Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Mnm_NycVdORXW86kqHmuYGwMI8Q.roa
File: Mnm_NycVdORXW86kqHmuYGwMI8Q.roa (raw, json)
Hash identifier: dEcWHwErL/LvYLZHN+NJXU852Aij6XiwJt9lq9BfYUw=
Subject key identifier: 32:79:BF:37:27:15:74:E4:57:5B:CE:A4:A8:79:AE:60:6C:0C:23:C4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01960690B8F33989493DEB00D805A37416FA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Mnm_NycVdORXW86kqHmuYGwMI8Q.roa
Signing time: Sat 05 Apr 2025 15:27:49 +0000
ROA not before: Sat 05 Apr 2025 15:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.240.60.0/23 maxlen: 24
151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.65.0/24 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:90:b8:f3:39:89:49:3d:eb:00:d8:05:a3:74:16:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 5 15:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3279bf37271574e4575bcea4a879ae606c0c23c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bf:c9:4c:98:ad:f1:13:30:fe:ba:5b:0d:48:
cf:54:27:de:9c:c6:a4:6d:23:dd:1b:1d:f1:79:d0:
ae:18:dd:59:c4:e2:3b:80:bd:04:97:4d:0e:13:46:
b3:af:e4:fc:89:bd:27:a7:b8:47:51:0a:ed:33:79:
fe:1b:18:dc:00:1b:b3:ef:ac:da:13:db:e6:13:82:
86:20:31:15:17:c3:55:f9:4b:6b:e5:dd:8e:56:7e:
a2:75:e5:71:52:0b:7e:99:bf:15:5a:bb:33:32:ae:
26:22:46:da:f6:68:f4:6d:5f:15:28:38:b0:f9:b4:
a0:fb:64:6a:8e:11:69:af:4f:eb:9b:6b:0b:3f:2f:
d7:9c:33:fa:16:1a:e4:05:a7:32:20:ba:81:02:3e:
18:70:59:b8:00:ff:a4:93:46:c5:5a:c3:d7:fd:8a:
4c:44:d3:8f:86:7b:06:ad:2c:d1:35:70:0f:7a:97:
db:a5:38:f1:ca:39:cb:d8:8c:bb:86:05:d7:aa:3f:
5f:d0:d4:a0:cd:00:3e:79:aa:29:96:30:53:06:29:
90:27:87:ed:cb:d5:e3:c1:3b:53:30:f5:ea:3b:66:
f3:74:a1:60:b8:9a:2f:c3:82:82:2e:20:91:3c:cb:
9f:06:b4:50:cd:9f:6c:fe:aa:b9:8a:63:d6:82:1c:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:BF:37:27:15:74:E4:57:5B:CE:A4:A8:79:AE:60:6C:0C:23:C4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Mnm_NycVdORXW86kqHmuYGwMI8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.60.0/23
151.242.44.0/24
151.242.56.0/24
151.242.65.0/24
151.242.224.0/22
151.242.236.0/22
151.243.214.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dd:b2:27:4a:28:34:0d:bc:f4:3c:b5:ce:6b:b8:d4:a2:8d:
e6:df:b7:ee:d2:86:93:85:80:2b:0a:b4:fe:c7:67:95:a6:e1:
97:1d:b7:e0:68:a5:13:af:d4:95:9b:5d:3e:4b:0c:b0:b0:35:
33:80:9c:29:e4:62:f1:fa:68:2b:5c:72:27:fc:0b:73:ed:4b:
12:1e:77:c4:0a:c6:31:69:74:e2:9d:6a:0d:bb:04:8f:60:d1:
82:0f:d2:4c:43:4a:73:4e:50:98:02:4a:ee:b3:e2:46:f2:fe:
ef:48:5f:9b:f3:61:29:1c:32:d0:22:5e:49:3d:01:c5:4d:c3:
24:b9:94:13:d5:99:d5:09:32:b9:66:45:24:0b:f8:38:47:41:
d7:57:7d:3f:b7:5d:0d:3b:c3:ae:9a:f9:41:c3:47:4e:13:eb:
4f:ed:49:8c:60:6b:ac:f8:a8:6a:0e:e5:5f:1e:3b:e2:3c:48:
c6:5b:02:0f:fa:59:6a:75:3b:e1:c3:7e:ad:ae:f2:c6:ad:44:
c4:90:bd:fb:72:9f:7d:4f:f2:d4:e6:86:f6:a0:48:6a:3e:4b:
03:83:df:35:f6:7f:ce:b1:8a:3b:40:a5:aa:4b:41:91:b0:9b:
42:f9:c5:ec:a3:4e:a1:cb:4b:6e:35:c1:77:da:ff:5b:27:b0:
5b:0e:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net