Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/bgycksZLvlrDLNMyh5dWehGK54I.roa
File: bgycksZLvlrDLNMyh5dWehGK54I.roa (raw, json)
Hash identifier: NZYDV0WBsphi2pmeR6h+0YCDcSBLefns1w180nvxu8A=
Subject key identifier: 6E:0C:9C:92:C6:4B:BE:5A:C3:2C:D3:32:87:97:56:7A:11:8A:E7:82
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 01856D417ECDF240AC4EE0E9BD25D0A3A4EE
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/bgycksZLvlrDLNMyh5dWehGK54I.roa
Signing time: Sun 01 Jan 2023 12:14:46 +0000
ROA not before: Sun 01 Jan 2023 12:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 45.150.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:7e:cd:f2:40:ac:4e:e0:e9:bd:25:d0:a3:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 1 12:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e0c9c92c64bbe5ac32cd3328797567a118ae782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:af:d2:11:c9:2d:1e:7d:19:45:7f:5a:7e:
7a:86:bb:2b:6d:07:62:12:f6:66:98:2e:b8:8e:44:
8a:38:3b:20:97:b6:47:b6:27:54:f2:5d:49:42:ce:
ce:7c:61:b7:af:d5:dc:f5:0c:89:8e:76:65:47:2c:
f9:46:d9:f3:d0:88:9d:d2:0f:85:76:5c:db:9d:a3:
c3:ef:b2:85:87:f1:0f:c8:87:4e:7d:0f:88:1c:00:
f3:92:98:da:1c:29:33:f3:ce:8d:ec:e1:09:6e:75:
34:41:9b:1a:86:38:6f:51:30:d5:02:f3:50:cc:d9:
e6:06:a6:52:25:87:e5:cb:2f:ba:28:3e:a6:c6:a2:
2f:47:86:15:33:76:08:26:ff:d6:1d:17:da:3e:58:
31:66:d1:89:41:ca:ba:c7:05:7c:82:79:22:8e:4e:
3a:4b:91:65:17:38:33:9d:45:f3:59:1d:c5:a3:bb:
4d:49:e0:76:76:e4:fa:96:65:1d:a7:5b:56:30:50:
f5:08:6c:04:e6:f7:0a:64:a3:1e:30:c7:ae:b7:cf:
89:65:9e:e0:22:a9:10:95:af:95:b1:ea:c3:eb:fd:
61:99:04:c8:6c:a0:b1:87:16:33:3a:17:4c:2d:7d:
8f:b5:5d:45:84:da:95:a1:00:9e:90:aa:b4:b9:cf:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:9C:92:C6:4B:BE:5A:C3:2C:D3:32:87:97:56:7A:11:8A:E7:82
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/bgycksZLvlrDLNMyh5dWehGK54I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.5.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7f:76:66:09:d2:90:40:33:63:63:dc:12:66:29:1d:d1:85:
7f:64:0e:b0:8f:32:b3:d9:39:2e:c4:18:c0:3d:f8:46:44:e3:
ec:10:12:00:89:02:67:af:36:fb:e8:c2:b1:b1:57:5c:1b:2d:
75:1f:2f:aa:ba:c0:37:5f:ca:28:11:db:91:00:82:1f:16:9a:
7f:a7:0a:d7:fe:d6:ee:32:89:82:72:d2:d6:cd:44:a0:74:da:
42:c7:3a:61:8e:84:1a:49:94:14:6e:3d:9b:5e:06:a5:1c:05:
54:d9:0a:de:b5:56:52:97:d8:a4:68:83:9d:33:18:b1:d5:db:
ba:6d:38:f2:58:20:d8:43:d7:35:88:e4:17:21:db:80:81:55:
54:0f:0b:d6:b7:06:d6:3a:f4:5a:b5:ef:0d:e7:f4:98:a1:51:
d0:9c:64:b0:3e:86:01:9e:79:f8:b0:8b:32:ce:16:27:2e:e6:
b3:f6:d1:08:fe:96:33:cf:5c:ff:b4:e5:b6:37:30:0f:32:3b:
39:ae:53:8c:0c:d4:d2:68:88:6c:2d:c2:e1:14:1e:8d:6d:ab:
b3:d3:ff:48:af:75:cd:c4:05:03:cc:cf:b6:f5:c6:96:eb:b2:
3d:c4:f6:a0:51:6d:0b:0a:93:26:52:8a:d6:c1:16:5d:9b:85:
78:4d:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:55 2025 by rpki-client