Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OzOvY_fu9PDOM3WIghZkC8yZkts.roa
File: OzOvY_fu9PDOM3WIghZkC8yZkts.roa (raw, json)
Hash identifier: BCt/+cj1aXOS8mEmLtwMzNt7xpIA+lhvrxdPzLsAvNc=
Subject key identifier: 3B:33:AF:63:F7:EE:F4:F0:CE:33:75:88:82:16:64:0B:CC:99:92:DB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D607FFA2DD5A928307C6519271CF0727F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OzOvY_fu9PDOM3WIghZkC8yZkts.roa
Signing time: Wed 31 Jan 2024 17:10:16 +0000
ROA not before: Wed 31 Jan 2024 17:10:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:7f:fa:2d:d5:a9:28:30:7c:65:19:27:1c:f0:72:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 31 17:10:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b33af63f7eef4f0ce3375888216640bcc9992db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:96:4c:2d:be:0c:7f:b5:41:ad:c0:2b:d3:
cb:1c:5f:20:1b:94:8a:23:d7:19:4f:1b:c6:97:0f:
b5:1b:a9:11:e2:98:8a:6c:c2:01:13:35:97:d7:2b:
46:f2:38:81:6c:cc:52:5e:3e:fe:70:3c:2a:5c:94:
89:3a:99:89:41:ab:f9:b7:ee:60:ec:f1:12:ef:93:
6e:03:6c:c9:09:2d:50:6b:58:03:51:57:6b:b0:51:
8f:fc:f7:21:40:b9:3b:fa:ad:8a:a7:ec:b7:b3:7d:
93:a4:20:41:da:cd:d5:f0:31:84:25:21:84:7c:f7:
21:86:64:44:11:49:65:04:d2:f2:9c:a0:02:bb:fa:
75:38:62:3e:7e:ad:be:2f:e2:85:f6:1e:f5:d5:6b:
96:59:33:28:74:ba:4f:f1:b1:7f:be:0a:15:29:e1:
cd:f7:a6:e2:72:6e:5f:b7:d4:c7:e2:72:6f:6d:29:
f3:53:30:93:58:a9:92:5e:f8:1d:c0:8d:60:6c:1e:
f6:03:21:29:77:a8:e6:9f:6f:92:8b:84:07:05:63:
7a:fb:8d:7c:3e:cb:a6:93:24:90:39:88:ca:0d:fd:
a3:d0:16:c2:7b:89:91:92:1d:6d:72:20:1a:73:cf:
fc:3d:64:3e:27:3e:3d:47:1e:26:56:d5:c5:87:aa:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:AF:63:F7:EE:F4:F0:CE:33:75:88:82:16:64:0B:CC:99:92:DB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OzOvY_fu9PDOM3WIghZkC8yZkts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:bf:69:68:44:59:10:5f:44:59:04:46:27:09:9c:6b:da:9a:
e4:4a:8d:6f:ea:e5:c0:f5:56:73:2c:f0:db:02:cd:1e:59:8f:
8b:48:01:c7:80:e8:fb:c5:a0:40:d4:18:9a:1b:fd:fc:bf:de:
31:73:89:58:f6:de:7c:c3:a2:7a:7c:3d:50:58:ea:2c:53:7a:
91:e1:a5:8c:f8:8e:d1:78:1c:f3:26:e0:14:1a:13:45:16:7d:
b4:0c:ed:8f:f8:27:e8:a3:48:02:be:b3:ff:a2:f1:7c:da:14:
80:6f:ce:76:82:af:5a:b8:e7:5d:03:88:92:a8:61:d8:d6:0f:
a5:1a:cc:2f:91:74:ef:6e:11:f9:09:1b:7e:72:55:8a:2d:e8:
de:3f:33:82:a0:08:54:a1:92:3b:b0:8b:4e:5f:bd:e0:ab:9f:
44:f7:6d:7e:7c:ba:2e:ca:41:5c:47:ac:36:8b:1c:72:bd:65:
78:d8:82:41:a1:32:5c:ec:49:9a:f6:5d:65:1c:a7:76:2a:7c:
a2:ec:06:54:d8:e7:d9:2b:34:0c:54:a5:f6:31:7b:e5:a8:50:
af:8f:42:c8:58:d5:25:07:89:5a:b6:6a:66:a7:56:ae:4b:39:
da:a1:3a:7a:95:d6:2d:94:23:ef:ac:1a:c9:8a:0c:9d:42:99:
5f:45:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:54 2025 by rpki-client