Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/USNf7a5S3gRTGbgpvm5H4sIR2cQ.roa
File: USNf7a5S3gRTGbgpvm5H4sIR2cQ.roa (raw, json)
Hash identifier: oLiDKyildBLWmsNRt6riSUfyvi9yiL8+4e4NjtdLCds=
Subject key identifier: 51:23:5F:ED:AE:52:DE:04:53:19:B8:29:BE:6E:47:E2:C2:11:D9:C4
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 0852F933
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/USNf7a5S3gRTGbgpvm5H4sIR2cQ.roa
Signing time: Fri 25 Mar 2022 17:06:22 +0000
ROA not before: Fri 25 Mar 2022 17:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.150.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139655475 (0x852f933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Mar 25 17:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51235fedae52de045319b829be6e47e2c211d9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:7a:86:d1:66:d6:ee:64:bb:3c:0d:a5:cd:
dc:25:e3:57:c4:20:c1:e6:8a:04:23:80:5e:7e:6b:
1d:ca:b0:f1:c3:75:d3:1f:4f:20:8f:fa:7d:e7:bb:
ae:59:ae:a1:e0:d8:34:8d:22:5b:e7:4f:c7:f2:0c:
ba:f8:42:83:0e:fe:e6:41:c1:2a:24:23:95:af:bd:
c7:61:e7:fc:91:11:38:40:55:a2:5b:9e:d8:80:9f:
f1:71:9e:b2:f1:65:e9:ae:a5:54:61:eb:49:a9:1f:
3a:66:0b:99:e1:79:14:ad:ae:e7:c2:48:a6:21:aa:
91:f4:1f:ea:44:7c:b0:1e:b5:9e:37:c3:1e:b1:1b:
04:a0:84:65:8e:38:b8:04:0b:cf:79:a3:76:26:4f:
1a:b2:48:f5:23:6b:a8:ce:1d:f4:69:02:0d:85:cd:
a3:96:54:82:54:44:4a:cb:6d:25:04:92:90:57:94:
8f:97:bf:3c:9d:2d:dc:33:18:48:33:cf:9e:10:2d:
d9:70:f2:a7:ca:66:1d:28:cc:26:ee:ee:1f:fa:75:
3e:23:26:95:80:74:74:27:d8:02:1e:fe:61:33:55:
6a:e6:94:5e:dd:e2:c4:00:7e:a9:12:b0:88:22:51:
c6:3d:8d:31:7b:35:f5:14:6b:22:f2:4f:dc:4c:e8:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:5F:ED:AE:52:DE:04:53:19:B8:29:BE:6E:47:E2:C2:11:D9:C4
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/USNf7a5S3gRTGbgpvm5H4sIR2cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2d:3a:d1:f0:17:ac:8d:92:df:0c:84:2f:a3:29:2e:6c:0b:
5d:c3:7e:b6:ab:c8:a3:2f:1b:48:50:e8:31:48:9a:ac:52:71:
7b:06:94:39:47:dc:69:be:f6:e7:9e:3a:f5:7a:1b:73:f2:e4:
1d:c8:bf:6e:01:9d:98:8d:61:4a:30:72:89:fa:4c:b6:5d:33:
36:82:da:7a:4b:d8:a6:ee:16:06:41:bb:5f:71:64:5a:d9:a3:
a3:1c:29:02:47:35:87:ea:c2:87:f5:98:ba:a4:d4:8f:b6:c0:
02:52:69:61:2b:03:33:fb:fe:3b:12:ca:fb:07:f0:d3:37:5a:
b8:d5:49:73:5b:f1:27:03:4c:69:1f:8d:5c:85:f9:a3:21:70:
96:e5:58:d1:2d:f4:f8:83:c7:ee:0e:fa:de:51:02:90:25:ec:
c3:fc:d8:b8:ef:70:3f:64:ce:e3:28:fc:cd:fb:da:f1:8c:cf:
5d:9a:cb:4c:e4:76:29:47:ba:9d:59:d7:5e:ae:2d:0c:04:55:
48:c5:1a:03:2d:80:f1:db:63:23:8a:36:28:e5:4b:6b:f6:65:
74:6c:21:4b:ef:7c:74:3b:eb:d8:ee:d4:4a:50:04:fa:fa:ae:
f9:77:25:74:fd:bc:6b:48:ce:61:80:e9:f4:2e:41:23:6d:85:
5c:c1:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:22 2025 by rpki-client