Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OOUc1NGGwjdx_u6UXt1EHOdg4aw.roa
File: OOUc1NGGwjdx_u6UXt1EHOdg4aw.roa (raw, json)
Hash identifier: vfaxJYsN3WcNxa4CObMnjhb4g+22GacaUlveKy1baRY=
Subject key identifier: 38:E5:1C:D4:D1:86:C2:37:71:FE:EE:94:5E:DD:44:1C:E7:60:E1:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195B4C4C85054A9B063F507BA31480DEEB5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OOUc1NGGwjdx_u6UXt1EHOdg4aw.roa
Signing time: Thu 20 Mar 2025 18:15:49 +0000
ROA not before: Thu 20 Mar 2025 18:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 151.242.92.0/24 maxlen: 24
151.242.93.0/24 maxlen: 24
151.242.94.0/24 maxlen: 24
151.242.95.0/24 maxlen: 24
151.242.96.0/24 maxlen: 24
151.242.98.0/24 maxlen: 24
151.242.100.0/24 maxlen: 24
151.242.101.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.242.107.0/24 maxlen: 24
151.242.109.0/24 maxlen: 24
151.242.112.0/24 maxlen: 24
151.242.113.0/24 maxlen: 24
151.242.115.0/24 maxlen: 24
151.242.184.0/22 maxlen: 22
151.242.196.0/22 maxlen: 22
151.243.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:c4:c8:50:54:a9:b0:63:f5:07:ba:31:48:0d:ee:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 18:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38e51cd4d186c23771feee945edd441ce760e1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:69:9b:a8:ec:28:c6:4e:23:f7:2b:89:3f:
21:62:3a:45:d7:c4:d8:87:16:9a:46:54:d5:dd:16:
4b:9e:5b:54:cb:4d:a0:b4:5b:1b:bd:e0:d8:67:df:
16:34:6c:1a:ce:02:a8:bd:ef:1e:d6:46:98:7b:de:
1a:5b:d5:b0:d6:2a:30:45:64:94:fc:de:5b:33:b6:
99:a6:5d:7d:cc:6c:28:ec:7b:6a:fb:38:e0:a2:1e:
62:3e:d1:23:30:02:f1:11:d0:d0:ec:fb:fd:51:0c:
2b:e9:9d:4b:d3:ad:fd:ba:23:c4:e9:e5:f3:ab:54:
74:2c:41:40:f4:16:fe:45:63:f1:f4:9a:8b:4b:d5:
70:b1:3d:b5:f5:84:1f:af:7c:73:2e:0f:74:bc:cb:
8b:80:b3:a6:bf:0d:ab:a1:cd:85:ea:67:33:be:5a:
41:35:1e:1c:6c:35:04:8f:63:08:58:97:31:56:ae:
45:33:6a:39:9b:ff:6b:df:21:d4:ed:60:6d:24:97:
e9:8f:f3:4e:34:be:b1:0b:5d:f0:31:27:8d:58:f1:
e1:57:8d:66:6c:56:cc:b7:9b:37:22:66:49:3b:b6:
e6:87:7a:7b:05:f6:ba:40:7d:64:27:19:0b:0b:82:
28:00:46:08:f6:39:c9:ed:56:52:3a:ee:b5:a4:4e:
c9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:1C:D4:D1:86:C2:37:71:FE:EE:94:5E:DD:44:1C:E7:60:E1:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OOUc1NGGwjdx_u6UXt1EHOdg4aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.92.0-151.242.96.255
151.242.98.0/24
151.242.100.0/23
151.242.103.0/24
151.242.105.0/24
151.242.107.0/24
151.242.109.0/24
151.242.112.0/23
151.242.115.0/24
151.242.184.0/22
151.242.196.0/22
151.243.168.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f1:d0:86:ff:59:70:62:22:c1:ba:0d:62:c1:25:8e:f8:0c:
66:bb:53:9f:6d:98:8b:8b:64:a0:1a:6b:00:05:b9:f6:ea:9d:
3f:f8:2f:0c:49:a2:14:40:47:0b:79:b0:2e:a8:2d:98:c9:c0:
c4:5c:a3:69:43:66:ad:5d:35:f6:e7:33:6b:32:b3:dd:0c:e8:
71:eb:ca:3e:dd:25:27:b7:15:0d:8e:e5:f4:35:79:8f:be:3f:
33:c7:68:a8:b7:29:5c:e4:43:7c:a1:9a:cd:9b:05:db:db:ca:
63:42:01:a0:39:ea:fd:27:87:12:3d:cd:0e:48:7b:7b:cf:f2:
48:e5:85:3e:0a:77:c2:02:1b:11:5a:55:d5:ec:02:4e:34:bd:
47:85:07:d9:b7:3a:12:c4:14:eb:d0:ff:e4:d7:ba:11:5d:53:
ca:28:c6:92:ad:c8:f7:c0:d0:27:d5:e8:0b:b6:fa:d9:cc:5d:
c6:da:b5:a6:31:8d:dd:7b:19:a1:f8:69:d5:2f:31:b6:0b:d5:
09:4b:19:82:41:96:1c:a8:2a:f3:b1:d9:f5:c1:4e:c5:43:cc:
65:77:00:9a:4f:61:7f:32:a5:86:28:8d:ac:f8:00:42:31:0a:
2c:d8:a1:89:cc:20:16:55:f2:6c:5b:ba:7a:8c:0e:61:9f:72:
99:78:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:14 2025 by rpki-client