Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OvZjNniDL_YeccyeWAkOundJA9w.roa
File: OvZjNniDL_YeccyeWAkOundJA9w.roa (raw, json)
Hash identifier: ElMh3g+WktA8vwk2+gGk+5fFb5MFaM3OMFh6sCjzHTg=
Subject key identifier: 3A:F6:63:36:78:83:2F:F6:1E:71:CC:9E:58:09:0E:BA:77:49:03:DC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E05F29750BD45916957A847F923A810CF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OvZjNniDL_YeccyeWAkOundJA9w.roa
Signing time: Sun 03 Mar 2024 20:12:48 +0000
ROA not before: Sun 03 Mar 2024 20:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:05:f2:97:50:bd:45:91:69:57:a8:47:f9:23:a8:10:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 20:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3af6633678832ff61e71cc9e58090eba774903dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:ec:1a:02:25:d9:e8:e2:74:e4:46:1e:7e:
5f:6a:20:b1:38:9e:73:be:0d:7c:fd:bd:da:fa:47:
6c:cd:26:30:cd:bd:d3:f6:b9:e3:41:2c:1a:c3:6e:
fe:52:2e:91:c0:a7:87:00:d6:41:9a:a3:2b:41:0c:
cb:ff:38:c5:59:0c:31:2c:ac:6e:8b:e2:f4:50:da:
67:aa:4b:36:65:aa:4d:a4:70:8b:9f:ed:f4:76:cd:
ce:6c:b7:f6:33:f5:d7:a7:ad:9c:df:98:b0:32:30:
7c:6c:e5:6f:78:63:c6:35:ff:0e:50:10:9e:ab:fd:
d8:83:4f:c8:49:17:df:51:20:8e:87:8c:a4:53:21:
64:ff:80:75:e2:13:6d:9f:c5:c3:ac:a8:47:df:3a:
c2:cf:f9:da:7d:e6:23:b4:d0:4b:e1:8e:55:08:b5:
24:7c:77:e8:a1:2c:c3:70:8a:a9:62:f8:b9:ac:d0:
84:11:fa:4f:dd:78:b4:08:4d:66:45:32:92:dd:83:
4d:87:a2:1f:76:64:7f:d4:25:62:94:4c:a5:2d:e4:
04:ef:7d:f9:30:a1:85:23:ca:20:22:9d:0b:db:51:
8d:68:92:00:5d:5f:3b:0a:63:a0:a3:a5:6f:19:68:
55:eb:19:55:bb:f1:df:be:31:fd:34:f9:79:d1:4c:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:63:36:78:83:2F:F6:1E:71:CC:9E:58:09:0E:BA:77:49:03:DC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OvZjNniDL_YeccyeWAkOundJA9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:b7:a5:29:ff:01:94:4b:57:3b:2a:74:45:d6:ec:1a:1e:74:
14:a3:2f:d9:bd:1e:eb:44:ab:e8:e9:c9:ac:81:ae:62:bb:4d:
71:0f:62:88:52:cb:c1:04:c2:53:76:9f:94:30:5c:6d:37:3f:
cc:e2:2f:92:a4:a0:96:02:9d:57:4e:a3:24:01:ba:82:5b:5c:
86:bc:97:2f:49:37:9f:4a:92:2c:d6:78:61:46:d3:d8:7c:b8:
6e:8e:de:14:c0:ef:1e:cd:35:13:cf:25:53:c9:8b:27:30:20:
a1:18:16:7a:5f:de:a4:a8:e1:6a:dd:f9:a9:8c:4b:e1:bb:5f:
b5:59:7e:dc:89:aa:0e:a2:a7:ed:36:ef:81:45:3f:d0:5e:4b:
2a:0b:f1:45:69:95:c5:d3:c9:ee:18:f7:74:49:2b:76:98:31:
af:8e:77:b1:a2:b2:30:bc:06:77:65:be:b9:63:5a:09:1f:39:
4b:b8:84:6a:e4:b2:a8:6a:e3:d6:16:00:94:e2:cd:8a:2a:82:
ac:86:36:2d:6a:e0:cf:4c:c2:ee:4a:c3:ce:99:6e:8e:27:25:
29:56:52:12:98:a4:97:94:64:31:ca:c3:ab:cd:ea:b3:a2:06:
d5:ee:51:b3:3c:6d:27:ad:62:57:82:6c:aa:03:a9:69:7a:4e:
8d:7c:30:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:33 2025 by rpki-client