Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/K16lxP-HB75dkYA4FzjFmIhiATM.roa
File: K16lxP-HB75dkYA4FzjFmIhiATM.roa (raw, json)
Hash identifier: fJgJ5OSn3LdKsgTNZCFn0z8HuhVTNmNEEI4vx5jpuy8=
Subject key identifier: 2B:5E:A5:C4:FF:87:07:BE:5D:91:80:38:17:38:C5:98:88:62:01:33
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 08112D70
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/K16lxP-HB75dkYA4FzjFmIhiATM.roa
Signing time: Fri 25 Feb 2022 15:26:43 +0000
ROA not before: Fri 25 Feb 2022 15:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.150.4.0/24 maxlen: 24
45.150.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135343472 (0x8112d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Feb 25 15:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b5ea5c4ff8707be5d9180381738c59888620133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:f5:1a:0d:61:3a:07:2f:79:62:65:34:f1:
b8:78:23:3a:36:51:7e:39:dd:63:0f:6f:3a:ae:8d:
39:24:d4:3d:cd:50:61:c4:38:57:ae:ac:0b:81:3e:
30:8c:ab:00:ed:77:4a:18:c1:14:0b:02:9d:cb:95:
30:8b:f1:33:a8:00:ae:57:c1:33:0f:b3:f5:54:ae:
f2:0e:c8:0f:76:48:83:e3:75:c4:e3:65:a0:22:a4:
97:e0:67:53:b3:6b:ba:3b:9c:91:ac:52:49:aa:d7:
e9:88:ad:45:4a:62:ee:0c:f6:95:01:9b:b3:92:f5:
88:a1:90:14:53:48:11:3a:81:b5:2c:54:44:0e:da:
17:15:10:bd:9c:8d:fb:d4:fc:71:cc:fb:31:2b:d0:
5a:66:c8:f3:77:0f:e1:bc:a6:45:5f:fc:47:e9:90:
93:36:00:6e:bf:15:01:89:62:59:47:d5:a2:4e:00:
31:74:3f:90:2e:9f:a9:c6:6d:07:09:03:29:c4:4b:
60:60:50:d1:5a:fa:a6:11:d5:a0:b3:6a:d0:55:88:
8a:95:60:e1:0f:b4:62:6a:9b:c3:7b:a5:e5:9d:1c:
4e:5e:52:92:7b:14:0d:a7:5e:4f:8e:e5:c4:f0:c6:
92:95:e0:db:ea:8a:b7:cc:c8:ab:ca:38:1f:71:9c:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5E:A5:C4:FF:87:07:BE:5D:91:80:38:17:38:C5:98:88:62:01:33
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/K16lxP-HB75dkYA4FzjFmIhiATM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:ce:18:60:d5:de:55:d1:cc:f8:dc:b2:3d:2e:0e:a6:53:08:
fb:bb:65:9f:97:39:20:17:6a:f1:e7:5a:1e:47:95:0d:bf:7c:
82:30:63:6f:74:31:b0:30:4b:07:5f:b6:84:79:e7:ac:56:7f:
01:43:0b:f5:88:16:6c:b5:e7:c3:4a:bd:95:02:64:61:6b:32:
a8:af:04:c4:69:54:e1:19:12:2c:6f:53:56:e5:96:32:59:f4:
98:b2:2e:51:85:2c:88:e9:24:61:62:23:c4:9b:ab:e2:81:2d:
86:77:78:35:f1:9c:e4:ca:b8:75:9a:69:1d:2f:fd:a0:51:b9:
3c:9d:f2:17:0f:0f:b7:cc:50:18:6f:1f:29:00:71:df:2d:92:
33:1b:e5:37:20:7f:b1:86:73:8b:86:58:cd:b7:d4:78:84:30:
ce:1c:dc:f3:85:0c:6a:6a:e2:e3:1c:a8:34:fb:17:0c:1c:7c:
a1:e8:1b:00:06:61:78:c5:ac:05:6e:6b:42:64:ea:bd:80:a1:
83:fc:ca:57:12:67:ab:92:b8:dc:f5:64:ef:77:d0:43:b1:01:
ba:dd:db:e7:15:94:89:86:e4:a2:91:07:0d:91:c9:14:a8:24:
9b:99:f3:0c:70:ea:13:52:2a:de:5f:10:54:72:5e:3d:5e:7c:
cb:74:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:10:38 2025 by rpki-client