF:80:A9:1D:41:2A:FF:07:98:65:34:C6:67:2D:68:98:B6:78:03
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2C2ED6DD80344FB0F4A07CED1E0368AE86E67FE5
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e2039303837.roa
Signing time: Sat 23 Sep 2023 17:20:54 +0000
ROA not before: Sat 23 Sep 2023 17:15:54 +0000
ROA not after: Sat 21 Sep 2024 17:20:54 +0000
asID: 9087
IP address blocks: 45.145.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2e:d6:dd:80:34:4f:b0:f4:a0:7c:ed:1e:03:68:ae:86:e6:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Sep 23 17:15:54 2023 GMT
Not After : Sep 21 17:20:54 2024 GMT
Subject: CN=19CF80A91D412AFF07986534C6672D6898B67803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:39:de:11:7b:ad:bd:c2:50:bc:02:6c:c2:
04:36:88:f7:29:ec:55:9c:0b:07:a8:fc:ba:c2:09:
7e:70:9a:30:a2:d1:96:f7:38:f0:f7:a6:1c:1a:55:
db:1c:51:2f:c7:f0:f8:c9:38:97:e5:37:88:b4:23:
c6:c6:13:6f:e3:98:e4:0b:38:26:ef:f6:f8:6c:7f:
10:16:d9:64:f9:22:4e:5b:29:a8:9c:6a:f0:a6:bf:
7e:8b:0d:34:12:fc:f5:91:f2:70:38:cd:3c:27:78:
a3:cb:00:ef:5e:3c:94:a9:74:c7:10:9d:3b:53:7f:
42:00:0d:b3:e9:15:15:fc:db:a4:79:7a:53:fe:4e:
55:6b:16:7b:e1:37:91:c1:0f:28:ca:94:e7:e6:ca:
32:86:64:21:ba:16:2a:81:48:3d:c9:55:c8:08:68:
76:a8:ff:24:f2:b9:fb:bf:b3:ab:2d:fa:d6:cb:7d:
30:43:4d:95:a7:c4:6c:9f:25:4a:19:4e:a3:85:ad:
a1:d6:e6:23:28:68:46:88:04:ae:ab:bf:b8:73:3b:
59:ff:68:51:a2:c3:c9:da:3e:55:c4:c9:1c:d2:56:
2d:12:81:b6:77:ad:da:26:63:86:fb:46:35:7a:a5:
bc:26:68:3d:b6:1a:9d:a5:b9:50:99:28:b5:c0:7c:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:80:A9:1D:41:2A:FF:07:98:65:34:C6:67:2D:68:98:B6:78:03
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5b:34:f2:4e:69:8a:ab:71:5d:78:17:7b:e8:52:57:a5:a7:
0e:96:72:cf:e8:db:1a:50:d6:d0:b8:4e:af:36:dc:cf:d0:b0:
38:8a:40:df:fc:48:11:31:72:72:06:52:1c:5c:d6:79:81:7e:
ba:e7:7c:99:f4:55:49:92:ec:b0:20:f5:a9:7b:78:ad:d6:d2:
a2:01:f8:22:4d:41:c5:c4:54:fc:ae:f5:29:71:56:77:96:4f:
80:b7:a8:68:75:97:88:e5:17:91:db:65:8a:f8:08:eb:2b:58:
70:85:31:ba:5d:5e:a7:c6:02:eb:08:b1:c1:d7:d2:ea:b2:74:
d2:ca:d3:5c:e2:48:74:52:88:2a:d6:08:06:a3:88:6f:a9:84:
14:c9:78:6d:36:1c:f7:90:11:88:cc:f2:4e:8a:5c:e5:f2:aa:
f2:53:c8:68:7e:54:32:db:56:c1:f4:db:f9:29:45:ad:e6:d4:
fb:77:e4:0a:82:2f:3d:6c:cd:95:0d:f9:fc:55:c5:b5:ff:6a:
cb:44:11:c5:41:0a:aa:c8:64:a5:54:fc:34:4f:fd:bb:97:03:
77:59:b4:ce:10:a3:7f:e3:fa:14:25:bb:8f:82:53:97:f0:f8:
80:60:6b:be:a5:9a:96:b2:42:a3:77:ee:f6:3e:9b:b7:fd:48:
ea:5e:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:59 2025 by rpki-client