Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/OKyKpN95rjkz0BkAHFrKr0JjvkE.roa
File: OKyKpN95rjkz0BkAHFrKr0JjvkE.roa (raw, json)
Hash identifier: sfF8wY2hkU4qO50ecHF6qLBt9Z8YYYVQ9BQjou15tdc=
Subject key identifier: 38:AC:8A:A4:DF:79:AE:39:33:D0:19:00:1C:5A:CA:AF:42:63:BE:41
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019491C83CB2CA9FB1BD051CF6C71C6E6B41
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/OKyKpN95rjkz0BkAHFrKr0JjvkE.roa
Signing time: Thu 23 Jan 2025 06:10:06 +0000
ROA not before: Thu 23 Jan 2025 06:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:91:c8:3c:b2:ca:9f:b1:bd:05:1c:f6:c7:1c:6e:6b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 23 06:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38ac8aa4df79ae3933d019001c5acaaf4263be41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:1c:18:e6:30:5d:ee:b1:dd:9b:13:7d:26:
6a:5f:a4:b8:59:c4:95:b0:18:1e:6f:11:d2:59:d4:
81:e3:eb:3e:10:f1:13:cf:05:d5:9d:9f:4f:f8:f5:
23:b6:f5:4a:93:23:83:b0:5a:f0:ff:8b:3c:da:fb:
31:87:88:fc:12:f1:d7:05:71:4b:4c:ad:ed:bd:5c:
38:60:62:a5:e7:cf:91:94:79:48:1c:4d:f1:cc:e7:
ba:29:be:73:bd:ca:e4:45:4d:22:41:42:71:5c:bd:
3e:ae:ec:9d:92:1d:d7:02:29:20:6b:25:b3:5b:c4:
0f:19:b9:bd:c6:76:9e:49:4e:e7:7d:ec:91:bc:ea:
38:1e:cc:1b:77:23:a1:c7:3c:a2:0a:1d:21:92:56:
d9:a1:ed:e7:b3:6b:b2:73:63:70:77:b9:c1:3f:86:
19:14:e6:c7:d7:ed:4c:15:49:69:0c:00:5d:7c:31:
8f:9b:21:2d:8c:3d:78:68:1b:96:ff:5c:ed:e7:05:
c1:92:2f:dc:9e:3b:4a:60:b2:2d:48:f9:28:21:63:
86:ca:b5:de:68:2f:88:02:2a:0d:c5:fd:ae:2a:fc:
03:85:6d:de:63:7d:3e:8f:03:ce:d4:eb:0a:bb:ff:
90:cc:24:52:03:ed:73:d8:ae:95:9d:42:db:16:f5:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AC:8A:A4:DF:79:AE:39:33:D0:19:00:1C:5A:CA:AF:42:63:BE:41
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/OKyKpN95rjkz0BkAHFrKr0JjvkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0/21
140.150.10.0/24
140.150.12.0/24
140.150.14.0/23
140.150.18.0/23
140.150.21.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
Signature Algorithm: sha256WithRSAEncryption
39:81:6c:4b:7c:ac:4b:e2:cb:d7:ea:46:7f:ec:e5:e1:b3:57:
9c:8d:8f:40:ae:ff:25:5d:51:d4:70:74:b9:94:e7:61:1b:66:
2b:dc:6c:cd:ed:8b:9e:f1:87:fc:cc:dd:ae:28:56:56:9f:9f:
d2:29:6c:1f:ab:bb:93:46:33:54:ec:2e:b1:b6:83:7b:e8:64:
ad:5f:6f:1f:f8:bb:32:4d:bb:c4:f5:cb:ed:3b:14:08:8c:dc:
1a:a2:8a:37:e3:23:c9:9b:f4:44:62:eb:ca:c0:13:e8:f1:f4:
50:5d:77:95:84:7a:3b:48:eb:42:5a:60:8c:70:3f:6b:53:0c:
af:c2:ae:b3:bc:07:85:05:74:99:76:16:90:36:ba:53:5e:14:
ae:90:57:4a:96:4a:d1:a9:04:26:e6:3f:3b:d8:03:68:eb:69:
24:d9:bf:61:fe:a6:7a:8b:40:21:0e:2f:d6:02:e3:5a:95:a4:
48:ca:9a:ef:b5:9d:7c:eb:69:2d:82:a9:82:c4:e4:5f:60:ef:
f1:48:db:b3:5a:af:aa:d7:93:d8:27:48:6e:80:2d:5e:08:50:
0d:e6:d0:bc:6a:6d:0d:97:b0:02:d7:3d:41:81:1f:82:63:dc:
0e:7f:76:ee:d1:64:90:f9:4f:71:e6:3b:be:ab:72:e4:b8:99:
59:54:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:11 2025 by rpki-client