Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/TURAFtAwWqQ2PGhKcLJsVId179s.roa
File: TURAFtAwWqQ2PGhKcLJsVId179s.roa (raw, json)
Hash identifier: Wi9oN42+/MQRvu9QnmWs4fT4QFJhCjNjffok1T8e0Sw=
Subject key identifier: 4D:44:40:16:D0:30:5A:A4:36:3C:68:4A:70:B2:6C:54:87:75:EF:DB
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018BFB5AEBBA8D6FD4A66C410DBC8622CEA6
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/TURAFtAwWqQ2PGhKcLJsVId179s.roa
Signing time: Thu 23 Nov 2023 08:45:21 +0000
ROA not before: Thu 23 Nov 2023 08:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.7.0/24 maxlen: 24
45.150.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:5a:eb:ba:8d:6f:d4:a6:6c:41:0d:bc:86:22:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Nov 23 08:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d444016d0305aa4363c684a70b26c548775efdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:9a:be:b1:01:b7:79:fb:9f:c7:3d:c0:0c:
7a:ad:de:54:62:3f:cd:cc:d3:e8:f9:4a:20:79:88:
ee:5e:e4:1b:29:f4:51:05:5a:a5:b9:3a:b0:a6:14:
e2:f6:ea:82:1e:03:40:dc:63:fc:d8:a3:ca:0e:3b:
62:ea:82:63:0b:9e:04:97:a9:bc:d1:3b:d6:89:5c:
2c:9a:eb:dd:70:e2:e7:e5:42:42:b5:54:0e:36:fa:
3f:97:72:fd:5b:e8:00:04:f5:08:a6:2c:b1:dc:2e:
98:4e:a9:18:ab:3d:09:a2:29:0d:9a:14:37:fa:e7:
c2:1d:00:8f:b1:d4:c7:27:54:e4:3b:51:9c:bf:c0:
97:02:c2:0a:2c:be:4e:a8:18:b1:a3:1a:ac:34:7a:
d9:21:d2:95:53:a8:1e:09:d2:f0:7f:4c:c1:9a:c1:
da:ad:35:8c:8b:54:d3:46:43:a9:c5:14:7c:7a:95:
37:2b:ff:b3:01:89:88:16:5a:ba:d9:2a:69:7d:20:
65:74:ff:00:9b:4f:05:bd:bd:92:6a:57:41:a9:b0:
f4:46:97:05:19:c7:2d:6b:ee:ed:2c:60:f3:8b:45:
68:21:28:a7:ff:97:a7:d3:f8:8e:04:aa:a2:56:30:
bf:2f:e2:3a:69:0a:f8:93:6d:9d:4b:50:9b:19:96:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:40:16:D0:30:5A:A4:36:3C:68:4A:70:B2:6C:54:87:75:EF:DB
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/TURAFtAwWqQ2PGhKcLJsVId179s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/23
Signature Algorithm: sha256WithRSAEncryption
95:df:a1:ba:6d:bb:e9:1f:d7:4f:ff:dc:37:46:b2:be:79:bd:
fe:3f:af:83:e2:25:17:d7:2f:8e:f1:0d:6d:59:9a:d8:7f:34:
d1:e1:ec:df:f7:bd:53:94:09:f5:be:e8:90:1b:81:ea:eb:b7:
4b:51:03:9a:ac:ef:dc:14:34:0e:92:31:a8:05:5e:65:13:74:
e4:0f:16:fc:b3:86:b4:ef:a3:2e:50:c8:51:e2:e1:2e:10:f3:
66:87:d5:57:12:91:c8:45:12:bd:01:ab:73:31:69:7a:c7:07:
68:de:de:3f:fa:48:28:eb:69:13:47:79:14:f3:22:56:2d:61:
a1:9c:65:e4:a0:24:27:d1:97:d4:cc:22:86:18:4d:1b:e7:79:
fc:7d:17:83:5b:e6:cf:09:78:26:ab:d1:ec:4b:72:49:df:b9:
73:90:71:6d:7d:14:a6:2e:0a:15:e5:50:ab:8d:a2:72:a7:db:
e2:ef:03:2f:7a:93:14:d6:df:1a:60:42:2e:cb:c4:5e:4b:53:
d7:34:55:80:92:e4:35:0f:da:32:27:60:82:f1:2f:04:d7:39:
e8:40:7e:a2:c2:67:15:4f:cc:32:69:76:66:8a:52:e2:f3:7f:
e0:2a:18:2a:4b:34:ba:a8:fa:2d:55:f2:5a:2b:86:c3:6b:5d:
11:c2:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:45:34 2025 by rpki-client