Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OhvTa0XIkSrPFqDfsOdMt_6XRoY.roa
File: OhvTa0XIkSrPFqDfsOdMt_6XRoY.roa (raw, json)
Hash identifier: l15913g4mtpMXXqgH3JJHlglThEXFQucJ7OVJN7gcac=
Subject key identifier: 3A:1B:D3:6B:45:C8:91:2A:CF:16:A0:DF:B0:E7:4C:B7:FE:97:46:86
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2C5F2E30979ED4CBDB463F4CC0E8C2D9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OhvTa0XIkSrPFqDfsOdMt_6XRoY.roa
Signing time: Sun 21 Jan 2024 14:14:11 +0000
ROA not before: Sun 21 Jan 2024 14:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2c:5f:2e:30:97:9e:d4:cb:db:46:3f:4c:c0:e8:c2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 21 14:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a1bd36b45c8912acf16a0dfb0e74cb7fe974686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:f4:91:ef:5e:aa:48:0e:db:d8:de:0f:82:
da:72:28:a1:c4:a4:14:99:7a:e3:9a:1c:bf:5c:ce:
39:9c:b0:5b:03:7e:eb:59:4f:06:33:20:44:21:32:
4b:06:ac:83:49:49:77:0b:76:f4:31:20:bf:63:ab:
71:fe:7c:7f:9a:0d:89:da:07:c8:c7:66:ba:2e:ca:
8a:3d:c3:c2:e4:3b:f6:98:f6:7b:08:1f:27:d6:85:
cf:2d:3b:c9:49:74:67:f5:f1:2f:9f:9b:f9:08:a5:
28:00:55:01:a6:93:ff:f0:4b:33:e9:ee:16:32:2d:
f8:b3:3c:8f:8c:e5:8f:be:f3:28:37:9e:b7:82:ff:
80:cd:ba:9d:3b:d9:b2:7c:21:66:8c:bc:7a:a1:b4:
f1:78:76:35:6f:a5:13:d1:43:cf:1f:80:2a:d3:69:
1a:75:67:38:a1:e7:e9:b8:a3:78:6f:bc:c1:33:18:
c4:2e:97:c5:51:b7:e6:9b:ef:7f:34:1d:46:7e:29:
7b:b0:8c:82:f3:78:16:c4:a4:69:a7:14:10:4b:bd:
54:3a:d0:1f:9e:18:ba:82:82:f9:98:2c:1c:91:43:
e1:af:be:ae:b7:40:65:c5:c0:da:58:ec:66:2b:e4:
3e:37:34:dd:e0:54:77:b7:92:6e:ce:47:23:43:11:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1B:D3:6B:45:C8:91:2A:CF:16:A0:DF:B0:E7:4C:B7:FE:97:46:86
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OhvTa0XIkSrPFqDfsOdMt_6XRoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:cf:cb:ad:7d:24:f0:09:82:a6:a2:cd:d9:72:fd:67:06:57:
ca:80:85:d2:28:9b:31:9a:19:16:e5:37:79:c7:4d:05:3e:d8:
71:eb:cb:66:c2:5d:db:1d:5f:4e:37:ee:4b:4c:5a:e0:d1:ac:
56:0d:88:a2:0d:60:b7:bd:58:89:a3:69:84:7b:50:e0:df:75:
02:af:b5:f6:e0:3b:8c:92:c8:66:a1:f1:74:1f:5b:19:7f:06:
8d:e4:76:d1:a1:98:38:56:68:28:2f:cb:36:12:d3:1d:37:37:
8c:38:77:3a:4b:9c:ff:81:88:05:ba:a0:10:82:8b:a9:42:de:
8d:19:00:09:9f:a9:94:b0:cc:d5:69:42:6f:14:6a:8a:04:15:
87:b8:61:2f:57:e0:b1:d5:68:0e:06:cd:41:6b:7c:9d:f3:64:
9f:ba:4e:dc:ee:54:c9:fb:83:2f:9a:8f:a7:73:82:7c:0f:0b:
86:c4:47:df:53:8a:4e:f1:42:70:a8:cf:9b:06:f0:23:3f:ab:
08:63:6e:4b:20:81:84:1d:d0:cb:8b:dc:5f:92:ba:90:0b:4d:
d0:48:2e:c7:3f:f7:52:49:74:78:55:aa:a0:36:77:cd:c9:c2:
d1:e4:c0:fa:42:d5:7c:f2:22:79:fe:b7:f3:67:9a:df:19:71:
94:54:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:14 2025 by rpki-client