Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Oy10JthFj7T5otMLiR72h5YgUSk.roa
File: Oy10JthFj7T5otMLiR72h5YgUSk.roa (raw, json)
Hash identifier: sFB9ciCtHiGE9vpe7mteLC+AeQ98srtQqzYxFSq/sYc=
Subject key identifier: 3B:2D:74:26:D8:45:8F:B4:F9:A2:D3:0B:89:1E:F6:87:96:20:51:29
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E71E03DF12F81A0FA25E960DA346A164A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Oy10JthFj7T5otMLiR72h5YgUSk.roa
Signing time: Sun 24 Mar 2024 19:11:45 +0000
ROA not before: Sun 24 Mar 2024 19:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:71:e0:3d:f1:2f:81:a0:fa:25:e9:60:da:34:6a:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 19:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2d7426d8458fb4f9a2d30b891ef68796205129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:ac:b3:fd:e4:f3:ca:71:f5:36:f3:a5:a8:
97:79:ba:c5:d5:62:92:6e:f9:8a:fc:a9:eb:a9:ae:
c9:74:68:6a:31:27:41:57:94:79:37:91:65:c4:78:
ee:0a:4f:3a:28:9c:e0:a6:32:d7:81:f8:43:12:a2:
ee:86:7e:82:be:dc:8f:5c:6c:9d:3e:99:88:18:27:
4d:e3:af:36:2a:dc:bd:58:a2:3f:c1:99:c2:1c:3b:
ce:de:fc:3f:d0:90:ae:a8:38:48:bf:64:40:a5:10:
74:0a:8a:bc:e5:97:19:7a:bf:02:e2:60:41:df:35:
b0:5b:49:06:68:3a:fc:01:6b:37:9e:51:e2:18:43:
5e:02:80:4c:04:d2:1a:bd:72:86:2b:6b:2b:db:79:
b0:45:80:80:b7:f2:07:94:af:9d:1b:dd:a8:aa:7a:
96:a9:50:1c:e5:b2:8c:2f:eb:c6:b2:e8:c3:55:d1:
c7:af:10:e1:c2:9d:10:43:57:b6:45:87:bf:2a:33:
66:85:ea:46:ef:90:fb:c7:9c:62:5b:bd:c0:b5:90:
0e:85:11:92:d0:8c:6a:c4:f3:bb:2f:fe:8c:92:12:
b4:30:0a:32:ed:32:d1:64:ba:c6:12:af:e3:3e:04:
ed:1b:81:d3:17:ca:c2:8b:ff:a0:3c:2e:45:89:06:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2D:74:26:D8:45:8F:B4:F9:A2:D3:0B:89:1E:F6:87:96:20:51:29
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Oy10JthFj7T5otMLiR72h5YgUSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:b0:e8:af:4b:db:40:d9:8e:41:e9:a9:ca:65:e7:d0:d1:d4:
84:e8:d3:5e:37:1a:75:8d:8b:b1:72:e8:2d:07:f6:65:12:dd:
a7:fc:fb:e4:47:e4:d5:b7:9a:8d:f2:1b:80:b2:9e:d5:dc:ed:
40:a8:39:2e:79:56:2d:65:8e:9a:2e:f9:28:a2:b5:e4:51:93:
ba:ce:1f:f7:73:04:ac:bd:52:ee:e0:99:65:c2:e6:4f:37:ba:
c2:db:1b:0f:80:c3:d2:b7:a3:d4:f4:3b:c2:75:47:89:29:8f:
67:ee:d6:b1:fa:8b:78:e8:ae:fc:49:20:d7:76:65:a8:28:49:
0b:6d:09:37:92:8b:d4:c1:fd:37:9f:1e:fd:71:19:f4:27:85:
37:71:4b:68:1d:a9:c5:be:06:c6:62:4a:73:dc:74:c4:e2:d3:
eb:89:3a:1d:54:a1:df:f3:ca:67:69:bb:ad:36:7c:21:3a:97:
aa:dc:2f:d1:43:a5:51:9b:2a:fc:6f:5c:1b:ca:24:ed:07:b2:
99:8a:2a:13:17:3e:0a:01:05:de:d7:bb:6a:56:5a:60:5a:8e:
e0:e0:e6:7b:d2:4b:f1:e1:3a:74:e7:e9:48:61:bc:5a:e0:e6:
db:e1:2b:ea:c5:b2:f6:91:c2:4d:d3:d9:e7:1f:ca:77:a8:ae:
19:45:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:33 2025 by rpki-client