Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/vEfFoL-EkTGQVCtcp9InDkniP1M.roa
File: vEfFoL-EkTGQVCtcp9InDkniP1M.roa (raw, json)
Hash identifier: 0bTKLPhULmH+dMo4Cs4PeVfLfF6DBwWmtMIbSspc5Ao=
Subject key identifier: BC:47:C5:A0:BF:84:91:31:90:54:2B:5C:A7:D2:27:0E:49:E2:3F:53
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019521FFBC66027BF5DB0777D56DFF0B2353
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/vEfFoL-EkTGQVCtcp9InDkniP1M.roa
Signing time: Thu 20 Feb 2025 06:16:02 +0000
ROA not before: Thu 20 Feb 2025 06:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.11.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.20.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
146.103.64.0/24 maxlen: 24
146.103.65.0/24 maxlen: 24
146.103.66.0/24 maxlen: 24
146.103.67.0/24 maxlen: 24
146.103.68.0/24 maxlen: 24
146.103.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:21:ff:bc:66:02:7b:f5:db:07:77:d5:6d:ff:0b:23:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Feb 20 06:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc47c5a0bf84913190542b5ca7d2270e49e23f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:e0:6d:e2:2f:e9:dc:50:0f:9a:60:0c:a1:
66:01:5c:86:fe:38:ea:78:0e:80:13:17:4f:3e:f1:
77:d7:be:90:aa:28:1a:11:68:95:ab:7f:53:bd:a3:
51:9f:a7:5d:97:ed:5f:de:04:32:13:0f:df:97:0c:
6d:9c:b7:cf:64:6f:e9:38:54:b9:80:5b:6f:81:5d:
b6:94:8f:a3:53:22:22:c1:a5:c6:8c:a5:44:c2:01:
3d:26:17:54:c2:d1:37:d2:73:12:2e:53:73:30:6f:
1c:7d:68:d8:73:b2:cf:0a:3b:c0:fb:cc:be:38:25:
4a:53:41:f5:0e:9e:53:a1:4b:3e:d8:8d:48:5a:73:
0f:84:f2:c9:b7:25:b4:65:1a:aa:71:49:4c:95:06:
3f:22:6c:9c:15:51:b2:ea:b8:63:5d:70:33:f1:b1:
62:f4:0c:7a:36:b7:3b:f8:c7:14:59:d6:cc:89:51:
8b:83:48:03:d1:35:0d:6f:b5:4a:ae:58:de:0e:f2:
02:5c:21:bc:49:81:43:0a:ff:f4:2c:f2:b4:f1:08:
4b:4b:b0:40:77:fe:51:e6:74:b9:af:40:4e:b0:0f:
02:c5:eb:1b:cb:52:12:b7:12:a9:8d:6a:61:bf:49:
67:43:c2:5a:5a:d1:d0:d8:09:20:ca:d5:72:bb:4f:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:47:C5:A0:BF:84:91:31:90:54:2B:5C:A7:D2:27:0E:49:E2:3F:53
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/vEfFoL-EkTGQVCtcp9InDkniP1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0/21
140.150.10.0-140.150.12.255
140.150.14.0/23
140.150.18.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
146.103.64.0-146.103.68.255
146.103.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:af:94:71:f5:a3:84:98:53:0b:77:5d:07:36:61:b3:c3:aa:
3f:86:a6:3c:db:eb:56:29:d7:08:5e:74:9b:73:bb:95:84:f1:
60:01:6d:37:f4:61:5d:14:2f:11:ea:50:e6:5b:d3:72:b1:16:
90:ba:ed:45:dc:e1:38:07:ba:42:15:ae:83:76:12:73:01:3e:
e7:ff:72:b4:0f:f5:00:38:4d:38:00:61:db:4d:dd:98:b6:5f:
60:ba:6c:cf:09:8b:8b:2d:c8:d8:9b:c0:5b:8b:04:cc:e8:b3:
91:1a:51:13:e5:61:f0:fc:c3:74:b0:86:c6:33:7e:42:05:02:
fe:c3:ca:45:90:3d:7c:aa:c6:57:2c:5c:fd:89:96:4a:f8:14:
6e:1f:21:4c:c1:77:9a:ae:f7:d7:ee:66:11:ad:f3:26:0d:d7:
f0:14:18:1c:cd:27:f7:0d:ca:aa:69:dc:f0:46:74:e0:89:99:
99:95:06:25:30:7b:e4:45:13:6d:fe:5a:47:44:ec:16:ea:37:
85:af:c5:a7:a8:f5:d9:7f:6e:96:04:dd:fd:72:57:f4:ec:d0:
98:62:2c:95:29:7c:69:8a:76:99:5d:8a:6c:12:9f:8e:18:ac:
96:6e:14:e5:41:c0:68:82:9e:d4:11:4d:54:57:30:9d:ae:a5:
41:2f:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:52 2025 by rpki-client on console.sobornost.net