Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/vSmOCzcI0gA1N3t9UkMVeLm1X-4.roa
File: vSmOCzcI0gA1N3t9UkMVeLm1X-4.roa (raw, json)
Hash identifier: ldTMzhrTetRN66jLlj1dzHUVTsAbtqZSxWhanftVAPQ=
Subject key identifier: BD:29:8E:0B:37:08:D2:00:35:37:7B:7D:52:43:15:78:B9:B5:5F:EE
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 01856D417D2EFED0F663A65CA2FA1C0B6512
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/vSmOCzcI0gA1N3t9UkMVeLm1X-4.roa
Signing time: Sun 01 Jan 2023 12:14:46 +0000
ROA not before: Sun 01 Jan 2023 12:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.150.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:7d:2e:fe:d0:f6:63:a6:5c:a2:fa:1c:0b:65:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 1 12:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd298e0b3708d20035377b7d52431578b9b55fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:65:35:33:0d:f0:32:68:80:57:49:cb:09:
c5:bc:c6:91:7b:ab:33:c6:42:e8:50:90:ff:c0:df:
67:9d:d1:79:80:3e:d8:e5:65:14:22:23:16:7d:d4:
71:3d:23:89:06:c3:33:6f:95:c7:79:9a:8b:45:4f:
9b:0b:90:48:c0:60:28:d1:3e:b7:ef:ea:37:52:53:
3f:53:fe:54:87:36:6c:42:8d:13:8f:db:f4:ff:69:
77:ec:4a:a7:41:22:5e:30:56:0a:90:2e:a4:34:9e:
44:0c:c9:88:76:c2:33:4e:0d:1d:b7:c2:8e:2e:95:
4b:49:c1:f0:2e:1e:99:95:a7:a8:c6:4c:dd:c3:a9:
f3:30:dd:8a:dd:59:85:f4:be:d6:7f:00:88:fd:cf:
2b:c5:a3:bd:c6:28:60:af:4b:bb:39:4e:28:c2:c3:
15:77:b9:10:aa:6d:62:79:1c:74:cf:8f:50:fc:e3:
7d:72:bd:ea:8e:9c:a1:bf:21:e3:ed:78:79:f3:1d:
be:ed:74:ed:48:89:3a:27:d8:0f:4e:aa:bc:43:82:
ec:6a:58:a5:e7:d7:31:45:9c:47:30:82:b8:82:85:
c2:65:ea:a2:c3:3b:25:d1:6d:21:33:99:fc:42:e8:
36:0c:ce:05:0d:a8:71:c7:4f:44:b6:09:41:ee:47:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:29:8E:0B:37:08:D2:00:35:37:7B:7D:52:43:15:78:B9:B5:5F:EE
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/vSmOCzcI0gA1N3t9UkMVeLm1X-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b1:5c:aa:55:fb:46:01:f1:7e:b1:91:8d:af:e0:14:7d:84:
a8:3d:7f:a5:39:4d:a0:ab:19:2a:1e:cf:1a:cd:c4:05:ae:52:
60:07:76:3c:b5:62:9c:1e:6e:ee:20:6f:bc:d9:9d:be:22:b1:
27:eb:28:36:87:3b:54:dd:9d:db:78:b1:85:cb:ed:15:48:3a:
a3:f6:67:d2:14:f8:cb:98:c6:1c:ea:5c:71:20:fd:47:e1:d5:
88:1e:7f:50:bb:de:33:c9:45:28:5e:aa:66:89:e5:ee:75:a1:
f0:a0:4c:0d:d4:96:b4:26:e3:78:9e:7e:2a:4d:a0:b7:72:48:
f3:53:14:d2:62:5d:2e:89:dc:37:8c:cc:f3:a6:bd:36:13:0c:
b2:60:3b:46:ee:49:cc:44:8c:cc:9d:22:a7:a7:9c:45:b0:03:
6d:ce:2a:cc:97:df:49:58:90:83:29:34:b6:30:e3:66:e1:fe:
5b:50:d7:82:42:09:09:f4:8b:8d:47:98:b2:d4:27:3d:0b:6f:
b3:ba:6a:c8:77:b8:c5:09:ab:e7:57:0b:31:a0:00:df:26:e9:
d6:72:d5:aa:d9:ac:16:7f:5c:27:b7:0a:5b:01:e3:e3:67:a8:
89:83:93:67:53:a3:6c:d1:be:ec:85:99:e4:5b:a7:e6:c3:97:
87:d4:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:01 2025 by rpki-client