Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/lOtGxnvH5vblnXoVqxIscAywokc.roa
File: lOtGxnvH5vblnXoVqxIscAywokc.roa (raw, json)
Hash identifier: qsNKh1zrB1h1SEpbGpbcgIyn1OjDokcRiYhVVBtHbTM=
Subject key identifier: 94:EB:46:C6:7B:C7:E6:F6:E5:9D:7A:15:AB:12:2C:70:0C:B0:A2:47
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 01961E5162697BC10FCC255AED49EAD0B8AB
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/lOtGxnvH5vblnXoVqxIscAywokc.roa
Signing time: Thu 10 Apr 2025 06:09:32 +0000
ROA not before: Thu 10 Apr 2025 06:09:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.11.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.20.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
146.103.64.0/24 maxlen: 24
146.103.65.0/24 maxlen: 24
146.103.66.0/24 maxlen: 24
146.103.67.0/24 maxlen: 24
146.103.68.0/24 maxlen: 24
146.103.71.0/24 maxlen: 24
146.103.73.0/24 maxlen: 24
146.103.74.0/24 maxlen: 24
146.103.75.0/24 maxlen: 24
146.103.76.0/24 maxlen: 24
146.103.77.0/24 maxlen: 24
146.103.78.0/24 maxlen: 24
146.103.79.0/24 maxlen: 24
146.103.80.0/24 maxlen: 24
146.103.81.0/24 maxlen: 24
146.103.82.0/24 maxlen: 24
146.103.83.0/24 maxlen: 24
146.103.84.0/24 maxlen: 24
146.103.85.0/24 maxlen: 24
146.103.87.0/24 maxlen: 24
146.103.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:51:62:69:7b:c1:0f:cc:25:5a:ed:49:ea:d0:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Apr 10 06:09:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94eb46c67bc7e6f6e59d7a15ab122c700cb0a247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:dc:ba:c2:93:5c:c5:66:6c:b1:a6:25:69:
33:77:d1:be:71:c0:51:41:9a:1c:94:21:a5:99:8d:
1c:9f:2c:f3:dc:15:e4:a7:a3:0a:1c:a7:a3:17:d0:
38:a5:18:fd:8e:e2:aa:b0:fa:1c:2a:29:ef:93:37:
72:c1:b7:88:16:d5:5e:5d:d2:a3:45:82:ec:e6:a8:
b8:df:7a:e9:e4:d1:f9:3d:b0:b2:8a:ef:cd:02:d9:
5b:39:44:a3:65:43:43:e3:92:2b:0f:45:95:88:b0:
80:b4:d4:e1:98:36:2f:9b:7c:d6:79:4d:94:86:12:
f9:6a:de:9f:a0:f6:b5:03:1d:4c:63:12:9e:08:5e:
19:8f:55:e8:9f:83:55:ca:2e:b0:10:3c:a6:a6:dc:
7f:44:52:97:61:25:42:40:09:db:ad:10:70:c2:88:
d5:ab:9d:54:d2:cb:57:9d:a7:d1:9d:e5:f6:d9:64:
f5:86:ca:7c:e6:8c:b8:d7:d2:7b:b4:af:9b:20:29:
ef:d8:41:d9:f3:3f:44:50:be:08:d3:25:36:3a:67:
ee:d0:bd:d9:66:26:e5:c1:42:82:f8:24:c3:95:6e:
9a:a6:37:86:f5:f5:82:b1:e6:f5:d8:22:80:36:89:
75:78:0c:fc:8a:55:c0:81:09:6f:48:e8:d8:29:4f:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EB:46:C6:7B:C7:E6:F6:E5:9D:7A:15:AB:12:2C:70:0C:B0:A2:47
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/lOtGxnvH5vblnXoVqxIscAywokc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0/21
140.150.10.0-140.150.12.255
140.150.14.0/23
140.150.18.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
146.103.64.0-146.103.68.255
146.103.71.0/24
146.103.73.0-146.103.85.255
146.103.87.0-146.103.88.255
Signature Algorithm: sha256WithRSAEncryption
33:c6:ed:b8:b9:a7:26:4d:e8:1e:75:90:b4:00:a4:fa:f2:db:
3f:d4:1d:79:72:e9:cb:42:e8:f7:6b:ad:bf:e8:81:1a:ac:6b:
1f:9e:b2:73:70:6f:45:55:ac:20:81:f4:2f:3d:6b:aa:2a:11:
e0:60:f7:82:19:6d:d9:9f:ce:36:80:3e:75:02:a0:8e:1c:31:
5e:64:18:8b:df:1a:57:8c:3e:45:bc:19:6a:3c:af:c7:0c:40:
8e:ad:35:c9:98:ff:5b:60:5a:02:6d:b0:17:fe:2a:69:e9:2f:
9f:99:63:52:ba:08:73:03:90:29:c3:98:3b:da:e3:e1:db:4e:
74:c5:64:02:9e:80:13:b4:ec:6e:0b:78:b4:06:b2:00:44:d1:
8b:16:7a:17:08:d8:a7:27:80:83:de:43:1b:58:66:5f:5a:3b:
32:f7:61:9b:c5:31:30:ad:23:c2:db:2e:9e:45:61:63:46:c1:
34:4a:ad:c4:23:4f:89:58:fc:33:e4:d9:31:79:f0:f8:c9:ae:
77:a8:ed:85:46:6e:13:6c:e3:79:24:63:e7:d2:8c:4f:28:07:
91:51:84:26:8e:b5:d0:37:bf:d2:35:c4:a8:db:4b:a3:56:3f:
98:7e:33:af:c8:a4:26:60:77:53:f6:03:5b:17:3b:df:a6:f0:
62:2f:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:12 2025 by rpki-client on console.sobornost.net