Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ofn0gdiwKVKvRikiYCUI5L7LFPc.roa
File: Ofn0gdiwKVKvRikiYCUI5L7LFPc.roa (raw, json)
Hash identifier: /sxNlP3seBIUBaDjSDtpIzAQ698XGADCN4z7qlhv9hs=
Subject key identifier: 39:F9:F4:81:D8:B0:29:52:AF:46:29:22:60:25:08:E4:BE:CB:14:F7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1F8207B7112CED194ECDC453E9944E12
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ofn0gdiwKVKvRikiYCUI5L7LFPc.roa
Signing time: Fri 19 Jan 2024 02:17:11 +0000
ROA not before: Fri 19 Jan 2024 02:17:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1f:82:07:b7:11:2c:ed:19:4e:cd:c4:53:e9:94:4e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 02:17:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39f9f481d8b02952af462922602508e4becb14f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:39:98:11:4d:dd:9b:f1:55:15:c5:f4:ee:
27:32:77:b4:89:3a:af:6c:4f:37:f4:c4:f8:68:f9:
06:76:15:cf:e4:07:d4:b5:5a:69:0b:0f:f4:09:26:
f7:3a:8f:ab:0e:7a:4f:bb:1c:5b:36:a8:2c:03:35:
7e:dc:8b:75:1d:9c:4c:da:1b:60:02:ce:10:1f:c1:
dd:6c:35:e0:e5:41:97:bc:34:ad:9f:7b:a6:f7:ec:
76:8e:97:c4:59:cf:e6:2d:6f:9c:83:15:77:40:b7:
5d:28:ca:69:ce:73:07:c8:33:b8:ad:dd:94:4d:4e:
a5:a0:89:a1:33:d6:08:9d:87:e0:86:31:f9:49:99:
03:75:e0:14:23:53:26:9a:a8:6f:99:23:72:91:c3:
e2:52:c3:1f:95:75:0a:9d:0b:e1:1c:8f:53:b4:7f:
8f:3f:12:70:24:69:99:f0:31:34:3a:7c:fc:5d:96:
be:2d:09:3c:1f:22:68:51:df:a9:f7:90:49:11:03:
6a:61:1f:73:77:80:01:9b:ad:2f:60:32:52:ae:ac:
72:20:2e:79:89:d8:40:da:36:07:ad:a5:4b:11:64:
0f:f8:4c:b2:34:b9:5f:eb:ae:ad:8d:d8:ce:0f:ef:
0a:b9:dc:57:83:f4:cc:34:ed:6e:c6:b3:30:97:c3:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F9:F4:81:D8:B0:29:52:AF:46:29:22:60:25:08:E4:BE:CB:14:F7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ofn0gdiwKVKvRikiYCUI5L7LFPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:0b:d3:c6:f3:6d:fd:39:a6:d1:f3:b3:4b:98:b5:78:57:27:
91:30:1f:6b:e1:6e:a5:1b:b2:69:db:b7:da:7d:e3:e6:48:b9:
5b:bb:f8:c0:1d:8a:ad:77:da:7b:36:a0:1a:73:35:72:26:52:
94:9d:be:fe:5e:f3:43:77:c2:1d:f3:fb:4e:ee:71:aa:88:82:
76:17:7c:ce:ad:6b:bd:5b:b6:7a:da:ab:d5:fb:a6:3d:e2:46:
20:20:11:57:e6:ba:91:c4:fe:85:49:69:66:a6:98:89:91:f0:
72:50:bf:45:48:ec:94:d3:f8:6c:0f:cd:c1:ac:d7:52:19:11:
b0:d8:a8:1b:70:42:72:fc:b5:9c:15:fc:18:5d:ac:e6:eb:96:
5f:9d:da:db:36:f1:e3:fb:a7:5c:5d:26:68:42:bd:9e:1d:b5:
04:bf:28:6f:85:71:1d:82:89:77:78:8b:7d:a2:82:90:1f:90:
5d:06:ad:0b:73:2a:c6:b6:c3:00:0f:89:91:55:70:54:4c:3a:
34:e1:eb:bb:39:70:6c:52:74:2a:5e:0f:61:e0:fb:f8:48:4a:
4c:56:ae:61:cd:07:97:f0:4d:cc:d2:6e:53:78:12:eb:ac:dc:
ff:ec:bb:df:62:d9:7e:44:05:d5:0b:47:56:98:49:de:62:25:
50:7e:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:33 2025 by rpki-client