Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/5dC1Khbckc0wM6Uv-yBzD6-6IEI.roa
File: 5dC1Khbckc0wM6Uv-yBzD6-6IEI.roa (raw, json)
Hash identifier: 3FbZhhHsnlyanOh1GgXi6PUVCoRefwVdHLxGG9aq4wc=
Subject key identifier: E5:D0:B5:2A:16:DC:91:CD:30:33:A5:2F:FB:20:73:0F:AF:BA:20:42
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018CC94E6B1914BDD74F162D04809A339FAB
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/5dC1Khbckc0wM6Uv-yBzD6-6IEI.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.150.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6b:19:14:bd:d7:4f:16:2d:04:80:9a:33:9f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d0b52a16dc91cd3033a52ffb20730fafba2042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:ac:8f:bd:4a:eb:d0:fc:d9:b5:5c:5c:55:
db:10:68:e7:38:d5:e3:84:86:c6:66:90:24:ee:0e:
68:7e:f3:fa:01:f3:c9:f4:84:42:39:44:74:52:df:
4b:8c:72:c7:6a:9c:1a:49:93:a5:cf:22:0e:09:e7:
46:26:0c:65:80:fd:2e:b6:31:f2:97:4a:f3:15:08:
67:06:ef:4b:7e:fe:36:6a:13:4c:83:a9:50:a9:8c:
2e:57:b8:02:21:55:ff:33:d1:7f:0e:ce:d0:ab:0b:
25:d2:49:27:01:07:21:32:94:85:e2:72:f9:de:f4:
bd:84:5b:91:1e:fe:36:6c:1c:49:0d:f3:98:af:6d:
8e:db:6c:b3:2c:cb:99:6d:a1:55:57:b7:1b:f1:62:
c4:95:3c:16:a5:12:80:ee:57:87:52:0c:a9:3c:ff:
45:58:a5:3e:43:8b:5b:bb:14:3c:c3:15:6f:d3:8e:
1b:e4:27:a1:f5:59:ae:7d:1a:51:54:12:7d:a5:5a:
22:12:47:2b:21:73:d3:9d:02:0b:99:6d:01:a9:0d:
6e:00:8a:16:e8:e7:6c:00:66:a3:22:7f:3f:24:79:
a6:7f:e7:c3:fc:fa:b0:ca:f4:23:c7:3b:e6:83:4d:
1d:5a:08:ec:19:1c:fc:37:7c:5f:74:5f:1e:4d:45:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:B5:2A:16:DC:91:CD:30:33:A5:2F:FB:20:73:0F:AF:BA:20:42
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/5dC1Khbckc0wM6Uv-yBzD6-6IEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
36:29:8f:16:03:de:2b:33:3c:89:76:d9:05:ca:34:bc:ef:ea:
cc:57:b4:4e:1f:97:fc:bb:5b:55:bb:88:ae:67:99:a7:36:f5:
08:02:a6:6f:38:f5:6a:b6:fa:f3:97:9f:96:25:cb:d2:85:16:
f0:71:74:29:2a:ff:c9:90:cf:e3:a8:d3:1e:c2:bc:d7:80:6f:
a9:2c:d5:7c:74:6d:db:f5:67:85:1d:cb:da:83:b5:3e:9b:00:
dc:3a:70:14:04:fc:50:88:cc:dc:86:93:20:e4:d5:24:ca:ab:
ae:6a:30:64:66:f7:e6:cc:28:c7:06:0a:1d:54:97:6a:63:b7:
14:7d:76:7a:e0:6c:08:4d:ff:8b:19:e2:05:24:a8:f7:86:d1:
d3:f2:15:5f:58:35:8b:14:a4:22:7b:54:d6:12:a0:f2:53:15:
3d:82:3d:42:ba:0d:20:84:9f:c2:32:58:1c:c3:0e:05:56:bf:
a0:e8:18:ec:90:3e:70:97:0c:ff:cb:f5:b7:c1:be:e8:24:cc:
be:c1:92:49:23:a3:98:7a:e5:00:c4:69:2a:b5:e7:24:16:0a:
a7:9a:b4:30:ee:fd:9b:d7:c5:ff:ee:3a:a3:9d:1a:f9:fd:48:
f4:fb:a4:02:5c:02:4a:07:15:93:b9:c6:e7:4a:1b:c9:65:05:
f4:95:b7:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTmsZFL3XTxYtBICaM5+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDBjNWIzZmE2YzI4ODg2MGNjYjZkOTAyMDBjYmI4ZTU3
ZGI3ZjcwHhcNMjQwMTAyMDgzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWQwYjUyYTE2ZGM5MWNkMzAzM2E1MmZmYjIwNzMwZmFmYmEyMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdSsj71K69D82bVcXFXbEGjnONXj
hIbGZpAk7g5ofvP6AfPJ9IRCOUR0Ut9LjHLHapwaSZOlzyIOCedGJgxlgP0utjHy
l0rzFQhnBu9Lfv42ahNMg6lQqYwuV7gCIVX/M9F/Ds7Qqwsl0kknAQchMpSF4nL5
3vS9hFuRHv42bBxJDfOYr22O22yzLMuZbaFVV7cb8WLElTwWpRKA7leHUgypPP9F
WKU+Q4tbuxQ8wxVv044b5Ceh9VmufRpRVBJ9pVoiEkcrIXPTnQILmW0BqQ1uAIoW
6OdsAGajIn8/JHmmf+fD/PqwyvQjxzvmg00dWgjsGRz8N3xfdF8eTUWJCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXQtSoW3JHNMDOlL/sgcw+vuiBCMB8GA1UdIwQY
MBaAFGvQxbP6bCiIYMy22QIAy7jlfbf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlERnNfcHNLSWhnekxiWkFnREx1T1Y5dF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iNGY1ODQtZjI1Ni00Y2FiLWFkYmIt
YzQ2MjBmYWIxZjE5LzEvNWRDMUtoYmNrYzB3TTZVdi15QnpENi02SUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iNGY1ODQtZjI1Ni00Y2FiLWFkYmItYzQ2MjBmYWIxZjE5
LzEvYTlERnNfcHNLSWhnekxiWkFnREx1T1Y5dF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZYGMA0G
CSqGSIb3DQEBCwUAA4IBAQA2KY8WA94rMzyJdtkFyjS87+rMV7ROH5f8u1tVu4iu
Z5mnNvUIAqZvOPVqtvrzl5+WJcvShRbwcXQpKv/JkM/jqNMewrzXgG+pLNV8dG3b
9WeFHcvag7U+mwDcOnAUBPxQiMzchpMg5NUkyquuajBkZvfmzCjHBgodVJdqY7cU
fXZ64GwITf+LGeIFJKj3htHT8hVfWDWLFKQie1TWEqDyUxU9gj1Cug0ghJ/CMlgc
ww4FVr+g6BjskD5wlwz/y/W3wb7oJMy+wZJJI6OYeuUAxGkqteckFgqnmrQw7v2b
18X/7jqjnRr5/Uj0+6QCXAJKBxWTucbnShvJZQX0lbcX
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:09:14 2025 by rpki-client