Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/MwPt3-lNxJQ0lSrDu2rUHsootYs.roa
File: MwPt3-lNxJQ0lSrDu2rUHsootYs.roa (raw, json)
Hash identifier: bydJdTHTrRRYVn8SiGfcc/ZiHB/j7SoLmJFPkOOHs20=
Subject key identifier: 33:03:ED:DF:E9:4D:C4:94:34:95:2A:C3:BB:6A:D4:1E:CA:28:B5:8B
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019425FD6993AD531EF42B659DFA71FD0522
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/MwPt3-lNxJQ0lSrDu2rUHsootYs.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38107
IP address blocks: 140.150.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:69:93:ad:53:1e:f4:2b:65:9d:fa:71:fd:05:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3303eddfe94dc49434952ac3bb6ad41eca28b58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:5b:3c:91:77:85:9a:26:6d:f0:2f:34:52:
c1:a4:74:9d:4d:bb:09:f7:5d:0f:a6:0c:e4:6f:e3:
8b:ba:64:4a:e9:63:5b:49:af:ea:df:f2:3f:ca:b5:
f5:79:48:88:87:f1:b0:6a:ce:e2:8a:30:b8:78:a8:
5f:97:1b:a4:a8:b0:6e:27:37:62:b2:bf:c5:e6:2f:
68:0f:f4:c5:c4:3c:ad:c3:81:c3:79:1b:d1:ff:0e:
8c:85:1e:c6:f9:f1:96:0b:9e:6f:1b:09:4b:bf:b2:
41:c1:53:7b:ba:1e:30:3a:5a:99:74:96:f4:c1:0b:
87:c8:51:59:dc:e9:77:be:9c:0f:e1:74:63:63:b0:
e9:72:97:fe:c6:16:cc:a1:11:b5:1a:49:e0:24:9c:
4d:83:38:f1:f1:b1:20:b5:26:52:50:04:01:77:5c:
8b:d7:f8:31:0e:20:81:d0:ae:5d:42:14:1a:0e:00:
17:50:17:92:d6:bf:fa:18:b6:e3:94:30:40:92:02:
a3:21:c3:0e:fa:b5:a2:e5:01:a7:10:04:56:3a:b7:
5e:db:5c:16:a5:e0:2e:50:f4:90:78:ea:3d:44:12:
3a:f9:41:a2:90:27:91:9e:e1:fa:a8:21:36:9f:c9:
3d:42:69:c4:44:6b:03:ec:5e:28:c2:77:93:0d:7a:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:ED:DF:E9:4D:C4:94:34:95:2A:C3:BB:6A:D4:1E:CA:28:B5:8B
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/MwPt3-lNxJQ0lSrDu2rUHsootYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.20.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9f:48:6a:cb:3b:ca:c4:09:26:21:b3:9e:36:6e:d3:5f:31:
d1:4f:42:6a:00:09:32:ef:4f:5f:78:8f:6b:87:f6:29:c9:33:
1b:c8:a8:b2:ae:a5:c7:f0:9a:3b:0a:3d:fa:51:a5:29:b3:46:
f7:7e:b6:ba:54:16:af:80:67:24:bb:04:16:6c:a9:8c:83:ab:
17:02:29:2d:ed:a8:47:dc:8c:30:e8:0c:21:9e:9e:5b:7f:cd:
0d:81:11:a9:ff:77:c2:ed:6d:88:48:b1:9b:08:1d:f1:da:cb:
9a:3d:c2:cf:03:f4:c1:64:0e:7b:e9:08:0c:ef:ad:a8:09:e4:
a6:41:1c:74:82:ef:2b:6e:5a:0b:ec:74:09:5b:2c:c2:47:34:
be:75:fe:f3:75:d7:bc:92:e3:02:0d:0d:04:80:83:bf:e3:a4:
93:b6:8d:51:9f:0f:91:e7:55:80:ce:66:01:25:79:50:66:f4:
1b:50:b3:82:2e:40:58:9f:00:9b:42:b8:5c:21:f0:e5:05:a0:
0d:a2:a5:cf:89:3c:50:e5:f8:6f:10:61:ca:9b:e9:33:01:43:
ff:a7:6c:2f:9d:d7:1c:92:52:9c:91:50:d5:3b:06:2a:98:01:
6a:12:94:4a:f7:ea:87:33:a0:df:e1:5a:70:fb:c1:2d:51:fe:
85:bb:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:00 2025 by rpki-client