Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32342d3234203d3e20383334.roa
File: 34352e38392e3135302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /ggcEnKy7H6p10bGwtfLgMWYX3vCj2t6a0z3vh+aiQY=
Subject key identifier: CB:41:61:59:55:09:00:10:55:F2:2C:63:97:D1:28:77:B1:90:E7:2D
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2C54E03EBE1373A499806538C87137A163FE349C
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Jul 2023 10:00:06 +0000
ROA not before: Sun 02 Jul 2023 09:55:06 +0000
ROA not after: Sun 30 Jun 2024 10:00:06 +0000
asID: 834
IP address blocks: 45.89.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:54:e0:3e:be:13:73:a4:99:80:65:38:c8:71:37:a1:63:fe:34:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 2 09:55:06 2023 GMT
Not After : Jun 30 10:00:06 2024 GMT
Subject: CN=CB4161595509001055F22C6397D12877B190E72D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:2c:a9:5e:e1:b8:b3:7e:8b:73:8b:ed:6a:
c1:da:7d:b5:8a:3a:3a:f3:3e:c9:0c:fa:7e:c1:d0:
93:d2:82:5b:8e:49:07:6f:d0:22:1b:da:70:37:a2:
58:62:17:2b:b3:73:41:91:f5:47:47:c0:48:51:1d:
32:62:73:5b:04:36:40:1b:df:f2:36:2f:ad:da:44:
2a:d2:6c:0b:54:21:18:e1:fb:ca:8a:8c:59:cb:cd:
b5:ff:c8:e6:59:28:0d:4e:b1:60:14:9c:0f:1a:5a:
eb:38:7a:8c:20:81:27:ef:a0:d8:79:cf:7f:48:68:
12:cb:66:27:03:5b:a8:1b:71:85:9a:c2:87:a7:e6:
0e:51:39:ea:71:48:92:7d:74:83:0b:20:07:16:70:
23:76:f9:3f:99:73:18:a4:64:8b:a2:77:56:f1:84:
9b:c2:6e:5e:75:ec:70:de:8c:67:a8:1e:57:fe:7a:
df:3f:6a:c9:89:16:30:9e:81:6c:f6:fa:10:e2:11:
d6:dc:02:e8:97:b7:36:fa:e3:ab:f6:28:d3:2e:0f:
3f:81:a1:f6:58:47:5b:10:f5:6e:4f:4a:d4:74:02:
ee:92:c6:b0:25:0e:ae:15:29:b1:1e:d2:bb:da:e2:
3b:9a:62:46:fc:76:73:0b:fb:6d:3f:5c:fc:16:65:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:61:59:55:09:00:10:55:F2:2C:63:97:D1:28:77:B1:90:E7:2D
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:31:e9:b5:c8:9f:4b:6b:2b:b6:e7:d0:da:28:ff:b9:70:3e:
9a:db:6a:d3:10:f0:99:42:15:a8:55:ba:d6:28:7e:a2:2a:db:
ef:6b:96:36:69:b9:db:ac:73:5a:ef:22:9b:72:c9:4b:95:a1:
37:fa:c1:b4:98:4a:f1:0c:51:21:6e:38:69:4c:d9:86:0d:9d:
8a:ee:b8:9b:d4:af:1b:f6:3c:71:81:44:dc:bf:68:c0:1a:4b:
e2:1d:51:17:69:69:9e:83:56:96:f7:54:e9:96:2f:ce:ba:35:
6c:d2:b1:7f:07:31:cf:d2:99:fe:4a:2c:0a:d6:08:45:0a:f3:
9b:9d:9f:e0:98:77:cb:26:34:74:38:f3:e6:a0:37:27:83:54:
03:d4:fd:92:34:75:6a:30:1d:00:c3:9d:d4:1a:1d:66:60:b1:
5a:f1:26:69:84:70:30:e8:ec:4b:ae:dd:78:70:4b:83:80:a5:
48:3e:8d:89:75:56:4f:8e:50:96:f8:81:e0:3b:e4:1f:a6:e3:
e3:4d:20:5a:93:8a:92:ab:49:a3:a8:ab:f5:f5:4b:ff:70:cb:
d9:83:1b:9b:f4:85:0c:91:7d:69:fb:fb:31:1c:f2:5c:16:ed:
4c:c3:95:84:6f:87:2c:0e:6b:e5:a0:24:c4:42:8f:a5:fd:dc:
57:4b:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:51 2025 by rpki-client