Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OEPbsJmf-4TK0Vz2KlC5i9t6VSQ.roa
File: OEPbsJmf-4TK0Vz2KlC5i9t6VSQ.roa (raw, json)
Hash identifier: H5NdCBpPVIVQU3ZTbvElgqkW1TtJR404YkWJyNKh7gw=
Subject key identifier: 38:43:DB:B0:99:9F:FB:84:CA:D1:5C:F6:2A:50:B9:8B:DB:7A:55:24
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9FCAB28A1EAA34493A4A6F6117F0EF86
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OEPbsJmf-4TK0Vz2KlC5i9t6VSQ.roa
Signing time: Tue 02 Apr 2024 17:10:44 +0000
ROA not before: Tue 02 Apr 2024 17:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:ca:b2:8a:1e:aa:34:49:3a:4a:6f:61:17:f0:ef:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 2 17:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3843dbb0999ffb84cad15cf62a50b98bdb7a5524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:61:fe:70:68:20:47:a7:56:68:7b:7c:0a:
8c:33:5b:25:1d:6b:e8:66:f5:96:bd:d5:8e:d6:cf:
3f:80:7d:a2:70:31:52:05:8b:1b:10:df:be:14:4f:
70:20:a5:a4:60:2d:8e:3c:ac:ef:ca:6f:2e:0e:2f:
ce:e1:9f:74:13:24:34:9c:d3:18:68:55:a6:10:56:
ce:58:f0:9a:8f:7d:03:4f:c3:0e:b9:42:b8:4e:95:
45:88:ed:fd:e8:22:93:51:c8:fb:24:08:6b:51:a4:
f6:6f:2a:e9:20:81:9d:36:57:9b:ad:64:96:ab:b9:
9c:e8:60:eb:99:f7:18:25:2b:3a:67:ea:2b:d2:c1:
f3:5d:17:e8:d2:fe:fa:a3:8e:6c:97:aa:37:fb:95:
c2:e0:a7:1c:f1:0e:32:82:79:a0:cf:a1:5a:bc:92:
f8:49:b5:e4:88:90:0f:d9:fa:87:7d:a7:6b:79:7f:
34:3f:42:2d:96:70:d8:a4:a9:84:2f:09:ee:5c:a0:
30:17:cc:54:e7:05:2e:84:fb:4b:7e:49:69:b0:cf:
29:b2:99:de:05:54:5e:29:e9:e2:15:c6:9d:4c:5f:
db:95:d5:c7:28:d7:fa:08:3f:7f:ae:fc:bd:ae:0d:
1a:24:2c:f6:95:19:35:8d:f7:0c:4d:97:75:e9:a8:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:DB:B0:99:9F:FB:84:CA:D1:5C:F6:2A:50:B9:8B:DB:7A:55:24
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OEPbsJmf-4TK0Vz2KlC5i9t6VSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:10:03:56:7c:90:df:f2:c1:92:51:aa:be:2e:1f:3e:05:9b:
ef:93:67:66:a4:96:81:1f:56:0f:39:73:38:15:5f:c8:47:8f:
fc:15:9f:e5:68:c6:8f:3a:e7:2a:b6:b4:1b:1a:0f:41:30:82:
29:37:39:b1:20:b1:89:80:53:eb:aa:f7:d1:80:ad:a6:ca:a6:
10:4c:b4:25:8b:68:83:90:f7:9e:5d:d8:bf:f3:f4:6a:0a:27:
55:df:72:a2:4e:e1:9f:67:fb:00:e0:8b:bc:46:5c:be:bd:67:
e4:16:8c:13:f9:9a:59:32:e9:c5:97:8b:d8:98:7c:27:7c:73:
01:68:30:04:df:e7:8f:2d:a4:8a:b5:7c:c1:37:fc:20:ad:af:
d0:56:91:ae:9f:be:5c:4b:85:fb:1e:d2:e3:08:97:13:2f:ac:
7c:34:ba:7c:68:b1:ce:6f:db:4a:d7:71:3a:6a:38:5c:c0:1e:
26:48:8e:07:f8:8e:55:af:80:51:e0:f4:dd:0c:8f:5f:5f:d0:
c4:28:53:6e:e3:c3:19:d1:ec:d8:67:2b:27:82:04:20:4c:30:
bb:95:cd:27:9a:b8:19:b5:58:d0:ee:49:de:9d:07:b3:ee:3e:
36:38:14:bf:34:c1:69:69:a2:16:de:79:18:69:73:64:40:29:
ff:68:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:21 2025 by rpki-client