Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/6SrsTDpwYE9OdjiKErndxUckD1k.roa
File: 6SrsTDpwYE9OdjiKErndxUckD1k.roa (raw, json)
Hash identifier: bdqA/o66Dunhgfq2YlW5IBFIU+5WpoR12uMpI+Qrbm0=
Subject key identifier: E9:2A:EC:4C:3A:70:60:4F:4E:76:38:8A:12:B9:DD:C5:47:24:0F:59
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018DD13128108DF719F7D8960949CC7D7C5D
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/6SrsTDpwYE9OdjiKErndxUckD1k.roa
Signing time: Thu 22 Feb 2024 14:21:16 +0000
ROA not before: Thu 22 Feb 2024 14:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.112.0/24 maxlen: 24
185.128.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:31:28:10:8d:f7:19:f7:d8:96:09:49:cc:7d:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Feb 22 14:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e92aec4c3a70604f4e76388a12b9ddc547240f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:09:ac:5f:0c:49:11:0a:02:e5:28:57:3a:
3b:5a:86:f3:81:90:8d:8b:07:a4:b0:eb:f2:9c:99:
d8:b5:fa:d0:24:d3:26:cd:b5:e7:e3:61:87:02:e4:
5d:c8:93:c2:d1:33:9b:a3:45:81:4f:1d:6f:20:24:
5d:29:bf:0a:93:76:71:bd:48:19:39:27:a9:0b:30:
b8:42:f5:f8:c1:f3:a6:71:d7:ff:04:12:6b:03:d8:
bb:11:f2:6c:ca:b7:c3:24:08:b8:11:d2:47:49:24:
c6:b1:44:3a:4b:8a:c2:30:fa:05:30:48:23:fe:21:
ee:d6:1c:4d:e0:89:90:d4:7e:f7:39:83:10:4a:f1:
5a:5b:d2:da:52:47:8d:f2:ab:8c:61:b9:5e:37:a2:
ed:08:97:c0:48:4c:37:42:4e:18:2e:91:ce:d8:85:
ac:15:58:c8:ec:3a:5d:37:50:57:80:fa:79:d8:e7:
82:2a:29:dd:3f:4f:16:30:c2:06:ee:fe:8b:e9:f9:
f0:56:db:8c:15:62:51:22:e0:bd:08:54:30:9a:f7:
5e:eb:15:03:a1:1f:ac:8a:a0:2c:a1:8f:46:36:90:
3c:6a:68:1c:1f:d1:50:0e:a8:32:7f:5f:a2:01:4a:
99:86:5a:fe:69:c9:89:57:5c:d4:ed:f9:c2:21:75:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:EC:4C:3A:70:60:4F:4E:76:38:8A:12:B9:DD:C5:47:24:0F:59
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/6SrsTDpwYE9OdjiKErndxUckD1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.112.0/24
185.128.41.0/24
Signature Algorithm: sha256WithRSAEncryption
52:46:f3:72:3e:b8:46:65:1a:c6:63:37:12:57:2a:f7:2d:fa:
8a:5c:b3:e7:9e:e7:6d:2f:a8:37:1e:a2:76:9d:42:6c:1c:81:
e7:71:e4:f9:16:8c:84:9e:3b:f4:a8:24:48:01:56:a0:90:a3:
92:14:53:38:fa:60:fe:13:59:db:82:1a:e6:07:52:f4:5a:dd:
be:11:00:56:94:40:e7:2d:b1:3c:71:eb:a9:dd:79:5d:d9:73:
67:ce:9b:85:22:14:49:d3:f9:bf:1f:b7:f4:b3:2e:1c:e1:9b:
28:e8:c4:32:11:3b:26:b9:e7:4a:4a:22:aa:8b:67:fb:15:e2:
21:c2:b5:41:11:69:22:b6:ad:b4:e3:d3:19:35:14:2a:59:6c:
bf:39:e6:8c:1c:68:56:67:94:33:1b:2f:c2:1a:e4:a0:0f:67:
85:db:77:a6:7c:32:58:c6:69:ff:5c:e2:69:13:0c:f0:fb:75:
c7:e3:80:9e:6a:c0:a8:95:dd:1b:8b:a6:4c:e8:c7:d2:ce:fc:
37:90:b4:95:fa:17:35:fe:fc:43:cf:d7:0e:a8:b6:d4:0e:1b:
57:99:8f:1c:5f:f3:66:00:9d:59:69:6a:e0:c1:e2:73:3b:49:
5f:1d:c4:7e:80:8a:37:82:31:32:ff:96:2c:96:d3:db:59:fc:
63:2d:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:29 2025 by rpki-client