Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20323034383433.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: A/ZxN6yL2O414IlbP6N1T5lIDU+6CBBotBlYstbLud8=
Subject key identifier: 2D:AA:2C:C4:2E:FC:7A:0D:C3:5E:76:E6:8D:A2:BE:0D:C2:99:86:FD
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2F6AB4F19CA8698277E4AB9DD3A107149BDEF59A
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20323034383433.roa
Signing time: Thu 08 Jun 2023 10:02:48 +0000
ROA not before: Thu 08 Jun 2023 09:57:48 +0000
ROA not after: Thu 06 Jun 2024 10:02:48 +0000
asID: 204843
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6a:b4:f1:9c:a8:69:82:77:e4:ab:9d:d3:a1:07:14:9b:de:f5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 8 09:57:48 2023 GMT
Not After : Jun 6 10:02:48 2024 GMT
Subject: CN=2DAA2CC42EFC7A0DC35E76E68DA2BE0DC29986FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:a9:26:0c:ec:cc:0e:c6:aa:de:cd:b9:ea:
d7:a0:c5:2e:40:76:86:c0:0b:23:c4:de:64:63:7f:
11:c6:a0:07:ca:a1:3b:02:b2:01:dd:18:84:68:a0:
a3:87:9b:3f:fb:a8:e2:66:89:d2:e0:83:48:12:10:
70:64:29:71:a3:49:4f:2a:cf:46:77:03:07:bd:b2:
ef:4d:47:92:13:e5:87:15:70:ec:e7:e9:eb:04:f1:
6e:3c:e5:b2:89:2a:29:bb:1b:f7:eb:64:21:ea:c2:
c8:8e:99:a3:dc:fe:ad:48:6b:ef:22:98:45:06:d3:
e4:46:76:b1:b6:d4:b0:b1:e4:dd:6b:b0:08:86:60:
78:53:89:05:db:ec:31:3a:62:69:a3:14:fd:2d:69:
57:49:12:64:99:24:00:d0:35:45:23:98:ff:ac:bc:
69:1d:70:d2:54:91:d3:21:f1:0c:33:8c:a8:db:ba:
71:a9:d9:e3:47:a5:08:e4:e5:7e:e7:a1:34:82:83:
ce:81:dd:97:36:70:72:b5:ec:8b:c6:a0:ae:1e:d3:
0c:51:f6:e7:59:95:b1:c3:37:05:5d:65:19:8b:10:
bb:fc:29:43:36:88:b8:fd:bc:cc:e6:35:4e:32:fa:
fc:15:67:15:97:21:ce:46:3d:60:ff:48:a9:87:aa:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:2C:C4:2E:FC:7A:0D:C3:5E:76:E6:8D:A2:BE:0D:C2:99:86:FD
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b3:95:d3:de:d7:44:cd:1b:52:0b:a7:8f:d0:f6:81:d6:88:
3f:40:99:2e:40:74:83:27:ce:da:d6:48:9f:73:21:34:95:d3:
d1:42:f0:a1:37:00:91:93:85:a6:52:66:70:3f:32:56:66:2b:
2f:8c:c6:9b:86:c2:a0:88:b3:96:a0:38:70:b9:39:48:42:d5:
eb:bf:aa:47:68:cf:95:e3:5b:81:0c:69:fb:5a:50:fe:43:0c:
01:40:14:d1:8f:85:73:22:5c:95:00:43:b8:74:0a:b2:56:fd:
4d:40:37:e6:03:0e:ef:40:55:54:f6:ec:8d:b8:4f:dd:64:18:
5f:54:4f:de:c3:fb:e8:17:34:e7:51:1c:7b:60:1e:5c:9b:7f:
2d:c9:23:c5:d3:7b:77:5f:a1:ea:e4:49:73:33:57:27:aa:e2:
cd:da:2f:a9:ab:8a:3d:6d:38:0d:43:ed:c0:cc:b6:8c:ee:8e:
0d:ef:36:99:f8:f9:e8:94:9e:33:68:0f:d7:35:3c:1b:6d:98:
84:9f:b9:e6:34:83:03:29:28:7f:8a:67:c0:4f:7d:40:33:59:
1c:5a:ff:d8:02:b6:30:b8:cf:ec:fb:26:40:1e:ee:b4:7b:58:
6f:88:75:2c:71:18:26:ec:ca:e8:67:84:49:e7:ae:bb:f6:9d:
89:77:03:4a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUL2q08ZyoaYJ35Kud06EHFJve9ZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA2MDgwOTU3NDhaFw0yNDA2MDYxMDAyNDhaMDMxMTAvBgNV
BAMTKDJEQUEyQ0M0MkVGQzdBMERDMzVFNzZFNjhEQTJCRTBEQzI5OTg2RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevqkmDOzMDsaq3s256tegxS5A
dobACyPE3mRjfxHGoAfKoTsCsgHdGIRooKOHmz/7qOJmidLgg0gSEHBkKXGjSU8q
z0Z3Awe9su9NR5IT5YcVcOzn6esE8W485bKJKim7G/frZCHqwsiOmaPc/q1Ia+8i
mEUG0+RGdrG21LCx5N1rsAiGYHhTiQXb7DE6YmmjFP0taVdJEmSZJADQNUUjmP+s
vGkdcNJUkdMh8QwzjKjbunGp2eNHpQjk5X7noTSCg86B3Zc2cHK17IvGoK4e0wxR
9udZlbHDNwVdZRmLELv8KUM2iLj9vMzmNU4y+vwVZxWXIc5GPWD/SKmHqga5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQULaosxC78eg3DXnbmjaK+DcKZhv0wHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzODM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAthNowDQYJKoZIhvcNAQELBQADggEBAESzldPe10TNG1ILp4/Q9oHWiD9AmS5A
dIMnztrWSJ9zITSV09FC8KE3AJGThaZSZnA/MlZmKy+MxpuGwqCIs5agOHC5OUhC
1eu/qkdoz5XjW4EMaftaUP5DDAFAFNGPhXMiXJUAQ7h0CrJW/U1AN+YDDu9AVVT2
7I24T91kGF9UT97D++gXNOdRHHtgHlybfy3JI8XTe3dfoerkSXMzVyeq4s3aL6mr
ij1tOA1D7cDMtozujg3vNpn4+eiUnjNoD9c1PBttmISfueY0gwMpKH+KZ8BPfUAz
WRxa/9gCtjC4z+z7JkAe7rR7WG+IdSxxGCbsyuhnhEnnrrv2nYl3A0o=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:06 2023 by rpki-client on console.sobornost.net