Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/1-Typ11RU8QWD79VPEDt9r35XWcU.roa
File: 1-Typ11RU8QWD79VPEDt9r35XWcU.roa (raw, json)
Hash identifier: hBF72mojE7/AKsdoRvMMcPw7rhC5BjKZ+RYdvTVZtkI=
Subject key identifier: F9:3C:A9:D7:54:54:F1:05:83:EF:D5:4F:10:3B:7D:AF:7E:57:59:C5
Certificate issuer: /CN=37f8ccf0c82de044e8e2e3c2b12c080d524c6f15
Certificate serial: 01941FFA0EA303302F526267B068FD300C59
Authority key identifier: 37:F8:CC:F0:C8:2D:E0:44:E8:E2:E3:C2:B1:2C:08:0D:52:4C:6F:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/1-Typ11RU8QWD79VPEDt9r35XWcU.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60264
IP address blocks: 45.150.124.0/23 maxlen: 23
45.150.124.0/24 maxlen: 24
45.150.125.0/24 maxlen: 24
45.150.126.0/23 maxlen: 23
45.150.126.0/24 maxlen: 24
45.150.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0e:a3:03:30:2f:52:62:67:b0:68:fd:30:0c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f8ccf0c82de044e8e2e3c2b12c080d524c6f15
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93ca9d75454f10583efd54f103b7daf7e5759c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:94:83:df:5f:95:9c:01:6f:85:51:3d:1d:
f6:f2:fc:6d:89:00:a3:07:a4:e0:77:20:47:4e:cb:
e9:62:8c:d5:dc:38:77:ea:b4:62:3f:70:29:41:ee:
d5:aa:ae:8e:55:76:54:ee:fd:d0:20:41:fa:e0:52:
31:f0:73:c7:f3:db:04:eb:60:8d:ec:e7:96:b2:9a:
bb:e2:e4:91:ae:ce:1e:38:1a:95:c8:40:42:6e:77:
cc:93:47:f2:62:8c:7b:a5:2f:19:c5:17:fa:9e:3b:
b8:6b:4f:e9:93:2d:5c:7e:39:a9:56:7f:ef:2f:e7:
72:63:50:9d:c2:b2:af:c5:11:7c:28:f5:52:16:5d:
8d:84:68:87:35:24:a2:1a:86:72:f9:a7:5b:d1:38:
ec:ad:36:b1:1d:11:2f:98:c4:34:17:29:03:b0:d2:
96:ca:8d:d2:70:15:46:45:9c:14:c4:4e:e4:7f:32:
63:1e:01:53:61:e1:ea:b2:8d:05:28:5d:61:a5:50:
88:0c:d6:51:a3:5b:d8:fc:98:76:43:a9:fe:51:eb:
65:fe:f7:8c:f7:2a:7f:db:a3:81:0c:b1:f0:bc:87:
5c:04:12:9f:34:ff:90:27:43:02:bc:fc:b8:0a:51:
06:ca:81:f6:7c:5b:65:9a:b7:5d:c4:0c:27:c0:09:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:A9:D7:54:54:F1:05:83:EF:D5:4F:10:3B:7D:AF:7E:57:59:C5
X509v3 Authority Key Identifier:
keyid:37:F8:CC:F0:C8:2D:E0:44:E8:E2:E3:C2:B1:2C:08:0D:52:4C:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/1-Typ11RU8QWD79VPEDt9r35XWcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.124.0/22
Signature Algorithm: sha256WithRSAEncryption
00:11:af:69:ea:ed:41:85:63:35:b3:7c:5f:8d:a8:20:cb:b4:
90:4e:dd:82:11:a6:ec:27:1c:a9:79:5f:8d:44:65:01:07:9f:
6a:e0:ac:29:21:1f:7c:75:35:45:b7:a6:d4:a5:6a:f5:43:f0:
2c:e8:76:76:c4:33:cc:a0:8a:dd:80:3f:73:bb:c7:55:a3:f2:
35:94:ef:ba:91:29:ea:76:ed:51:e3:04:17:d5:e7:a3:cc:a3:
da:71:a6:15:ac:17:6f:51:38:71:64:aa:4f:f6:2f:ff:25:3c:
bd:3b:ff:0e:cb:bb:d9:53:37:2c:ce:94:5c:77:31:46:78:a8:
1d:1f:4f:4a:43:8c:f9:f1:9f:4a:ae:50:84:ee:4d:c3:60:3b:
fe:21:60:c9:f7:e8:b0:a1:2c:0c:d3:2a:03:b1:47:df:33:90:
59:67:74:58:7d:9a:3b:21:6e:c8:87:7c:88:e9:4f:a5:be:1f:
33:72:d5:b1:83:7e:07:2b:d7:d9:58:ef:c0:02:0a:64:c2:66:
3e:38:17:35:76:84:48:c0:91:ca:81:c4:48:30:dc:8b:af:bf:
0c:e9:b7:c8:b0:ce:86:81:5d:f6:f0:cc:32:8a:02:f7:dd:98:
b0:bc:cd:a0:1a:be:16:ae:83:ca:b3:ef:40:f2:00:90:4a:b8:
ba:d7:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:09:25 2025 by rpki-client