Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135312e302f32342d3234203d3e20333937353633.roa
File: 34352e38392e3135312e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: MFPriRYplu7CvgMENnh6ri+d5KYw7cxCJLg+69JntgQ=
Subject key identifier: D1:8E:83:11:2D:97:D6:57:89:95:94:68:22:53:3A:FC:01:48:21:73
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 25557C956A683D34923EF29EBC57D04C27308746
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135312e302f32342d3234203d3e20333937353633.roa
Signing time: Sat 03 Jun 2023 12:07:18 +0000
ROA not before: Sat 03 Jun 2023 12:02:18 +0000
ROA not after: Sat 01 Jun 2024 12:07:18 +0000
asID: 397563
IP address blocks: 45.89.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:55:7c:95:6a:68:3d:34:92:3e:f2:9e:bc:57:d0:4c:27:30:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 3 12:02:18 2023 GMT
Not After : Jun 1 12:07:18 2024 GMT
Subject: CN=D18E83112D97D6578995946822533AFC01482173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:c5:74:c6:6d:08:af:6a:21:e4:4e:84:8b:
57:16:52:b2:3d:bb:65:58:89:ce:1c:a0:1b:f6:7c:
58:37:10:2f:d1:1e:e8:54:98:fa:89:72:2e:68:e6:
a6:13:17:5e:69:08:0a:3e:53:f8:8e:b7:75:ab:88:
8c:ef:d7:8d:1b:2c:c8:0a:e1:20:24:17:78:bf:bc:
f8:9e:d1:8c:25:7f:ab:a8:09:39:c4:20:77:58:71:
ea:12:75:39:37:99:e6:20:6f:b8:8f:ba:fb:35:4b:
9e:2e:ef:80:69:1c:62:2a:0b:b7:dd:00:df:5d:90:
16:02:43:c4:73:78:26:af:4a:6a:df:01:78:a4:bd:
af:95:16:c6:53:98:65:3d:1b:98:9d:f0:65:42:ba:
88:9b:9a:3e:60:8b:d7:d5:c5:68:9b:0e:f6:a9:3f:
0d:49:63:bd:95:a5:b4:51:8a:65:50:9a:46:3d:f9:
46:ce:b7:0c:4d:3b:98:f9:c9:60:8f:bf:f8:de:8c:
49:3c:26:2b:4d:e1:49:a3:5c:07:da:d7:a9:be:b5:
98:12:33:e5:5e:d8:70:02:35:7e:f2:e6:99:27:eb:
cf:5f:8a:f5:a3:4b:b2:39:0a:41:32:ee:26:31:03:
22:86:00:ca:2e:00:74:77:1e:9f:29:f0:76:12:b1:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:83:11:2D:97:D6:57:89:95:94:68:22:53:3A:FC:01:48:21:73
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135312e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f1:1c:74:26:66:f4:5e:f9:71:5a:c4:44:1c:aa:4e:45:ec:
6c:0c:03:c5:29:57:db:e5:e4:7a:b1:cd:2f:e1:1b:16:2d:f5:
44:24:e5:d7:c1:ed:ce:1e:97:8f:55:43:6b:e7:f2:b5:b2:91:
e1:47:82:56:17:16:7d:9d:8d:a1:1e:a7:52:f5:74:ab:bd:d7:
d4:b2:20:7a:ef:64:9a:a9:ce:5d:6c:16:6f:03:6c:07:f9:c2:
6b:94:35:4b:48:54:4d:85:bd:4a:e8:09:19:9b:ef:47:b0:6a:
57:8b:d4:b1:ae:69:67:9f:b7:d3:d4:d8:71:a6:92:69:66:e1:
55:86:6d:06:12:07:f4:aa:8f:a8:6b:5a:10:12:0b:f6:98:c3:
1b:b2:2d:81:d3:89:da:65:a4:38:ac:ff:1a:ca:b9:f8:f8:42:
ce:fa:ce:63:bb:67:dc:8d:d1:d9:3e:70:82:bb:33:bf:45:15:
9f:9c:0f:6a:f1:3e:d7:d5:ab:03:0f:41:7c:5b:cf:c0:5f:dc:
eb:9f:de:06:db:69:eb:14:b2:5c:80:f2:bf:56:03:27:72:b4:
95:76:51:c4:65:bd:81:bf:50:8f:84:d9:af:27:36:eb:e9:b8:
81:8b:52:d4:0b:d7:eb:28:43:32:d1:ee:24:85:f3:a9:f4:4d:
be:2a:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:38 2025 by rpki-client