Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/0C6iM11GyXSY8S5-w8YzyMwIFes.roa
File: 0C6iM11GyXSY8S5-w8YzyMwIFes.roa (raw, json)
Hash identifier: QnzHEn+0LsrOImtIexyre2yWUBKN2KPPnUrc84ODBR0=
Subject key identifier: D0:2E:A2:33:5D:46:C9:74:98:F1:2E:7E:C3:C6:33:C8:CC:08:15:EB
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018CC94E6BFBC2AB0444D0C9D67C73F0A7C9
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/0C6iM11GyXSY8S5-w8YzyMwIFes.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 45.150.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6b:fb:c2:ab:04:44:d0:c9:d6:7c:73:f0:a7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d02ea2335d46c97498f12e7ec3c633c8cc0815eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:56:5d:fe:0a:40:1d:da:60:9b:73:01:e0:
dc:83:16:9a:10:03:a3:3f:11:57:af:d3:64:95:15:
68:4f:8f:60:26:12:f5:2a:c9:c4:3f:23:f4:45:0a:
ef:8b:c0:f8:89:86:15:3a:22:22:ab:c0:5a:bf:a3:
53:5b:76:99:13:b6:47:57:65:68:6e:d2:c2:e4:0b:
f6:54:07:8d:d1:03:e0:07:aa:71:2c:bb:92:10:3e:
01:05:b3:80:97:f2:02:86:03:50:c4:a3:d8:9f:c1:
41:d6:ca:2e:11:9e:f7:86:e4:e9:6e:96:50:be:d8:
82:dd:c9:1d:6f:9e:3b:1e:19:d9:86:bb:4c:96:51:
d1:f2:ba:57:c4:77:b8:70:95:11:0b:96:0a:79:bf:
fe:b4:a5:56:de:c6:07:1d:c2:75:63:74:07:5c:39:
82:93:7c:89:12:20:2b:dc:8a:4b:53:a1:1a:b4:63:
6a:a1:f0:2a:84:cd:d9:7f:7a:73:df:77:25:40:17:
ae:ca:88:8a:99:68:c3:a9:db:ef:65:47:d1:c1:43:
91:5d:17:9e:cb:d0:7c:55:bb:f1:d5:f3:f6:5d:03:
09:26:d6:bb:8d:bb:2d:b1:bf:14:77:1a:fa:5c:bc:
c0:3d:0e:07:30:9c:5d:7f:c7:1e:7e:52:dd:b9:13:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:A2:33:5D:46:C9:74:98:F1:2E:7E:C3:C6:33:C8:CC:08:15:EB
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/0C6iM11GyXSY8S5-w8YzyMwIFes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.5.0/24
Signature Algorithm: sha256WithRSAEncryption
09:90:7d:ba:0c:56:15:53:dd:e6:6c:de:6c:76:cc:fa:06:0c:
20:00:2d:7f:92:de:1c:3b:d6:d6:d4:0a:10:83:0d:d7:ef:54:
c8:a4:58:a9:e8:18:41:d8:6d:e4:bc:00:11:4e:71:c2:9d:4a:
60:96:69:2f:7f:14:0d:76:15:cc:2e:cb:29:25:dd:24:43:91:
9d:ea:af:cb:5f:81:c1:cb:da:43:67:bc:4d:8e:71:92:b9:8d:
5c:c2:64:f1:5b:8d:e2:af:e2:2b:49:4a:a7:8e:d5:f7:30:ca:
b4:9c:7c:8a:02:6d:7c:dc:83:ab:1f:db:b7:49:2f:ba:8c:9c:
90:c6:53:60:5c:29:0e:69:c7:6f:34:44:1f:ff:8c:04:3a:eb:
db:c4:82:9c:54:6f:e1:a4:12:fa:28:e4:84:89:c5:97:63:9b:
51:ec:5c:52:83:37:ae:f9:44:8d:4e:b7:e2:0e:36:d4:9f:a1:
9f:4f:a2:e6:b2:f1:0c:15:f9:69:99:c2:10:73:5f:b2:79:bd:
6c:6a:1a:0f:eb:a5:a9:7d:47:15:fb:ec:0c:f3:a9:1f:29:25:
9a:85:e7:c1:2d:4c:a7:2b:f2:f7:d8:d1:cd:06:ca:54:75:ea:
5f:d6:7f:82:c2:b1:b8:ff:81:f6:be:41:cf:5f:67:ef:c5:c2:
64:00:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:52:38 2025 by rpki-client