Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/MCjCdCjOfIoLeIZG-rYHeyb2NQY.roa
File: MCjCdCjOfIoLeIZG-rYHeyb2NQY.roa (raw, json)
Hash identifier: dcRyEAC3qotO5uEms3elL9p/GQT0S52w/xfaZAFGI58=
Subject key identifier: 30:28:C2:74:28:CE:7C:8A:0B:78:86:46:FA:B6:07:7B:26:F6:35:06
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 01856D417DF994EA3D2AD27ED6DF6158A77F
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/MCjCdCjOfIoLeIZG-rYHeyb2NQY.roa
Signing time: Sun 01 Jan 2023 12:14:46 +0000
ROA not before: Sun 01 Jan 2023 12:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.4.0/24 maxlen: 24
45.150.6.0/24 maxlen: 24
45.150.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:7d:f9:94:ea:3d:2a:d2:7e:d6:df:61:58:a7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 1 12:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3028c27428ce7c8a0b788646fab6077b26f63506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:15:18:59:ca:0d:41:29:51:5d:19:ce:4d:79:
9b:d2:f5:9a:a0:d6:5d:51:c5:c7:76:1f:2d:26:ea:
b7:4b:f4:ff:ac:99:e1:d3:40:7c:ea:6f:85:89:14:
3a:eb:eb:ce:1d:ad:04:26:5a:f8:55:ba:49:68:c9:
12:17:03:8f:9a:99:5d:25:73:b6:d3:84:33:ab:bb:
d2:af:c1:7c:35:3a:a3:fa:4b:a2:cc:29:ed:1a:86:
2f:54:07:aa:77:db:63:65:d4:46:58:c6:d9:ec:82:
ab:bb:37:33:84:29:7c:3c:a8:93:91:25:6e:6a:9b:
2b:01:8d:13:30:69:24:c3:6b:c8:e7:79:6b:c3:01:
a9:40:d6:07:de:0d:f8:3f:50:88:b5:44:7e:3b:0e:
f3:60:b8:d2:54:b0:61:a1:ae:dd:42:d4:f0:2b:41:
96:99:55:e6:6b:93:17:69:2e:53:3f:65:ba:e1:cb:
e7:67:18:10:d3:1d:23:98:da:33:d7:f5:f2:31:6f:
81:85:06:43:f4:3c:e7:b8:fa:d8:a3:5c:36:4a:fc:
d2:c1:36:0d:fa:71:da:a4:a2:d2:8f:ff:59:4c:06:
0c:09:8f:36:9d:72:a1:7e:b6:a6:ce:02:fe:a7:94:
1a:05:75:5e:a0:42:fc:f9:a2:0c:7a:a7:f5:37:4e:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:C2:74:28:CE:7C:8A:0B:78:86:46:FA:B6:07:7B:26:F6:35:06
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/MCjCdCjOfIoLeIZG-rYHeyb2NQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
45.150.6.0/23
Signature Algorithm: sha256WithRSAEncryption
80:25:13:ab:d8:55:3f:3e:a6:18:ea:3c:5e:53:0b:78:fb:9d:
19:cf:6a:68:a3:ad:06:a1:03:82:66:5c:c1:00:02:8a:2a:c6:
85:b7:af:6a:e8:a7:da:21:c6:da:73:27:b3:06:12:17:70:1d:
b2:de:ac:8c:df:62:7d:54:e8:fb:27:10:bf:d8:03:ea:a3:bc:
71:58:56:fd:7e:bc:cc:8c:fa:e8:de:70:57:d6:fa:d8:06:20:
81:87:6e:d0:bb:e0:44:f8:79:cc:d9:ff:45:62:4e:ff:98:73:
ff:c7:84:7a:38:79:3b:c6:39:0a:8c:75:3c:fb:64:35:26:c7:
15:3f:45:8f:ac:1a:05:95:c4:e5:f2:8e:f7:ac:c0:20:83:b0:
0c:51:af:fe:68:a2:f8:28:76:a3:6d:a8:af:7d:cc:54:55:53:
0a:44:88:c7:a5:4e:08:fb:1c:c1:e1:5c:7a:3c:e4:13:44:16:
77:1b:34:fc:de:e6:0e:30:72:69:71:82:3c:f6:f9:56:d5:57:
ad:13:f2:a6:8b:b3:3b:44:98:1a:f5:53:13:af:27:ee:a9:c4:
d8:dd:c3:dc:d5:91:ad:e6:91:8f:24:2d:b9:47:87:bf:4d:df:
80:36:df:4d:2b:16:21:af:c8:04:ec:f7:0c:27:2e:44:e4:36:
84:ba:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:56:11 2025 by rpki-client