Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/VrDUMZ0t8RiyWziK8wSbe2DC3jI.roa
File: VrDUMZ0t8RiyWziK8wSbe2DC3jI.roa (raw, json)
Hash identifier: bHxStcImJfAgn5bTJglHdR3O/TPKh88MrKSLgp3P6RM=
Subject key identifier: 56:B0:D4:31:9D:2D:F1:18:B2:5B:38:8A:F3:04:9B:7B:60:C2:DE:32
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 078F8C0C
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/VrDUMZ0t8RiyWziK8wSbe2DC3jI.roa
Signing time: Sat 01 Jan 2022 13:55:37 +0000
ROA not before: Sat 01 Jan 2022 13:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.4.0/24 maxlen: 24
45.150.6.0/24 maxlen: 24
45.150.5.0/24 maxlen: 24
45.150.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126848012 (0x78f8c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 1 13:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56b0d4319d2df118b25b388af3049b7b60c2de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:e9:80:84:2f:8d:a9:f8:94:4e:30:ff:d5:
d8:7f:7b:75:6f:fa:ca:8f:e4:77:37:cf:5c:43:77:
94:e8:f5:e5:6a:69:98:f5:18:12:de:5d:3f:71:1c:
69:ba:c0:b5:66:95:6a:3c:c9:df:64:8a:77:74:0d:
f4:b4:55:4d:da:1c:62:5b:d3:12:c8:5d:a0:50:75:
45:46:62:10:e4:fe:ad:8f:38:46:7e:3c:ef:68:d2:
2b:f4:9c:fb:39:55:ec:fd:2e:a3:f4:3d:be:18:1b:
55:7c:b0:b1:ca:0d:95:38:97:08:22:ce:54:be:60:
dc:3d:54:34:0e:a4:ed:7f:49:62:f6:83:36:1a:36:
e2:fa:ce:db:a8:bd:c7:e5:59:46:01:c1:fc:ec:39:
4d:94:6d:cf:32:a1:81:3a:b0:67:48:66:f5:19:53:
60:c8:83:d3:10:5e:b7:f0:d5:45:ea:fa:47:c0:47:
1e:3e:b3:a0:79:f9:d4:8f:d6:dd:ed:00:87:39:49:
50:5c:e3:be:7c:51:ea:bd:9c:68:3b:2b:a9:e2:35:
7c:58:c6:31:11:02:9a:07:fd:8d:af:03:f7:6a:0e:
2c:cd:5c:98:eb:79:70:86:ee:02:3b:44:71:b5:bd:
25:72:91:2b:f3:c9:ca:a8:ef:88:df:96:27:35:f2:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:D4:31:9D:2D:F1:18:B2:5B:38:8A:F3:04:9B:7B:60:C2:DE:32
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/VrDUMZ0t8RiyWziK8wSbe2DC3jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/22
Signature Algorithm: sha256WithRSAEncryption
37:9a:41:95:bd:6c:7e:32:79:26:21:c8:ca:75:4c:e7:49:aa:
e3:44:69:c5:c4:f3:61:00:48:9f:b3:0c:dc:04:86:fb:c5:67:
7d:7a:27:fa:9a:2d:d4:48:bb:de:bf:d4:eb:49:5c:4a:11:f9:
c4:91:e2:c4:f7:33:cf:25:64:88:48:40:7c:e3:7f:70:9f:c8:
91:3a:6c:62:4c:d1:93:25:20:f1:8f:ae:38:cb:8f:1b:7f:c7:
2c:53:04:70:9f:1a:41:1f:bb:b7:f2:f6:54:75:ce:68:dc:f8:
bf:ba:d3:0b:ab:00:c6:ab:9a:85:8e:23:2b:51:f6:a4:e5:e8:
b4:d4:83:11:db:93:53:e5:b7:e9:cc:5e:99:e4:10:ee:ad:3d:
76:dd:ad:b4:23:57:9b:78:e5:7c:6e:7b:6d:a3:0e:f0:04:e7:
25:bf:7f:f5:07:0a:31:35:bd:2b:9c:1c:5c:58:94:c4:fc:1e:
5a:df:af:80:74:7a:01:55:5a:5c:95:06:e6:39:51:fb:60:64:
ab:5c:b7:a9:3b:5c:10:7b:69:93:04:80:4e:1d:20:ba:81:2f:
52:a8:dc:f9:13:6d:ab:e5:1d:15:ad:ac:69:c8:d8:f1:f8:da:
21:df:9b:bf:b8:84:0d:fe:39:de:36:0d:c3:80:60:45:50:2d:
13:14:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:21:16 2025 by rpki-client