Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/0ADHPp7R2gbmzllOwIudtTzSNLw.roa
File: 0ADHPp7R2gbmzllOwIudtTzSNLw.roa (raw, json)
Hash identifier: ChBMwbWhkA+Mdg23vyOTDXmGCR5XkHP5pn7Md60e3rk=
Subject key identifier: D0:00:C7:3E:9E:D1:DA:06:E6:CE:59:4E:C0:8B:9D:B5:3C:D2:34:BC
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 078E53EA
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/0ADHPp7R2gbmzllOwIudtTzSNLw.roa
Signing time: Sat 01 Jan 2022 04:57:19 +0000
ROA not before: Sat 01 Jan 2022 04:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208250
IP address blocks: 45.150.120.0/24 maxlen: 24
45.150.120.0/22 maxlen: 22
45.150.121.0/24 maxlen: 24
45.150.122.0/24 maxlen: 24
2a0f:be00::/29 maxlen: 29
2a0f:be00:0:200::/56 maxlen: 56
2a0f:be00:0:100::/56 maxlen: 56
2a0f:be00::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126768106 (0x78e53ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Jan 1 04:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d000c73e9ed1da06e6ce594ec08b9db53cd234bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:33:f1:20:e2:7f:75:d0:a3:55:b2:f8:11:
45:58:a5:1f:65:d3:07:ee:bf:e6:9a:35:b1:ec:fa:
60:56:8c:2a:8e:30:56:f0:2b:87:e5:f2:7b:54:a1:
21:5a:30:a4:5a:d8:e2:37:8b:b5:73:e0:4c:3e:98:
69:23:af:d1:58:f2:ac:66:0e:06:d1:24:37:4e:52:
79:cd:6f:bf:26:b5:5e:4c:38:44:bf:76:33:15:f8:
06:49:62:93:50:33:da:98:cd:db:13:eb:1d:2b:15:
09:e1:be:b3:f9:78:33:4f:d7:04:f4:38:d7:df:a2:
da:82:bc:e2:b8:a0:2e:eb:51:69:ee:09:a7:0a:7b:
38:8d:29:d4:3e:f6:bb:5a:10:9f:14:bc:bf:06:35:
f2:85:97:04:7d:8c:5a:c2:6c:c0:81:04:b4:df:47:
c9:e0:64:78:a7:4d:68:f5:e9:4c:10:4f:3a:a3:29:
3d:e0:d1:71:bd:ab:39:87:d7:5d:5f:e9:f8:e6:ff:
c8:d9:13:24:da:4a:e6:fb:00:de:3a:ff:d2:69:af:
b3:d3:11:54:2e:bf:bf:26:52:46:f1:98:23:a4:df:
ba:fb:6c:c0:65:8d:a9:01:7d:c8:eb:90:18:8e:96:
b0:12:9b:00:72:48:06:6d:d2:dd:b5:89:22:4f:0a:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:C7:3E:9E:D1:DA:06:E6:CE:59:4E:C0:8B:9D:B5:3C:D2:34:BC
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/0ADHPp7R2gbmzllOwIudtTzSNLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.120.0/22
IPv6:
2a0f:be00::/29
Signature Algorithm: sha256WithRSAEncryption
a6:0b:75:27:08:f4:30:a6:20:d5:bb:a6:a0:6f:7e:8f:30:2b:
91:66:84:8e:a7:eb:62:cc:64:b9:f9:f0:63:59:a1:42:cd:e4:
1d:c8:89:a8:76:3b:c5:db:e0:11:62:e6:6b:fc:ea:55:ab:75:
1d:f1:eb:a8:90:f2:49:53:86:54:6b:73:e6:2d:d5:1b:16:54:
2e:f8:67:9c:f1:4b:d4:25:40:75:dc:36:dd:04:64:9f:4a:9b:
12:d3:94:91:b7:a2:32:2c:17:cc:e3:94:6b:0e:38:a4:de:ac:
94:d1:e6:12:6b:47:1e:11:f9:e4:aa:38:91:80:b4:a8:9b:fd:
d3:04:af:eb:e1:8a:0a:e7:46:d3:7c:25:2f:81:c2:8b:9c:f7:
46:86:5a:88:70:31:8a:49:f8:53:71:b3:de:22:60:47:53:33:
6c:d0:53:ec:7e:af:e9:5e:aa:4a:69:37:ad:d6:6e:70:7e:d3:
8a:8a:a2:59:8d:4d:40:5a:cd:66:e4:3a:f0:07:fc:4e:1c:aa:
54:91:1e:e3:59:ee:48:84:c0:a1:9c:1d:b5:4e:37:13:99:ac:
e3:96:bc:1e:78:08:2c:05:eb:d1:f6:14:ba:dd:75:0f:d5:11:
c1:57:fe:07:75:04:f7:a6:42:5f:70:c3:55:f3:ba:e2:52:95:
ef:3c:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:34 2025 by rpki-client