Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/6SsBnxW-3ZMhCLjHrKAR9Z9s4tk.roa
File: 6SsBnxW-3ZMhCLjHrKAR9Z9s4tk.roa (raw, json)
Hash identifier: lhxXx2VDNhl/d1tFzMQrhufrangTYGBqTMHQfiGslRQ=
Subject key identifier: E9:2B:01:9F:15:BE:DD:93:21:08:B8:C7:AC:A0:11:F5:9F:6C:E2:D9
Certificate issuer: /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial: 018456D6BB1D5F739DD7252D168E2B30A770
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/6SsBnxW-3ZMhCLjHrKAR9Z9s4tk.roa
Signing time: Tue 08 Nov 2022 10:43:43 +0000
ROA not before: Tue 08 Nov 2022 10:43:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.84.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:d6:bb:1d:5f:73:9d:d7:25:2d:16:8e:2b:30:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Validity
Not Before: Nov 8 10:43:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e92b019f15bedd932108b8c7aca011f59f6ce2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:57:94:d6:06:ec:bc:87:b9:43:37:fd:cb:
e7:b2:26:13:09:ad:ed:e0:b3:32:2f:52:14:ce:5a:
55:d6:97:3a:38:d1:0f:c7:9c:17:40:b7:d9:e7:00:
4f:39:94:86:9d:fa:34:c1:a5:96:8c:10:2c:61:bb:
43:e3:b9:bb:6c:f3:6f:23:e2:64:46:da:53:8d:a8:
c4:47:ad:96:9d:61:d2:d9:ce:ca:e6:65:74:32:78:
7b:80:a8:45:84:af:dc:f0:14:67:73:a8:4f:e9:a0:
61:55:2b:f9:f3:5b:4b:b3:9c:84:eb:7d:fd:15:d1:
6a:90:d8:d5:fe:e6:2b:e2:0a:8f:72:64:c3:f6:bf:
1f:50:7f:1c:29:ec:a3:f2:f1:e7:73:99:1e:dc:8c:
51:ef:b8:a0:77:d5:e0:e8:dd:f5:2a:4e:98:e9:2b:
2a:55:b7:fa:bc:72:3d:28:40:40:f6:c9:6d:8a:aa:
59:91:c6:fb:aa:97:56:01:30:e8:df:b7:b2:92:fd:
39:75:b5:02:3a:3a:99:03:eb:f2:9d:89:52:bb:58:
c1:a3:b5:20:5b:c5:f2:4c:20:f2:65:26:0b:2b:89:
c6:d4:1a:ff:3c:3e:6e:41:70:58:5c:60:a2:99:e1:
1e:07:95:ad:9e:79:f7:51:21:4e:2b:d6:12:5e:30:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2B:01:9F:15:BE:DD:93:21:08:B8:C7:AC:A0:11:F5:9F:6C:E2:D9
X509v3 Authority Key Identifier:
keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/6SsBnxW-3ZMhCLjHrKAR9Z9s4tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dc:b9:e6:6f:0e:b0:0b:3e:fb:1d:97:06:8e:68:e5:90:fa:
45:36:c7:26:30:11:49:7e:bb:15:f0:a0:b3:5e:35:96:21:2b:
58:98:63:3f:8f:45:64:1b:e6:df:b6:9b:0a:b1:88:af:a8:7a:
f7:91:86:33:21:65:1c:96:d9:10:42:3b:0b:d6:d3:2e:fb:f2:
cc:12:6d:50:fd:3d:7c:b9:fa:ae:a7:6c:a5:39:1b:f0:d8:bf:
46:09:e4:b8:b8:b6:e9:86:4c:6b:f1:bd:a3:7a:40:a3:36:8b:
4a:02:19:85:fc:e4:16:22:3d:4f:81:17:bf:5f:b6:e0:9f:bc:
c3:f7:cb:c1:07:0c:7e:a9:78:43:59:60:13:40:02:7b:c5:bf:
12:72:4b:a2:3b:75:74:50:25:42:f8:0e:0b:37:92:c1:59:61:
90:19:b6:50:3f:0e:8d:80:52:ec:27:50:62:67:cc:16:6d:0d:
9d:c6:55:24:ab:07:be:a5:ad:0b:44:af:b9:25:05:5d:37:2a:
e1:76:37:ae:95:92:16:e4:8a:e6:48:ce:64:45:af:4e:7f:83:
d0:06:04:12:d1:bf:e4:94:c9:ff:b2:cd:c0:38:26:b1:5a:07:
4f:83:3e:95:8a:fd:4c:57:5b:2a:58:90:a3:b0:ae:30:3a:ca:
6d:2b:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:09:43 2025 by rpki-client