Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/a_8NnJNJMkaXKB2N9NcKdrVhSU4.roa
File: a_8NnJNJMkaXKB2N9NcKdrVhSU4.roa (raw, json)
Hash identifier: /+ogmd5QZSwgjgoex+WSn7n0Gk6kuud1q6OIaiTR/ng=
Subject key identifier: 6B:FF:0D:9C:93:49:32:46:97:28:1D:8D:F4:D7:0A:76:B5:61:49:4E
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019462A2EAC344C87FD1CF7A79C4D366EFE8
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/a_8NnJNJMkaXKB2N9NcKdrVhSU4.roa
Signing time: Tue 14 Jan 2025 02:27:11 +0000
ROA not before: Tue 14 Jan 2025 02:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:62:a2:ea:c3:44:c8:7f:d1:cf:7a:79:c4:d3:66:ef:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 14 02:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bff0d9c9349324697281d8df4d70a76b561494e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:5f:89:72:77:37:72:c4:6b:52:67:a7:02:
e8:15:74:78:fc:17:1b:21:cd:31:0b:fc:eb:4e:86:
6e:9e:6b:36:9c:82:11:f6:0c:49:0e:2c:9f:89:5d:
12:69:2b:19:9c:52:ea:f8:bb:ed:6d:f2:de:a7:36:
7e:82:46:bf:b4:31:70:a4:a9:5a:9a:a6:55:47:af:
b4:74:3c:1f:25:c2:34:ac:2e:9f:42:cb:bd:07:ae:
d3:9c:13:68:da:a4:7b:e4:cc:6a:f4:37:35:f7:9e:
63:be:2a:ca:77:ab:cd:48:0a:20:6a:82:22:9b:76:
4b:f9:94:9e:ae:c3:3c:f9:79:b3:8d:7d:80:ea:c3:
2c:79:0b:cc:d5:0d:23:b0:db:7f:3b:11:c9:c4:4f:
59:c8:5d:ad:78:03:50:51:8a:a2:76:ac:af:33:82:
a4:b3:81:68:15:9d:df:01:84:b0:42:6a:28:bd:16:
c9:ba:fd:18:7a:97:fa:3f:fa:37:82:dd:59:c3:ae:
c4:a9:47:68:d1:48:1d:a4:f4:db:9e:6e:9f:cd:50:
fd:94:f1:a2:d8:c4:fd:f7:84:df:f3:74:85:36:22:
ca:6c:01:18:20:1a:e8:ac:0b:14:a2:da:49:5b:67:
5a:97:a9:d9:65:05:d3:e2:79:40:e6:c7:4d:24:41:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:0D:9C:93:49:32:46:97:28:1D:8D:F4:D7:0A:76:B5:61:49:4E
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/a_8NnJNJMkaXKB2N9NcKdrVhSU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0/21
140.150.10.0/24
140.150.12.0/24
140.150.14.0/23
140.150.18.0/23
140.150.21.0-140.150.38.255
140.150.40.0-140.150.44.255
Signature Algorithm: sha256WithRSAEncryption
91:5e:52:2e:c2:f0:d8:5a:74:2a:a2:88:07:5d:6f:a6:a3:07:
0e:a1:ea:2d:80:f6:cd:59:db:56:13:6c:36:96:96:14:0d:f3:
39:56:53:a5:c0:f9:99:0f:d0:15:69:ff:96:cd:44:97:15:f9:
7b:f6:6b:33:6f:ab:52:f3:38:1d:a8:90:6a:46:af:be:1e:88:
c4:f6:e5:7e:21:93:75:85:5c:c0:5f:02:06:61:8e:eb:cb:3a:
eb:86:41:f2:b9:26:00:8a:21:6a:7a:09:88:a0:49:72:8c:93:
5d:c1:0c:d8:f7:99:ab:a7:57:b5:48:0b:9d:4c:72:67:4e:5a:
d8:d9:bb:d5:2f:36:2f:42:2c:d8:0f:a7:12:45:d6:e9:09:df:
ce:c1:c1:b9:f7:7a:e6:d0:d0:6d:e7:15:8d:b7:e0:ac:29:c8:
97:e0:6c:6c:2a:9b:2a:e8:cc:3c:17:9b:51:92:73:67:8d:63:
7d:74:58:9d:8f:e7:b7:85:e0:30:cf:29:5e:67:a4:bb:46:9e:
30:03:5e:ae:92:ae:db:f8:da:99:48:42:bb:70:ab:8b:21:54:
02:64:6a:7f:44:5f:3c:45:f4:23:3e:7a:cf:1e:76:a4:08:8d:
42:64:68:6e:e4:b5:ac:54:36:6f:da:02:eb:5b:50:30:f0:54:
b1:b4:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:54 2025 by rpki-client on console.sobornost.net