Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/OtYpQa3t5uicFocE1dd5iGpXhFI.roa
File: OtYpQa3t5uicFocE1dd5iGpXhFI.roa (raw, json)
Hash identifier: IEsINl7isS6taxdRTxKp/6c07BTSNmB6KNMiIF/vUtY=
Subject key identifier: 3A:D6:29:41:AD:ED:E6:E8:9C:16:87:04:D5:D7:79:88:6A:57:84:52
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA6DDC4C9A9402651F8401F311E1AC0FF
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/OtYpQa3t5uicFocE1dd5iGpXhFI.roa
Signing time: Thu 23 May 2024 19:11:42 +0000
ROA not before: Thu 23 May 2024 19:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:dd:c4:c9:a9:40:26:51:f8:40:1f:31:1e:1a:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 19:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ad62941adede6e89c168704d5d779886a578452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:4b:6a:ee:74:94:1b:4b:a1:02:40:2d:ee:
ab:15:ae:35:61:75:f4:0d:c1:5d:14:b7:57:21:90:
6c:6b:c0:89:3c:37:56:1d:3d:00:64:28:6a:51:98:
3f:3d:19:20:03:80:75:91:d7:f8:9d:8d:86:43:80:
bf:a6:e0:e5:82:3f:64:d7:21:eb:07:b4:65:3c:26:
82:22:fc:89:3f:b1:c9:91:b8:3d:6c:d0:3b:bb:da:
86:9f:09:c2:c2:07:e5:88:51:7e:fe:22:60:cc:dc:
8a:e0:15:0f:87:d5:66:2f:a6:12:16:2d:26:30:8f:
4e:cd:fa:7f:3b:ab:c6:33:27:71:93:cb:57:eb:3d:
5c:40:e0:2e:8a:39:f6:bf:25:33:05:c5:39:75:d2:
3a:8e:60:0a:fa:ad:42:74:c1:18:be:1a:cd:68:6c:
c8:1e:63:ee:c0:ff:41:4a:70:a8:e0:7e:9d:1f:a8:
4c:79:38:b3:f1:ff:65:07:96:5b:90:ca:80:78:52:
93:63:76:61:7a:47:35:f1:eb:0d:6e:7c:df:30:7d:
f6:34:a5:f1:9d:a8:16:58:73:21:84:aa:68:1a:50:
c0:46:78:26:0b:d3:7c:ad:db:2a:52:11:58:3f:fb:
b6:ba:f6:fe:1d:60:a6:1c:35:76:82:a6:c3:00:4c:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:29:41:AD:ED:E6:E8:9C:16:87:04:D5:D7:79:88:6A:57:84:52
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/OtYpQa3t5uicFocE1dd5iGpXhFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:f1:fd:3c:e1:1e:95:f5:31:73:af:76:72:e7:09:0c:dc:31:
e0:f5:6f:52:27:cb:ae:30:1f:5e:af:83:20:1c:8b:21:ec:e6:
b0:86:65:29:95:91:56:25:3e:33:13:65:20:81:45:b0:bf:e4:
9b:75:30:ae:9f:76:e6:49:ad:72:54:d0:2a:25:0a:e3:ed:b2:
f0:3c:b9:94:a4:a8:26:5a:16:f5:6b:a0:42:76:d6:71:39:ca:
ef:16:24:9e:5d:a2:38:8d:c2:de:91:2c:96:19:a0:7c:1f:bb:
c8:dd:3f:eb:55:a9:e1:8b:97:01:40:64:18:aa:03:56:34:07:
84:07:7b:0a:82:6d:bf:93:0d:e6:65:ee:f7:52:b5:47:5f:a4:
88:d1:aa:95:6b:c8:c2:63:63:ff:cf:67:a6:79:f9:08:9c:89:
5e:89:39:73:11:19:b3:95:02:f1:99:cd:e8:e2:5b:1c:2d:de:
75:39:07:49:95:4c:6e:bc:eb:6a:1e:4b:81:b2:64:88:c5:a0:
95:75:8d:9e:a8:4a:fb:0c:d8:dc:fe:05:2b:56:a7:2c:71:bb:
b3:95:98:38:1f:3a:24:05:d9:aa:4a:02:3c:d8:3b:d0:f6:db:
b9:39:12:b8:21:55:15:d2:dc:19:35:8c:e2:81:59:d0:8b:12:
29:77:06:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+m3cTJqUAmUfhAHzEeGsD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTIzMTkxMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWQ2Mjk0MWFkZWRlNmU4OWMxNjg3MDRkNWQ3Nzk4ODZhNTc4NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnNLau50lBtLoQJALe6rFa41YXX0
DcFdFLdXIZBsa8CJPDdWHT0AZChqUZg/PRkgA4B1kdf4nY2GQ4C/puDlgj9k1yHr
B7RlPCaCIvyJP7HJkbg9bNA7u9qGnwnCwgfliFF+/iJgzNyK4BUPh9VmL6YSFi0m
MI9Ozfp/O6vGMydxk8tX6z1cQOAuijn2vyUzBcU5ddI6jmAK+q1CdMEYvhrNaGzI
HmPuwP9BSnCo4H6dH6hMeTiz8f9lB5ZbkMqAeFKTY3Zhekc18esNbnzfMH32NKXx
nagWWHMhhKpoGlDARngmC9N8rdsqUhFYP/u2uvb+HWCmHDV2gqbDAEz3uwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDrWKUGt7ebonBaHBNXXeYhqV4RSMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvT3RZcFFhM3Q1dWljRm9jRTFkZDVpR3BYaEZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKLx/TzhHpX1MXOvdnLn
CQzcMeD1b1Iny64wH16vgyAciyHs5rCGZSmVkVYlPjMTZSCBRbC/5Jt1MK6fduZJ
rXJU0ColCuPtsvA8uZSkqCZaFvVroEJ21nE5yu8WJJ5dojiNwt6RLJYZoHwfu8jd
P+tVqeGLlwFAZBiqA1Y0B4QHewqCbb+TDeZl7vdStUdfpIjRqpVryMJjY//PZ6Z5
+QiciV6JOXMRGbOVAvGZzejiWxwt3nU5B0mVTG6862oeS4GyZIjFoJV1jZ6oSvsM
2Nz+BStWpyxxu7OVmDgfOiQF2apKAjzYO9D227k5ErghVRXS3Bk1jOKBWdCLEil3
BtY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:53 2025 by rpki-client