Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/mmsNCxoKHaDPhHn0fBPGBcpDtik.roa
File: mmsNCxoKHaDPhHn0fBPGBcpDtik.roa (raw, json)
Hash identifier: CFO4I9XsLXxPAwXry17kYeZuNErEd6F2BAETZZAMwFo=
Subject key identifier: 9A:6B:0D:0B:1A:0A:1D:A0:CF:84:79:F4:7C:13:C6:05:CA:43:B6:29
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019425FD692D5DCFE99D87033B436AF06652
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/mmsNCxoKHaDPhHn0fBPGBcpDtik.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 140.150.8.0/24 maxlen: 24
140.150.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:69:2d:5d:cf:e9:9d:87:03:3b:43:6a:f0:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a6b0d0b1a0a1da0cf8479f47c13c605ca43b629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:be:4f:51:94:1e:ec:23:b0:6a:af:a4:50:
f8:b1:f9:39:39:03:e0:45:e2:65:5a:5c:42:c4:ad:
52:60:54:52:91:3e:66:45:79:38:89:99:55:a4:0e:
24:36:f5:c2:97:87:e6:2c:a2:29:4e:41:45:fd:82:
95:20:07:45:9b:bf:c3:aa:04:09:eb:39:1a:6c:6d:
f6:82:0d:0b:67:25:ce:64:2f:4d:c2:0e:7b:3d:00:
93:7c:f4:f5:7e:29:25:11:30:69:92:a1:ba:ca:b1:
13:34:05:af:2f:d8:2f:e4:68:65:03:05:35:47:b6:
02:44:ad:f2:cc:82:8b:5f:3f:56:e1:63:53:08:c8:
09:e9:c0:ab:40:02:dc:d1:86:83:e4:90:57:fc:42:
75:38:55:33:5d:c0:4c:7c:78:57:9b:d9:de:61:10:
84:1f:99:07:f7:4a:5e:98:f3:f4:9e:e3:16:c2:4b:
62:1f:ad:6b:f1:3d:cc:d7:6c:0b:1d:6f:a8:c9:a2:
b1:42:79:b5:29:16:0f:14:ac:bf:72:84:4a:5e:7d:
65:79:92:c7:a8:21:53:c7:00:31:5b:a1:6e:d7:df:
3a:fe:b9:86:a2:f7:6f:eb:09:6c:e2:b2:ce:7a:79:
e7:57:7c:cb:72:bc:fd:9e:44:73:b2:7f:5d:c7:ae:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:0D:0B:1A:0A:1D:A0:CF:84:79:F4:7C:13:C6:05:CA:43:B6:29
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/mmsNCxoKHaDPhHn0fBPGBcpDtik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.8.0/24
140.150.13.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c9:71:db:82:6c:be:0b:ef:b9:99:19:7d:ec:ef:8e:ad:93:
c0:7f:10:c4:e9:72:86:f8:68:74:96:e0:3d:ce:ad:0d:b7:15:
2b:04:8a:c2:99:58:da:ff:3c:15:f1:89:3f:00:29:0f:67:cb:
e5:02:30:5b:21:13:93:25:4c:7e:b2:d2:01:ea:88:93:d6:b8:
ca:23:ac:c2:34:d6:50:18:23:9f:f9:63:31:29:fd:24:15:28:
91:c5:e7:29:81:29:11:4e:1f:58:1f:7a:49:af:58:2f:9e:0e:
bc:38:9f:74:3d:5a:c6:a2:08:a3:29:8a:75:48:e5:63:6d:04:
c7:bf:f1:e0:ac:a7:35:77:bf:24:e5:91:d1:6d:d6:27:4b:e5:
11:15:4d:44:df:89:c5:57:96:fe:15:76:29:08:93:3f:51:6f:
2d:2e:7f:bd:7d:9e:f6:5e:0d:a7:65:73:27:66:87:e2:cf:55:
00:61:cf:24:bd:18:8e:06:2e:ed:8a:b7:fa:70:f4:05:db:a1:
1b:48:74:02:5a:88:1f:6d:cf:18:2a:7c:6e:08:06:04:88:5a:
4b:01:50:6b:72:4b:06:75:74:75:69:2d:f4:8e:42:db:0e:08:
da:f3:64:35:e5:0d:51:fb:93:ac:70:5c:61:1e:a0:f7:49:38:
69:82:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:41 2025 by rpki-client