Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0OvZ8GpdN03UENJ_GPSopzNPOFE.roa
File: 0OvZ8GpdN03UENJ_GPSopzNPOFE.roa (raw, json)
Hash identifier: H8v7B+VwEhGg5nB8puG1rTijqlcMS4qx9qzS2n+JnV0=
Subject key identifier: D0:EB:D9:F0:6A:5D:37:4D:D4:10:D2:7F:18:F4:A8:A7:33:4F:38:51
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6984A87191B36CF65E9E9F4A77113D5E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0OvZ8GpdN03UENJ_GPSopzNPOFE.roa
Signing time: Sat 23 Mar 2024 04:14:45 +0000
ROA not before: Sat 23 Mar 2024 04:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:69:84:a8:71:91:b3:6c:f6:5e:9e:9f:4a:77:11:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 04:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0ebd9f06a5d374dd410d27f18f4a8a7334f3851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:d4:47:e3:c5:f3:89:63:ed:93:19:d6:e8:
89:63:3d:ac:72:51:56:ff:3b:93:14:8b:58:ed:fe:
98:28:97:4b:74:67:de:13:a5:b6:6e:41:d3:80:2a:
75:9e:32:2a:f9:10:94:26:5f:4d:7c:81:ed:26:10:
ba:a4:aa:98:66:16:ec:0b:b7:48:67:4a:71:9f:0e:
51:77:f2:16:80:b8:2a:3d:b5:3e:31:9f:41:0c:31:
46:70:26:fd:6c:dc:9f:7a:d0:3b:ac:3c:62:77:0e:
0b:28:c6:fc:0d:e3:87:f5:95:79:17:5f:35:94:7e:
43:83:6b:dc:45:d6:6e:dc:9e:80:af:12:92:58:71:
fa:f6:87:f0:cc:53:bd:1d:02:27:27:cd:98:4b:91:
e7:53:a9:ab:ac:a7:50:9a:58:25:b1:82:7c:b3:bb:
a5:ca:c4:53:49:0b:4a:17:87:33:b2:31:da:62:28:
50:8f:5e:ec:47:c1:5e:ba:e8:84:d7:bb:f4:7b:f8:
48:d0:c7:12:c1:09:11:1d:88:5a:ef:b1:10:81:5d:
0c:ca:c6:fd:c1:5f:7a:7a:56:8e:d3:f7:e1:fa:77:
90:96:24:63:dc:5e:6b:d7:8b:62:e1:9e:8c:81:9f:
3e:41:6e:bc:5b:e7:62:ed:c1:14:4e:e1:74:f2:4d:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EB:D9:F0:6A:5D:37:4D:D4:10:D2:7F:18:F4:A8:A7:33:4F:38:51
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0OvZ8GpdN03UENJ_GPSopzNPOFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:32:f3:c3:84:59:2e:2f:00:a4:da:46:11:53:56:25:87:f2:
d6:d7:1f:e1:34:3e:b9:72:6a:db:0e:76:80:9c:9f:e5:84:52:
03:ed:71:ed:34:26:f2:cf:85:71:d8:f7:0f:93:a5:45:43:79:
38:35:2a:28:36:8b:87:96:ee:ac:54:d4:a0:a9:25:34:a2:56:
61:23:1c:8c:92:44:ef:a5:7d:64:ed:ae:c1:1f:ca:87:64:f3:
0d:7f:84:22:1e:0c:4d:a8:ff:b5:13:58:38:36:94:b7:74:d0:
58:eb:c7:83:dd:0b:e9:40:31:9f:1e:34:b8:91:02:e1:73:10:
d8:c1:8c:cf:a8:77:85:f6:e0:aa:3e:28:9e:8a:e7:92:28:ff:
94:13:83:ad:2b:29:d5:0b:81:af:74:81:e9:be:b7:e6:b6:e3:
d8:9e:48:35:d1:8a:6f:07:68:be:5c:b0:44:a5:d0:01:83:49:
da:0f:fa:84:d0:87:17:18:26:d5:03:57:0e:bf:d5:20:5a:2e:
c7:75:1d:22:81:fb:ad:12:45:01:70:15:4c:ab:b6:15:41:29:
0a:d1:52:78:1e:35:27:6e:ca:17:07:7c:e5:c0:93:6b:65:b9:
e9:e8:03:fd:7f:a5:ca:f4:98:02:87:88:71:d5:63:f8:7e:f6:
91:c4:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:19 2025 by rpki-client