Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OBG_IF-11K-PnGhfrXiHGWP8uoM.roa
File: OBG_IF-11K-PnGhfrXiHGWP8uoM.roa (raw, json)
Hash identifier: ysXylTXK75plpLq3ayvRT0vIsp2u2cvUFbC/t/zzKpI=
Subject key identifier: 38:11:BF:20:5F:B5:D4:AF:8F:9C:68:5F:AD:78:87:19:63:FC:BA:83
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D19EBF900EC9B62E942A86DF6401304B9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OBG_IF-11K-PnGhfrXiHGWP8uoM.roa
Signing time: Thu 18 Jan 2024 00:15:11 +0000
ROA not before: Thu 18 Jan 2024 00:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:19:eb:f9:00:ec:9b:62:e9:42:a8:6d:f6:40:13:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 18 00:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3811bf205fb5d4af8f9c685fad78871963fcba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:a2:98:6e:f4:be:ce:7e:b8:8d:fe:8f:d8:
fa:4b:8b:38:e1:f5:b5:4f:cf:56:5a:26:6c:38:cf:
86:d6:7f:eb:1f:79:33:6b:cd:b1:3b:e4:c6:6f:9e:
6e:95:4a:f2:cc:f1:d8:ee:c6:67:9d:4a:91:eb:de:
f0:6b:fe:b2:9d:c4:f4:47:76:cb:74:66:64:7c:3b:
77:e1:1c:64:b1:9c:79:ba:c3:14:d7:7b:f4:85:16:
55:b2:32:27:91:e8:44:e2:40:91:26:2e:db:cc:ff:
e2:b4:8d:1f:16:55:79:e8:ac:aa:f0:d9:06:35:2b:
91:52:cf:94:16:94:57:24:91:63:2f:07:18:c6:a8:
04:e8:e7:a3:1d:e9:7c:67:ad:21:fd:76:e6:fb:ef:
af:dc:cb:23:58:f9:51:8c:cf:15:51:26:2f:7b:c3:
0d:6e:5e:6d:e5:e0:bf:87:c1:da:36:bc:c4:99:bc:
0b:40:6a:12:ac:ea:cc:8c:a2:3b:bb:f0:f0:8b:6c:
ba:75:64:68:6d:ad:ed:dc:75:51:26:a7:78:4a:db:
2f:71:6b:2d:03:3a:7a:cb:48:f9:e4:a1:19:ca:6a:
39:4c:22:80:55:b5:77:3b:85:67:c0:a7:32:e3:73:
ba:8e:fa:d7:4f:59:d3:09:4a:dd:db:b7:29:0f:c5:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:11:BF:20:5F:B5:D4:AF:8F:9C:68:5F:AD:78:87:19:63:FC:BA:83
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OBG_IF-11K-PnGhfrXiHGWP8uoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:46:a3:a4:97:aa:bb:e6:b6:58:22:69:5d:bd:4f:3c:c6:df:
01:80:a3:63:60:e7:13:0e:71:5b:92:5e:ba:e7:3b:3b:4c:1f:
15:a4:77:54:9c:91:02:4e:9b:70:84:f2:e7:a4:e2:56:c9:12:
22:3a:ba:94:5c:6e:df:fb:72:33:c9:fe:26:61:56:c8:73:b8:
07:48:94:5c:9f:a1:af:46:76:25:ed:f7:38:1c:d0:a7:ea:be:
ac:14:71:4b:3d:49:e2:ab:6b:7c:3f:5e:05:97:96:9a:1d:2d:
e2:07:13:c3:be:06:81:5b:a9:67:7c:97:85:a1:ab:3b:73:40:
1f:7a:0a:fd:70:4b:c1:ae:9d:8c:56:a4:14:07:ae:cf:82:80:
6a:14:54:64:48:45:7d:fb:d2:de:ac:3e:6a:1d:6e:59:a0:a0:
d5:36:ef:01:bf:a5:af:90:a1:b4:32:1c:96:87:e4:1b:5d:5a:
d8:42:ed:4d:a7:5f:8a:e5:b2:52:a5:65:c6:6b:93:96:16:c5:
c2:7b:98:ae:89:6c:49:ac:5c:90:ec:c2:75:e9:69:5d:91:c1:
1c:ac:c0:50:97:95:61:52:b1:04:4a:e3:aa:75:d2:f1:75:5b:
56:54:c3:56:a7:fb:b0:0f:ae:d4:41:42:06:98:33:e2:75:42:
be:70:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:44 2025 by rpki-client