Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oa3cSPzLDNy4OKfJFEVdyDGPXVY.roa
File: oa3cSPzLDNy4OKfJFEVdyDGPXVY.roa (raw, json)
Hash identifier: z/IGyiM73Q/lecfgG2tCg5vN3shE6lt29VBD0/7sIFU=
Subject key identifier: A1:AD:DC:48:FC:CB:0C:DC:B8:38:A7:C9:14:45:5D:C8:31:8F:5D:56
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC93AF232E35B5FBD301E6886FDD731D6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oa3cSPzLDNy4OKfJFEVdyDGPXVY.roa
Signing time: Wed 21 Feb 2024 01:14:59 +0000
ROA not before: Wed 21 Feb 2024 01:14:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c9:3a:f2:32:e3:5b:5f:bd:30:1e:68:86:fd:d7:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 21 01:14:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1addc48fccb0cdcb838a7c914455dc8318f5d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:84:70:ad:ed:ad:67:6e:7e:e0:6b:00:b1:
4b:cd:25:8c:06:a6:82:aa:5d:11:24:38:c6:fe:88:
3f:55:47:dc:3f:9a:7f:ce:27:f2:77:5d:8a:1c:8c:
e5:20:21:87:a7:ae:95:72:fe:34:38:3b:da:fe:39:
b7:b7:73:75:8b:75:20:76:2e:7d:fc:a7:79:31:5f:
c4:32:46:c8:dd:5f:db:fd:a7:08:cf:42:c4:88:d7:
30:7d:d2:ed:7d:b8:74:29:17:17:fc:af:04:37:89:
0d:7d:c3:f3:b5:a3:52:21:dd:4f:aa:3a:8a:95:8d:
34:d5:55:ae:06:09:24:32:42:ab:12:ef:f2:8f:d6:
c9:ba:50:54:7f:2d:ab:c1:8d:a1:7f:df:5e:ec:1c:
46:fa:cb:bc:94:d3:e4:36:a9:12:25:61:07:82:de:
da:0f:68:56:22:54:db:88:09:92:64:40:b1:32:39:
5a:24:61:87:98:70:52:cb:ac:61:fa:43:02:07:30:
0d:46:1a:a7:22:d6:34:88:59:f2:73:54:d9:cc:0f:
a5:e9:f0:e2:2d:a8:a7:d5:6a:cb:00:e4:94:3b:35:
d9:ce:8d:76:cd:49:4f:32:67:2e:de:d6:25:9c:50:
96:64:b8:0d:df:f3:01:d4:8a:63:5c:35:94:f6:cb:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AD:DC:48:FC:CB:0C:DC:B8:38:A7:C9:14:45:5D:C8:31:8F:5D:56
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oa3cSPzLDNy4OKfJFEVdyDGPXVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:1d:36:2b:73:6c:1e:e8:57:09:2d:00:3a:86:e6:6a:20:10:
7d:bf:fa:be:a0:83:d1:e0:9f:a0:e8:7f:ab:78:07:ab:74:d4:
54:fb:11:5d:e7:65:8e:82:f4:16:bc:53:46:4b:09:3a:61:a8:
d3:4e:3d:ed:98:26:22:61:44:cc:f1:89:f2:69:79:7a:88:80:
b8:a4:73:a5:65:05:10:91:6b:38:a6:93:15:42:8e:25:3c:d7:
73:7d:09:05:3b:56:a2:4f:1d:77:15:25:a6:b7:3a:63:f1:fe:
92:d2:3e:3f:bc:27:66:82:35:4c:48:71:5c:89:2b:9c:ff:f6:
91:38:8a:34:4f:58:fc:c3:41:a0:d1:b1:18:89:be:6f:df:95:
ef:a3:07:85:01:53:24:29:c4:4f:a1:78:3f:8f:45:53:c5:4e:
08:c2:b3:36:a4:25:71:9e:34:f7:85:b2:e7:d6:8f:d6:51:b1:
93:70:30:c8:88:03:dd:f3:3c:df:68:f4:1f:f4:fe:82:02:eb:
5e:97:5a:2b:bf:84:38:e4:98:5e:97:ec:57:ec:60:9a:01:57:
83:e9:fc:54:54:a4:cc:a9:0a:38:9c:ce:fd:e3:87:e3:b6:63:
28:94:35:c4:4d:f0:e1:76:c6:c7:fd:7f:b6:d8:f7:5d:6f:65:
80:71:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:42 2025 by rpki-client