Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Of49XGodI2M0DZm-IFeEu_xk9tQ.roa
File: Of49XGodI2M0DZm-IFeEu_xk9tQ.roa (raw, json)
Hash identifier: c3JWL/4hlgHmyuKV14+RhDxsolo/+B1SiSw8GL7QEpk=
Subject key identifier: 39:FE:3D:5C:6A:1D:23:63:34:0D:99:BE:20:57:84:BB:FC:64:F6:D4
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F524D6C79F540E2D160D4626CDD2FB8E1
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Of49XGodI2M0DZm-IFeEu_xk9tQ.roa
Signing time: Tue 07 May 2024 09:05:56 +0000
ROA not before: Tue 07 May 2024 09:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
2001:67c:64:ffff:0:18f:524d:27c6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:4d:6c:79:f5:40:e2:d1:60:d4:62:6c:dd:2f:b8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 09:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39fe3d5c6a1d2363340d99be205784bbfc64f6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:b8:01:be:31:08:3f:ef:e7:16:96:64:9d:
9f:30:b9:e4:10:75:53:ba:7f:7d:6d:4b:4c:67:4c:
46:af:85:52:e0:11:62:1e:19:d4:a7:d5:4f:24:96:
79:c8:09:67:1d:19:a1:81:23:a0:f6:13:0c:c1:04:
4b:b3:27:78:0e:33:98:a9:76:a6:9b:e9:9b:5f:2b:
b9:40:a4:bf:8f:fa:a0:35:88:c7:70:ab:5f:3e:78:
c4:31:0f:5f:50:e1:62:4e:a7:0b:d2:aa:d1:23:f7:
11:f0:b7:0c:77:17:e4:8d:6a:c2:ef:c2:6a:9f:4e:
4a:e5:fa:5a:27:57:a2:13:64:57:70:df:0e:fe:20:
7d:7e:10:49:53:fe:8b:78:3d:8a:0d:e4:39:ac:dd:
9f:c5:5b:0f:97:53:bf:27:2c:02:8d:b1:1b:98:c3:
e7:d4:75:47:3d:c7:78:2d:6f:17:a7:65:d4:93:6e:
d9:57:64:54:0a:94:05:3e:83:2e:d1:bf:8d:4d:3b:
7a:0b:27:27:26:e9:99:b4:6d:46:cf:73:b4:21:79:
88:8d:8f:e2:30:0c:90:94:7d:ee:67:e7:9d:b4:41:
30:9f:27:31:a0:bb:5d:bc:d0:7d:d0:7a:2f:a8:68:
e8:82:2c:77:7a:c9:1c:72:87:aa:e9:36:32:6a:99:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:3D:5C:6A:1D:23:63:34:0D:99:BE:20:57:84:BB:FC:64:F6:D4
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Of49XGodI2M0DZm-IFeEu_xk9tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:22:5b:56:b7:38:16:e9:29:02:23:91:3f:25:4e:d6:fd:8f:
bf:b7:a5:3c:de:ba:b3:ca:5b:58:63:a8:7e:d2:b3:1c:b4:74:
ca:91:09:f1:63:2f:cd:7f:aa:b1:f8:3a:1f:9c:89:33:b6:3d:
db:4e:32:ca:70:d1:36:d4:56:a8:ce:c8:24:3a:be:83:c9:1a:
17:9e:a3:f2:65:9a:4f:95:d3:7c:59:86:6f:f3:3e:94:31:d2:
6a:ca:72:e8:cc:ca:cb:d6:06:0e:07:b9:ff:ac:d1:0a:e2:42:
5d:7b:35:bb:c4:25:52:eb:6c:b6:20:d5:7d:3b:38:72:f3:90:
1f:af:fe:a8:05:92:c1:b8:fc:11:94:5d:a5:0d:0f:9d:95:e2:
66:9f:f7:de:4d:63:02:c3:f5:0b:d8:c3:85:c2:2a:dc:ce:f5:
5f:6b:2a:85:e3:99:df:0b:b1:60:9e:1c:fc:a4:4c:16:6b:86:
9e:a1:8a:1b:8e:21:4b:21:8a:22:14:e0:20:62:52:84:6c:26:
a9:9e:60:31:30:8c:03:1c:e1:58:19:3e:7f:9f:4c:fc:eb:d2:
42:0c:80:4c:03:0b:f6:80:6e:1e:8e:ca:59:2f:53:b2:14:91:
37:91:70:bb:f6:36:f4:98:4b:54:ca:b7:80:3c:78:0d:5a:ed:
27:c1:63:9c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9STWx59UDi0WDUYmzdL7jhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA3MDkwNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWZlM2Q1YzZhMWQyMzYzMzQwZDk5YmUyMDU3ODRiYmZjNjRmNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE+4Ab4xCD/v5xaWZJ2fMLnkEHVT
un99bUtMZ0xGr4VS4BFiHhnUp9VPJJZ5yAlnHRmhgSOg9hMMwQRLsyd4DjOYqXam
m+mbXyu5QKS/j/qgNYjHcKtfPnjEMQ9fUOFiTqcL0qrRI/cR8LcMdxfkjWrC78Jq
n05K5fpaJ1eiE2RXcN8O/iB9fhBJU/6LeD2KDeQ5rN2fxVsPl1O/JywCjbEbmMPn
1HVHPcd4LW8Xp2XUk27ZV2RUCpQFPoMu0b+NTTt6CycnJumZtG1Gz3O0IXmIjY/i
MAyQlH3uZ+edtEEwnycxoLtdvNB90HovqGjogix3eskccoeq6TYyapkm3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDn+PVxqHSNjNA2ZviBXhLv8ZPbUMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvT2Y0OVhHb2RJMk0wRFptLUlGZUV1X3hrOXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIgiW1a3OBbpKQIjkT8l
Ttb9j7+3pTzeurPKW1hjqH7Ssxy0dMqRCfFjL81/qrH4Oh+ciTO2PdtOMspw0TbU
VqjOyCQ6voPJGheeo/Jlmk+V03xZhm/zPpQx0mrKcujMysvWBg4Huf+s0QriQl17
NbvEJVLrbLYg1X07OHLzkB+v/qgFksG4/BGUXaUND52V4maf995NYwLD9QvYw4XC
KtzO9V9rKoXjmd8LsWCeHPykTBZrhp6hihuOIUshiiIU4CBiUoRsJqmeYDEwjAMc
4VgZPn+fTPzr0kIMgEwDC/aAbh6OylkvU7IUkTeRcLv2NvSYS1TKt4A8eA1a7SfB
Y5w=
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:14:35 2025 by rpki-client