Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Oc9fu6ulDgQZAu8EF8-Ckg5jOzs.roa
File: Oc9fu6ulDgQZAu8EF8-Ckg5jOzs.roa (raw, json)
Hash identifier: cdJ3GMibUu3pJV3nzG8fZ4qyMdMaynWLGpEYah3pVCg=
Subject key identifier: 39:CF:5F:BB:AB:A5:0E:04:19:02:EF:04:17:CF:82:92:0E:63:3B:3B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBC20C9F7AFC114C766AB95F1AA88197C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Oc9fu6ulDgQZAu8EF8-Ckg5jOzs.roa
Signing time: Sun 18 Feb 2024 12:11:21 +0000
ROA not before: Sun 18 Feb 2024 12:11:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bc:20:c9:f7:af:c1:14:c7:66:ab:95:f1:aa:88:19:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 12:11:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39cf5fbbaba50e041902ef0417cf82920e633b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:15:84:4a:48:11:6f:e3:0a:a9:4c:ae:c3:
d0:cc:aa:70:1c:57:82:e7:06:0a:76:07:7d:55:d3:
86:f7:fa:9c:c4:6e:58:e8:bd:bf:2e:32:f1:16:23:
11:00:c2:ee:a3:60:70:29:de:65:b4:44:fe:86:f6:
ed:73:9f:81:eb:77:43:a2:fc:b6:89:23:66:7e:74:
f2:01:b6:de:70:4b:64:5d:dc:a9:ac:96:14:ba:75:
63:99:a4:52:01:e9:d4:fc:4d:a6:a0:0e:73:19:ad:
56:a8:14:d5:91:8f:54:87:c6:ca:8c:c6:a9:1e:f8:
4b:79:02:7f:ca:d6:f7:12:3b:92:84:ee:15:16:91:
08:a7:da:71:83:a4:13:86:99:9f:dc:de:4f:ec:73:
74:00:21:9d:97:6f:43:50:84:40:73:5b:60:cc:eb:
48:bd:e1:dd:0f:f1:d3:7a:84:e6:47:02:2e:46:5e:
8f:95:29:1c:fd:96:a5:6f:6e:a7:12:c4:4f:4a:bc:
b0:7f:76:cf:af:ab:04:a9:c1:7c:c3:e2:f3:2a:a1:
4b:ac:dc:d3:7e:ca:70:b7:cf:6e:39:b3:20:56:b3:
6d:9d:41:7c:64:73:de:c6:18:81:86:ef:03:91:5a:
4d:68:c8:d5:f3:aa:de:52:b8:33:44:f6:69:de:4d:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CF:5F:BB:AB:A5:0E:04:19:02:EF:04:17:CF:82:92:0E:63:3B:3B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Oc9fu6ulDgQZAu8EF8-Ckg5jOzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:02:cc:f8:b5:65:29:47:8f:f6:44:ef:95:c9:b3:0e:f9:8f:
c1:d4:8d:0c:41:ef:06:4b:80:3b:2f:81:d2:31:e6:5c:9d:ea:
bc:5b:f5:38:79:d0:05:5f:52:55:45:6d:dc:46:6b:c9:8f:62:
c4:26:15:26:91:95:28:5a:70:74:75:fa:24:59:48:d8:06:2e:
8f:5d:00:03:bf:20:aa:1f:c3:c0:30:71:fe:70:a0:67:82:85:
42:9f:1e:3d:b4:5f:3f:66:3f:b0:70:41:a5:47:56:a6:f9:f3:
67:f2:af:c2:15:a6:96:e6:ca:44:96:27:5b:26:33:7e:11:2d:
86:c4:d6:99:4c:67:0d:70:44:2b:84:d5:61:cc:c2:33:4f:e9:
4c:45:44:64:75:41:84:c8:57:f5:32:5f:84:39:bf:6f:00:05:
3a:b0:b3:5e:c7:43:59:55:e9:f0:66:2f:df:09:15:b6:74:db:
61:c1:b1:51:69:4b:6c:73:10:ec:bc:79:d6:03:ba:36:ab:63:
bd:a3:d4:b5:7a:25:ee:34:49:2d:5c:fc:76:48:5b:8f:ed:42:
83:89:a6:73:65:dc:da:f3:de:eb:c7:6d:8b:9a:b8:49:97:49:
d3:23:a4:c4:3b:78:97:c1:92:53:fd:46:e4:91:ff:95:e9:4d:
b4:48:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:18 2025 by rpki-client