Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/O3Ojpl6sdr8a89NBiKhMrPbK_sU.roa
File: O3Ojpl6sdr8a89NBiKhMrPbK_sU.roa (raw, json)
Hash identifier: L2Tx9cxlkZz6/0bSfIkUwbsUtciT1C1Nm2SnRgIt5/k=
Subject key identifier: 3B:73:A3:A6:5E:AC:76:BF:1A:F3:D3:41:88:A8:4C:AC:F6:CA:FE:C5
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A8E0A3CD9AE2954CEBB8E20231D15DD80
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/O3Ojpl6sdr8a89NBiKhMrPbK_sU.roa
Signing time: Wed 13 Sep 2023 10:15:50 +0000
ROA not before: Wed 13 Sep 2023 10:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:0a:3c:d9:ae:29:54:ce:bb:8e:20:23:1d:15:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 13 10:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b73a3a65eac76bf1af3d34188a84cacf6cafec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:9d:0b:40:1e:01:c3:b5:39:5b:60:3b:94:
57:3a:64:2c:e6:cf:97:6f:8a:ac:32:0a:87:86:8a:
2d:84:d2:1e:4d:7b:b1:f6:31:08:36:3d:42:7c:42:
60:9b:e4:5b:62:6b:5c:6c:a1:9e:cf:b0:bd:25:95:
82:5f:92:e7:37:ed:56:9e:32:25:0a:86:a2:a3:c3:
c3:68:8a:9a:ba:04:5d:4f:54:e5:a4:fa:9f:00:7a:
77:83:e1:d4:52:6a:85:45:57:26:b2:ac:92:f6:d6:
54:6b:76:b3:d7:3a:8f:08:92:32:13:32:22:95:92:
f3:98:dc:2d:f5:df:ad:a7:da:39:bb:48:29:a4:7b:
d8:bc:a5:2a:78:95:25:fe:be:42:1e:17:a5:74:a3:
d9:77:ab:59:ea:07:61:a8:b9:cc:c2:04:8f:7b:af:
12:fa:29:69:f9:2e:58:e7:50:81:bc:37:d1:52:68:
d2:69:34:e3:99:99:ee:a7:d4:d9:67:aa:3e:28:d5:
6c:dc:96:1f:58:a8:14:af:0a:db:5a:55:5f:6f:ce:
ae:4c:b0:c3:29:5c:2c:b6:26:03:db:80:98:32:c3:
e6:9f:ed:c1:5c:1d:3d:e2:36:43:c2:04:4a:7e:29:
3c:d0:64:fb:5e:35:f2:b9:ee:67:12:c5:4d:6a:e0:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:A3:A6:5E:AC:76:BF:1A:F3:D3:41:88:A8:4C:AC:F6:CA:FE:C5
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/O3Ojpl6sdr8a89NBiKhMrPbK_sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:d7:eb:d5:0e:8a:b5:7e:55:24:14:da:3f:ac:10:0f:00:97:
b0:b4:09:d7:36:12:9d:86:0e:08:70:e1:a6:42:f2:98:f9:40:
99:22:64:ea:9c:c1:f5:15:93:62:d5:99:aa:4d:9f:03:ab:c9:
d7:2f:e4:5e:93:82:fb:92:3c:ae:9f:a2:01:3d:57:8f:23:7f:
23:23:e7:e3:69:c0:44:ce:32:57:18:72:1c:10:2e:51:bf:ef:
48:a4:64:47:06:6e:d1:69:58:17:04:60:28:09:4e:fb:7f:65:
9b:69:44:10:67:a5:59:04:19:b9:d9:01:54:74:d5:8a:f7:f6:
c9:ea:af:9d:27:23:e5:87:92:f4:e8:40:50:49:15:c7:03:b4:
17:29:30:40:36:36:14:05:dd:9e:f9:89:75:09:44:c3:67:86:
7b:a8:16:21:c1:8a:c9:ee:c1:81:0a:db:1d:d2:d7:a4:c6:23:
4e:68:91:86:d1:db:cc:fc:c6:37:21:66:b1:64:93:6a:a8:93:
ea:2c:1b:19:4c:ce:0f:61:50:1a:50:0f:19:01:fb:ac:a7:82:
f4:49:f7:53:1e:c5:71:f6:85:20:a4:d3:dd:86:3d:c7:20:a2:
cf:89:04:48:13:6c:c7:3d:b3:e7:7e:3e:61:75:fb:7a:a3:3b:
8f:21:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:28 2025 by rpki-client