Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oJln5Y2GK549o4RBsfOUVauhXs0.roa
File: oJln5Y2GK549o4RBsfOUVauhXs0.roa (raw, json)
Hash identifier: b5uBO9yKaqJ2PC/HOgrjNLeHNtWE3DxAVqzmYzyYUqw=
Subject key identifier: A0:99:67:E5:8D:86:2B:9E:3D:A3:84:41:B1:F3:94:55:AB:A1:5E:CD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE410B0E9D1456F49A80F2F81CB8C01F0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oJln5Y2GK549o4RBsfOUVauhXs0.roa
Signing time: Sun 07 Jan 2024 13:15:48 +0000
ROA not before: Sun 07 Jan 2024 13:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:10:b0:e9:d1:45:6f:49:a8:0f:2f:81:cb:8c:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 13:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a09967e58d862b9e3da38441b1f39455aba15ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:80:6a:54:12:af:47:9b:0f:df:f0:41:db:
d5:5e:74:da:1e:d7:89:3e:d4:fd:86:7b:75:70:61:
d0:67:0e:57:e7:43:c0:38:86:e3:96:6f:ce:6b:1f:
67:29:04:0f:7f:58:64:0a:03:0b:a3:a0:23:d4:f9:
45:66:d7:c5:f4:e8:f0:63:7f:e6:d0:a0:2a:aa:02:
3a:c3:17:cc:85:91:55:a8:bd:e2:80:0a:fd:b3:08:
e8:44:43:c9:e5:72:f6:08:f5:f2:90:2f:df:a5:ae:
d8:cf:f5:89:1c:cb:53:5d:42:96:40:9c:f2:84:70:
0d:6b:1a:88:17:51:5a:9f:f9:be:9b:11:a8:66:86:
ac:65:84:6b:12:88:9e:c8:71:dc:28:d7:59:2a:00:
6b:8d:d0:a2:dc:cb:3a:31:cb:ff:9e:69:dd:de:cc:
42:6f:1f:d7:40:d4:b1:99:f2:30:d4:0e:50:9d:78:
8d:a4:2c:15:70:59:aa:6e:b8:1d:c0:be:cb:13:a0:
34:b2:04:69:e1:6a:7d:bf:1d:6a:87:e1:72:5f:cd:
fb:12:be:36:0f:fc:34:e9:dd:ef:0d:cb:57:08:49:
84:d3:3e:fc:83:be:57:2c:bd:2b:9d:9c:35:45:72:
b6:d4:99:02:55:3b:7f:d0:14:d5:5e:65:5b:24:51:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:99:67:E5:8D:86:2B:9E:3D:A3:84:41:B1:F3:94:55:AB:A1:5E:CD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oJln5Y2GK549o4RBsfOUVauhXs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:84:25:71:0f:28:7f:b2:9e:f8:cc:5f:40:98:90:ab:a0:2e:
6b:c2:44:13:c6:2d:ab:5f:2b:55:27:c7:6b:b1:59:64:b1:dd:
70:95:87:a0:a6:b7:5b:95:14:ba:a0:c2:40:5c:7b:82:19:40:
91:f6:49:86:52:89:29:a2:eb:7e:03:2d:78:ee:a5:78:ae:43:
a3:c8:b7:43:a4:92:f2:34:d3:ef:7f:76:7a:84:97:61:8c:01:
83:b4:91:7f:28:ba:91:fe:e1:5c:b4:d4:6e:16:2c:43:c6:90:
81:2a:1b:13:97:d3:9b:ed:00:93:2b:fd:f9:42:de:b1:f8:cb:
bf:cf:7a:27:c9:7b:c0:bc:0a:a5:60:53:be:c4:66:62:57:38:
b0:43:7e:ca:59:79:58:36:fa:f2:87:c1:26:5c:ed:89:1b:fa:
5d:43:bc:46:a4:b2:9c:1b:c1:7c:48:93:b2:79:bd:de:f1:e5:
b9:61:e4:c8:fc:f3:46:c0:e3:c0:81:ac:35:d7:a9:0a:f2:02:
6d:8b:7e:d1:1e:7d:86:60:62:11:5e:23:1c:18:aa:d8:98:29:
d2:cb:05:70:c4:90:1a:59:06:3a:80:12:ee:cd:6a:14:6a:7f:
47:d4:32:94:98:9f:1f:4d:50:e2:1f:36:63:aa:05:f7:90:e1:
3a:fd:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:30 2025 by rpki-client