Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e20313937363434.roa
File: 34352e3133322e3231372e302f32342d3234203d3e20313937363434.roa (raw, json)
Hash identifier: OdOfbl2GfObw5n1OvVg95Uff81NmW8pG3lvbBCmYFxQ=
Subject key identifier: E7:24:FC:D3:A5:19:6E:11:FD:C8:52:AA:CC:82:90:0C:BD:05:88:78
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 541C1B679C07F70D078B170EBC69CC9A35AAA1F6
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e20313937363434.roa
Signing time: Wed 02 Aug 2023 13:18:49 +0000
ROA not before: Wed 02 Aug 2023 13:13:49 +0000
ROA not after: Wed 31 Jul 2024 13:18:49 +0000
asID: 197644
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1c:1b:67:9c:07:f7:0d:07:8b:17:0e:bc:69:cc:9a:35:aa:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 2 13:13:49 2023 GMT
Not After : Jul 31 13:18:49 2024 GMT
Subject: CN=E724FCD3A5196E11FDC852AACC82900CBD058878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:bf:c0:0d:29:f7:b4:01:0d:8b:62:6a:71:
91:b4:6e:77:b5:23:3f:14:09:32:17:13:eb:13:ba:
74:7f:e5:39:c5:d6:2b:1a:22:4d:c0:80:bc:26:87:
cc:6e:3b:e6:1a:ae:cb:8c:86:eb:5b:82:97:9e:47:
93:a0:8f:8f:60:ce:30:e6:27:55:25:2c:28:6a:1c:
37:cd:44:1e:e8:d8:5a:3a:20:bf:84:b5:fd:e9:21:
b1:c0:2d:23:6d:ec:ae:b4:6a:0c:b9:85:f2:ae:c1:
d4:83:51:0d:d3:f9:54:7b:cb:94:49:30:b3:d3:eb:
23:14:94:93:b6:56:92:34:88:c5:49:3f:88:6e:5a:
46:8e:2f:e6:df:2f:08:3d:a3:61:3f:a7:6a:13:bc:
76:a1:af:f9:43:f3:58:e7:42:da:a2:04:3f:73:aa:
25:e7:cf:ee:13:3c:7c:0e:25:69:a2:5f:c4:18:da:
fe:72:f4:72:53:ea:53:a2:d3:82:fa:6b:10:d2:69:
92:66:9a:03:49:43:ed:e6:28:39:4f:db:5e:97:2d:
d3:0a:39:00:7b:9e:2a:49:a5:6f:e5:c9:54:e3:6b:
33:96:1d:b7:f7:ad:8d:ff:16:e2:fb:32:34:55:66:
05:9c:32:22:77:6c:5c:ef:9b:a5:60:85:77:3d:28:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:FC:D3:A5:19:6E:11:FD:C8:52:AA:CC:82:90:0C:BD:05:88:78
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231372e302f32342d3234203d3e20313937363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:43:1f:86:77:cc:86:5e:4b:48:ad:e2:bd:a6:91:a9:70:61:
d6:32:8f:ca:99:b8:7f:27:44:57:d3:dd:a7:23:12:5d:aa:7c:
bf:50:99:ea:d8:6b:78:ae:4f:4c:96:cb:91:f2:a8:96:8f:3a:
88:a6:3a:b1:85:b3:a7:19:90:68:70:1c:e2:41:2d:e9:fe:2a:
ea:5c:7c:60:94:57:49:3f:33:67:5e:26:6b:e8:8f:b8:49:83:
8f:47:6e:7e:8c:52:0b:8a:4c:8c:03:1f:47:bc:2c:88:57:06:
ce:fe:03:93:57:c6:8d:17:71:65:43:9e:ba:38:e8:a5:76:32:
6b:dc:3c:f0:24:00:c0:37:33:85:af:79:63:de:08:c5:84:28:
32:d2:35:46:63:47:32:0b:a0:9e:13:d8:a4:c2:ec:16:84:d6:
c2:61:8b:26:84:e0:af:fd:05:a7:91:33:f3:ca:6e:3c:06:cf:
64:0b:57:79:57:cf:ce:89:cf:f5:bf:f5:fd:80:9e:aa:a1:bb:
b7:b2:ce:b9:0f:d0:69:91:87:6d:00:4e:1e:f8:b2:18:57:d9:
46:d1:55:96:f3:e2:66:36:df:a3:55:ae:f4:43:a4:54:82:7c:
9c:85:8c:43:3d:f8:3c:9c:81:5c:84:98:0c:47:e1:84:80:ad:
c1:6b:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:06 2023 by rpki-client on console.sobornost.net