Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Om9PV5d_aw2GjxWSJRt_b_rBjiU.roa
File: Om9PV5d_aw2GjxWSJRt_b_rBjiU.roa (raw, json)
Hash identifier: WSSDJ+FSYPvLJ0mNC9bEzMO3IerR5nzfjhb3spgl9bc=
Subject key identifier: 3A:6F:4F:57:97:7F:6B:0D:86:8F:15:92:25:1B:7F:6F:FA:C1:8E:25
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E70C72D16D8D074F63F9A198AC0676259
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Om9PV5d_aw2GjxWSJRt_b_rBjiU.roa
Signing time: Sun 24 Mar 2024 14:04:45 +0000
ROA not before: Sun 24 Mar 2024 14:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:70c6:b2d7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:c7:2d:16:d8:d0:74:f6:3f:9a:19:8a:c0:67:62:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 14:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a6f4f57977f6b0d868f1592251b7f6ffac18e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:15:9d:14:7d:80:2d:76:7d:99:8d:1b:b7:
af:4b:57:90:3d:05:e0:18:45:40:3b:ea:3d:00:b9:
95:96:ef:1d:c9:85:0a:bf:ca:3f:23:b9:6f:6f:6a:
ce:21:66:e4:01:35:75:b3:95:5d:95:39:a2:ad:cf:
3a:04:a2:c4:80:17:ad:cc:d1:3e:ab:32:40:67:5f:
6f:37:39:10:8c:b7:cd:7b:a1:6c:2c:78:51:6e:b1:
83:de:ec:ab:a8:d7:51:98:8b:31:ec:12:34:d5:f5:
1d:a0:cd:51:80:4d:0e:98:56:36:18:b2:bd:4c:79:
f8:73:7a:8b:96:5e:b1:f8:71:ca:1c:0f:8c:e4:b7:
70:24:e5:0b:29:23:f8:d8:a6:01:db:4c:93:f9:d4:
2e:e0:82:10:8b:21:9f:8d:2c:55:53:ae:07:82:2a:
a6:75:62:74:c2:e2:41:4d:fb:a6:4c:e7:91:54:e7:
2c:3f:a7:6e:82:5f:9d:67:ed:6c:e5:6a:21:8a:a1:
cb:a8:fd:ea:84:6a:bc:21:99:15:48:ec:22:b4:9a:
d1:c6:17:9f:c0:15:d3:33:9b:1c:df:b9:53:33:f6:
d0:1e:8d:a9:f0:44:c7:be:6e:44:37:71:2e:b6:ff:
e0:00:0a:27:88:af:d0:a1:c2:75:c6:b7:4f:3c:40:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:4F:57:97:7F:6B:0D:86:8F:15:92:25:1B:7F:6F:FA:C1:8E:25
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Om9PV5d_aw2GjxWSJRt_b_rBjiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:1f:33:4f:ec:aa:dd:a1:9e:e0:b8:9a:91:47:32:8e:6c:a2:
dd:ac:04:6b:f6:5a:f9:49:1a:0d:71:da:1e:96:6c:c1:62:b0:
40:6d:ea:84:20:91:1d:03:b7:c0:22:61:67:5c:f6:92:6a:c9:
62:ab:fc:d3:cf:49:c2:79:91:50:77:80:27:de:a7:f1:63:07:
c8:87:ca:42:f2:45:94:14:a4:de:86:89:83:d7:d1:2b:10:2a:
27:86:72:8a:fa:71:35:74:66:1f:e6:cf:59:e6:b0:9a:4d:08:
b7:51:fb:d2:88:f6:8d:e7:98:96:37:c1:46:49:75:a0:25:85:
fd:16:e8:dd:61:55:5b:d0:62:59:87:fb:7a:91:ca:b8:39:6f:
1d:b0:80:79:f3:15:58:32:6c:a0:c1:f4:17:6f:ed:4e:e8:4d:
4e:66:14:22:c2:6d:96:16:66:f4:fc:be:7e:30:0d:ff:da:c1:
3f:f5:e5:e9:b0:04:9e:ab:6c:81:75:0b:42:0b:a4:4d:24:4c:
31:a2:f5:b7:f2:6f:a5:cd:d5:1d:0d:30:8f:bd:e3:b7:16:2a:
f9:83:3b:0e:9c:b4:3e:8d:c1:7b:89:70:02:77:14:90:e3:68:
83:68:78:6d:a4:5c:14:26:41:fb:cb:f9:78:69:3c:0d:95:21:
df:99:cf:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5wxy0W2NB09j+aGYrAZ2JZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI0MTQwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTZmNGY1Nzk3N2Y2YjBkODY4ZjE1OTIyNTFiN2Y2ZmZhYzE4ZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5AVnRR9gC12fZmNG7evS1eQPQXg
GEVAO+o9ALmVlu8dyYUKv8o/I7lvb2rOIWbkATV1s5VdlTmirc86BKLEgBetzNE+
qzJAZ19vNzkQjLfNe6FsLHhRbrGD3uyrqNdRmIsx7BI01fUdoM1RgE0OmFY2GLK9
THn4c3qLll6x+HHKHA+M5LdwJOULKSP42KYB20yT+dQu4IIQiyGfjSxVU64Hgiqm
dWJ0wuJBTfumTOeRVOcsP6dugl+dZ+1s5WohiqHLqP3qhGq8IZkVSOwitJrRxhef
wBXTM5sc37lTM/bQHo2p8ETHvm5EN3Eutv/gAAoniK/QocJ1xrdPPEDTBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDpvT1eXf2sNho8VkiUbf2/6wY4lMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvT205UFY1ZF9hdzJHanhXU0pSdF9iX3JCamlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABMfM0/sqt2hnuC4mpFH
Mo5sot2sBGv2WvlJGg1x2h6WbMFisEBt6oQgkR0Dt8AiYWdc9pJqyWKr/NPPScJ5
kVB3gCfep/FjB8iHykLyRZQUpN6GiYPX0SsQKieGcor6cTV0Zh/mz1nmsJpNCLdR
+9KI9o3nmJY3wUZJdaAlhf0W6N1hVVvQYlmH+3qRyrg5bx2wgHnzFVgybKDB9Bdv
7U7oTU5mFCLCbZYWZvT8vn4wDf/awT/15emwBJ6rbIF1C0ILpE0kTDGi9bfyb6XN
1R0NMI+947cWKvmDOw6ctD6NwXuJcAJ3FJDjaINoeG2kXBQmQfvL+XhpPA2VId+Z
z0s=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:27 2025 by rpki-client