Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/6SLd59WCqo6y-R1oCE9_VlyrARk.roa
File: 6SLd59WCqo6y-R1oCE9_VlyrARk.roa (raw, json)
Hash identifier: GNrcfFL43elVEggJEAhGrO2YLlSdFsQIfY+7eL/8fhc=
Subject key identifier: E9:22:DD:E7:D5:82:AA:8E:B2:F9:1D:68:08:4F:7F:56:5C:AB:01:19
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018B22E550DB525ACB2557E3D135772B336F
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/6SLd59WCqo6y-R1oCE9_VlyrARk.roa
Signing time: Thu 12 Oct 2023 07:58:55 +0000
ROA not before: Thu 12 Oct 2023 07:58:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.4.0/24 maxlen: 24
45.150.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:e5:50:db:52:5a:cb:25:57:e3:d1:35:77:2b:33:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Oct 12 07:58:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e922dde7d582aa8eb2f91d68084f7f565cab0119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:c1:57:a5:bb:c9:34:67:43:0c:e9:47:9e:
7a:ed:13:eb:53:47:b1:5b:dd:91:c6:ca:0b:c4:5e:
51:09:96:58:bf:09:63:a7:a9:67:56:65:05:b8:38:
9f:c0:08:4e:04:ed:ca:6d:4a:c2:98:8a:d9:4e:97:
75:d3:51:21:2b:8a:4a:96:19:8a:2c:20:b7:ce:2b:
6e:ab:15:a0:f5:a2:69:0d:f2:1b:80:35:c4:bd:3c:
d1:2e:7c:47:b1:bc:f6:a2:55:31:b8:19:40:ca:48:
15:26:a4:e3:d6:5a:68:c9:fd:5e:1e:2e:b0:bf:ca:
5d:c8:98:71:34:17:85:d0:51:3e:54:5c:86:0a:82:
f1:c9:37:da:5a:0f:37:d9:84:72:de:10:70:82:c1:
6d:e6:5f:6c:77:19:89:78:18:ba:9d:f6:c7:c3:49:
cd:30:72:83:2e:6a:66:28:07:c7:c3:31:5d:62:67:
8c:be:70:69:af:68:a6:93:06:af:04:7e:e4:8b:a6:
43:5a:2e:5f:b8:cc:63:7e:10:43:98:73:4c:27:25:
cd:62:56:83:c2:08:1b:f0:69:0b:a1:44:a2:c5:6e:
f7:58:b0:96:e5:e8:cc:25:5d:57:2f:33:7a:e0:2b:
e8:f1:97:6a:b9:87:ee:49:75:3d:c8:dc:de:40:2b:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:DD:E7:D5:82:AA:8E:B2:F9:1D:68:08:4F:7F:56:5C:AB:01:19
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/6SLd59WCqo6y-R1oCE9_VlyrARk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
45.150.7.0/24
Signature Algorithm: sha256WithRSAEncryption
26:72:96:31:e1:0a:fe:d7:e1:74:c1:40:4b:a2:30:08:c4:56:
65:76:f3:ac:a9:d7:32:ed:2b:da:75:5f:d9:05:53:9a:31:b6:
55:4d:5e:e4:6a:ce:9a:cd:e5:2d:6e:81:27:ba:1b:10:32:19:
f3:39:fe:ed:ed:d3:6c:e3:7a:ef:18:10:b7:f3:76:56:c4:0f:
91:cc:8f:fd:7d:68:73:83:8c:17:da:62:81:85:e7:21:56:38:
ed:f9:7f:00:32:76:bb:f3:cc:23:8d:7d:25:cd:34:0a:fc:29:
10:ef:dc:17:2b:de:54:65:1d:bd:97:c7:f8:bc:a6:30:cb:19:
61:e6:52:9c:eb:85:bf:94:12:90:66:5c:a7:ed:6d:f4:49:1b:
23:c1:97:6c:d5:6a:6f:6b:cd:43:64:4c:c7:96:2d:bb:11:76:
96:1d:ac:8e:91:cc:00:52:67:40:87:e5:f7:e8:d6:19:d0:32:
aa:15:4f:af:81:fb:df:78:db:90:27:93:be:6a:db:45:b8:e3:
a4:6c:d6:4e:57:61:f7:de:31:dc:dd:40:7d:47:c3:a8:a3:a5:
79:54:a4:9d:6b:44:01:34:ac:ea:8f:9d:c1:a5:48:4f:5c:86:
c6:16:8c:93:d1:1b:25:9d:8c:57:d1:0c:24:1e:2e:2b:ba:fc:
fe:04:29:6f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsi5VDbUlrLJVfj0TV3KzNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDBjNWIzZmE2YzI4ODg2MGNjYjZkOTAyMDBjYmI4ZTU3
ZGI3ZjcwHhcNMjMxMDEyMDc1ODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTIyZGRlN2Q1ODJhYThlYjJmOTFkNjgwODRmN2Y1NjVjYWIwMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL7BV6W7yTRnQwzpR5567RPrU0ex
W92RxsoLxF5RCZZYvwljp6lnVmUFuDifwAhOBO3KbUrCmIrZTpd101EhK4pKlhmK
LCC3zituqxWg9aJpDfIbgDXEvTzRLnxHsbz2olUxuBlAykgVJqTj1lpoyf1eHi6w
v8pdyJhxNBeF0FE+VFyGCoLxyTfaWg832YRy3hBwgsFt5l9sdxmJeBi6nfbHw0nN
MHKDLmpmKAfHwzFdYmeMvnBpr2imkwavBH7ki6ZDWi5fuMxjfhBDmHNMJyXNYlaD
wggb8GkLoUSixW73WLCW5ejMJV1XLzN64Cvo8ZdquYfuSXU9yNzeQCsJ+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOki3efVgqqOsvkdaAhPf1ZcqwEZMB8GA1UdIwQY
MBaAFGvQxbP6bCiIYMy22QIAy7jlfbf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlERnNfcHNLSWhnekxiWkFnREx1T1Y5dF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iNGY1ODQtZjI1Ni00Y2FiLWFkYmIt
YzQ2MjBmYWIxZjE5LzEvNlNMZDU5V0NxbzZ5LVIxb0NFOV9WbHlyQVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iNGY1ODQtZjI1Ni00Y2FiLWFkYmItYzQ2MjBmYWIxZjE5
LzEvYTlERnNfcHNLSWhnekxiWkFnREx1T1Y5dF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZYEAwQA
LZYHMA0GCSqGSIb3DQEBCwUAA4IBAQAmcpYx4Qr+1+F0wUBLojAIxFZldvOsqdcy
7SvadV/ZBVOaMbZVTV7kas6azeUtboEnuhsQMhnzOf7t7dNs43rvGBC383ZWxA+R
zI/9fWhzg4wX2mKBhechVjjt+X8AMna788wjjX0lzTQK/CkQ79wXK95UZR29l8f4
vKYwyxlh5lKc64W/lBKQZlyn7W30SRsjwZds1Wpva81DZEzHli27EXaWHayOkcwA
UmdAh+X36NYZ0DKqFU+vgfvfeNuQJ5O+attFuOOkbNZOV2H33jHc3UB9R8Ooo6V5
VKSda0QBNKzqj53BpUhPXIbGFoyT0RslnYxX0QwkHi4ruvz+BClv
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:08:56 2025 by rpki-client