Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OeEDtGpgPN8OuRrh26gVUaMgNZk.roa
File: OeEDtGpgPN8OuRrh26gVUaMgNZk.roa (raw, json)
Hash identifier: 9WN0bJ7tri8vzqtKgtvD2AJxkanVSUFwGUHX4MuLqhM=
Subject key identifier: 39:E1:03:B4:6A:60:3C:DF:0E:B9:1A:E1:DB:A8:15:51:A3:20:35:99
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8BDE1C4FBF353298F23AB1E6281A0621
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OeEDtGpgPN8OuRrh26gVUaMgNZk.roa
Signing time: Thu 21 Dec 2023 10:13:58 +0000
ROA not before: Thu 21 Dec 2023 10:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:de:1c:4f:bf:35:32:98:f2:3a:b1:e6:28:1a:06:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 10:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39e103b46a603cdf0eb91ae1dba81551a3203599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:a9:7f:7e:99:10:54:d4:aa:14:9b:7f:ed:
83:12:87:da:1b:2d:99:36:d7:86:8c:45:0c:23:63:
1d:b7:47:aa:41:b4:37:fb:33:75:c5:1a:49:da:8a:
04:50:56:ff:a9:86:c3:59:9a:87:50:af:98:d8:d9:
cd:6e:d4:7d:e5:a8:48:13:08:ed:39:a7:d0:28:48:
b8:b3:e6:6a:a7:cd:45:ff:f2:9e:4e:ca:45:85:87:
36:5b:bb:7c:66:c5:01:0f:de:a2:fd:a0:e2:d1:ae:
e1:6c:96:13:2e:b5:0b:31:f1:f2:89:a4:26:4b:99:
3a:00:e8:15:0d:17:3d:b5:c1:93:e6:3e:e6:9d:2d:
92:87:b1:14:b9:81:56:33:44:7b:b7:f0:7a:5b:4c:
0e:17:7a:69:98:b9:ab:df:e9:f2:a9:61:db:a4:84:
06:8d:69:fd:7b:b9:84:81:36:ac:cd:44:e7:23:a7:
4e:9d:cb:01:4e:ef:27:a0:eb:f5:ac:8c:e7:da:97:
5c:17:8f:03:33:1a:fb:d1:3c:18:45:74:2b:53:ec:
df:62:9f:f6:13:c6:b5:b5:e1:fd:1c:53:4d:0c:2d:
6d:97:2b:52:aa:e2:ec:e9:81:28:4a:7a:e1:34:1c:
b8:4d:43:76:c2:6a:a4:0d:0e:93:11:83:3c:ea:fa:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:03:B4:6A:60:3C:DF:0E:B9:1A:E1:DB:A8:15:51:A3:20:35:99
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OeEDtGpgPN8OuRrh26gVUaMgNZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:77:82:92:ce:c3:7b:e4:62:ad:51:26:d6:8c:68:c1:ae:50:
f1:d1:2e:d6:c2:34:70:22:b1:96:43:c5:4a:30:e3:c0:2c:10:
5e:f2:3b:c3:f4:07:94:cf:22:2b:42:5c:ce:43:c2:a3:6c:3a:
cd:e4:d7:3c:a6:33:66:f3:a8:e6:c9:d8:71:4c:29:d2:a7:ce:
22:66:8a:5f:16:37:90:19:2e:bb:de:1d:b1:d3:fa:57:97:4f:
17:38:60:5d:67:2a:ef:e9:e3:c2:21:18:57:a1:ff:c2:43:0b:
32:8c:7b:d1:62:95:92:a8:ab:72:b2:47:67:56:a9:ca:40:46:
d7:ce:fe:6d:08:0f:fd:ba:c4:e8:0f:2c:e1:83:91:bb:64:56:
e9:1d:3e:75:aa:d4:9c:66:4f:f3:b3:25:ca:ad:b2:b1:47:ce:
d2:49:93:f7:4e:cb:ba:25:a6:36:76:56:76:34:1b:8e:58:fa:
b6:49:85:fe:9f:a9:4c:4d:f0:a9:79:97:85:48:34:52:c9:7f:
95:53:0a:bc:03:ed:a7:57:fc:19:ac:cb:4e:38:95:5b:3d:0a:
f5:1d:cf:5c:05:a4:2f:ba:31:03:fd:a3:f1:61:bd:38:56:00:
50:20:c2:6d:33:eb:af:0e:ea:27:23:4c:15:aa:0a:34:fe:30:
b9:dc:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:50 2025 by rpki-client