Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
File: 34352e38392e3135302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Sa4NZNsSOjo0vyJLzYPxVhuW2o/nxGkaMRJdyxVKMeQ=
Subject key identifier: DE:26:57:DA:18:76:AB:A9:73:A6:45:DD:F9:9D:0E:7B:D3:92:10:97
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2F77AC86B6D6CBC5776FA974FEA5F7C739B38596
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
Signing time: Fri 31 Mar 2023 14:47:19 +0000
ROA not before: Fri 31 Mar 2023 14:42:19 +0000
ROA not after: Fri 29 Mar 2024 14:47:19 +0000
asID: 834
IP address blocks: 45.89.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:77:ac:86:b6:d6:cb:c5:77:6f:a9:74:fe:a5:f7:c7:39:b3:85:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Mar 31 14:42:19 2023 GMT
Not After : Mar 29 14:47:19 2024 GMT
Subject: CN=DE2657DA1876ABA973A645DDF99D0E7BD3921097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:5a:e8:1b:6f:d2:13:59:e4:9e:50:7d:86:
ad:05:fe:95:ff:8e:89:d5:db:20:23:bc:13:70:3c:
89:62:32:19:ff:01:2f:a8:d1:a2:cc:53:b9:ab:fc:
a2:74:df:14:32:13:e8:e8:56:99:9c:af:ec:1b:8e:
2f:a8:b6:ca:8d:5e:23:54:c0:45:9c:d6:cf:29:6b:
c2:72:d5:5d:0f:c2:b0:a4:45:45:0f:e9:49:68:83:
60:44:9e:3a:09:21:99:10:6f:d1:d0:cd:36:65:cb:
8a:ec:ab:dc:bc:90:01:cb:f1:90:ec:93:0d:29:b1:
c2:8b:06:d6:95:10:9e:f8:80:83:7c:fd:73:f6:ad:
a0:31:df:87:2d:0e:36:67:9d:4b:25:0c:b9:a8:9d:
08:ee:11:df:28:da:87:fb:82:98:84:f7:06:52:48:
c5:01:20:c0:d2:4b:13:e1:0b:bc:3d:3b:2c:5f:7b:
e3:c0:65:4c:51:c8:4a:0e:73:de:96:1a:f9:81:58:
f3:66:ec:8b:29:d2:86:76:be:08:3b:4e:f4:85:dc:
72:14:7c:46:84:9c:f8:d2:9a:a7:e4:3e:8d:07:61:
6f:65:7e:e7:bc:7f:21:c6:35:8c:58:f1:70:d6:55:
82:ee:ce:fe:b8:2c:40:16:43:b1:0f:6b:f8:54:d7:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:57:DA:18:76:AB:A9:73:A6:45:DD:F9:9D:0E:7B:D3:92:10:97
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a7:0f:0f:c3:ce:cf:13:ac:a6:04:d5:07:82:ff:06:a2:ad:
19:dc:80:2a:81:60:4d:fb:5a:ea:54:c6:fe:14:0a:f2:cd:af:
b3:8b:ca:f8:b0:e2:a7:66:3b:fe:d7:f0:83:22:48:d8:1a:23:
cb:95:55:11:4b:c9:7b:8d:d3:5a:c0:44:18:9d:92:3e:f0:53:
6a:72:db:7d:52:7f:2d:9e:cb:f5:02:d7:0e:ba:7b:73:93:37:
d6:6f:3f:e1:7c:54:71:bc:c2:46:e9:33:7e:48:e6:e9:54:8c:
ad:e2:64:1c:67:52:2b:2d:39:4c:0a:f6:1e:8f:e3:00:60:d1:
97:fe:a5:88:42:c6:1a:5b:71:12:8c:99:f2:82:86:c2:e6:b1:
52:96:8d:8e:d4:52:f5:f5:22:18:68:ce:d8:b1:88:98:18:c7:
59:33:0a:c7:be:6d:5d:b0:91:9d:26:ae:1e:f6:a9:d2:83:d5:
46:ea:e7:03:db:44:8a:0d:a8:76:d7:5b:7d:29:88:df:26:74:
ba:49:1c:54:8d:30:43:f9:f8:75:59:33:92:f3:43:5d:f2:00:
9f:05:99:eb:22:b7:f4:5a:e7:2a:5a:92:52:56:bd:44:0c:c9:
5d:2f:bd:9d:bb:99:29:05:7a:81:13:88:b3:6b:68:c8:7c:8d:
37:1f:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:07 2025 by rpki-client