Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OtZr29x3_VsOguEGmUmqDbjoFX0.roa
File: OtZr29x3_VsOguEGmUmqDbjoFX0.roa (raw, json)
Hash identifier: I3CRdToL1+G5TBYawjyzwqYzqRrdSMW8BaqfsXMChaU=
Subject key identifier: 3A:D6:6B:DB:DC:77:FD:5B:0E:82:E1:06:99:49:AA:0D:B8:E8:15:7D
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9E4EF8C67C7F07914BD21C53B216B676
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OtZr29x3_VsOguEGmUmqDbjoFX0.roa
Signing time: Sat 16 Sep 2023 14:04:50 +0000
ROA not before: Sat 16 Sep 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:9e4e:5d4a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9e:4e:f8:c6:7c:7f:07:91:4b:d2:1c:53:b2:16:b6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ad66bdbdc77fd5b0e82e1069949aa0db8e8157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:05:51:35:ee:8f:a3:27:84:67:be:65:27:
7d:4f:3d:43:97:94:b6:8e:48:54:c9:f9:c5:c6:26:
f6:86:27:da:25:b9:c8:5f:d7:3f:4f:15:93:02:a9:
f4:47:90:48:0c:b6:66:6b:06:bc:a1:5c:22:4f:a4:
b2:96:b8:1b:65:29:dd:8b:5f:01:21:16:d8:79:2d:
84:08:1c:f5:2b:cc:ff:fc:42:dd:ac:e1:a2:3e:5b:
61:ce:6d:2e:17:df:c5:6c:be:be:d2:96:d8:26:81:
24:33:1e:0e:db:51:7a:60:f5:ba:14:73:39:f5:d4:
78:1d:54:de:1b:f9:05:c8:bd:92:66:4a:b3:91:49:
80:e4:ea:c3:2f:7b:57:ca:50:e1:6c:f2:9a:94:33:
cb:15:cc:71:b9:7b:06:e4:cf:05:9a:c7:c9:c2:6e:
a2:14:4f:ec:c2:50:71:99:21:67:b6:56:db:70:8a:
c2:6c:99:d9:5f:6b:82:07:91:77:ca:97:bb:c5:d1:
0a:e3:ff:f2:5f:b9:ed:3b:7e:b3:5e:91:d5:74:5b:
1a:ed:7f:8b:23:2b:79:d9:d9:16:a6:85:15:52:ba:
31:1f:30:ab:8d:34:39:5c:b5:2b:a0:37:c0:c3:f5:
9e:46:8e:0c:a0:fa:41:c7:e6:9e:8c:d8:e3:41:d2:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:6B:DB:DC:77:FD:5B:0E:82:E1:06:99:49:AA:0D:B8:E8:15:7D
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/OtZr29x3_VsOguEGmUmqDbjoFX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:75:82:f2:30:4e:d6:7f:2e:8b:e3:6a:e7:fe:e5:d2:bc:bc:
26:ac:d5:ba:a1:b4:f3:bb:38:f1:7f:7e:11:49:0c:48:8f:73:
d5:f3:d8:66:a6:e9:79:00:99:73:22:7c:e3:f1:58:23:c5:db:
73:ac:c4:06:94:28:fd:bf:35:01:06:49:6c:8e:f4:1d:f4:c0:
d3:1a:e0:e0:a3:fe:e6:ea:4c:5e:2b:e5:ad:fc:eb:8f:9f:16:
8e:94:51:fe:c0:d7:e6:84:2a:39:dc:ad:1a:87:ea:47:6d:e4:
97:41:18:5d:f1:56:7d:c8:1d:e7:d9:6c:64:c3:d1:2a:23:1e:
0c:b7:2b:77:c1:a6:ff:0d:15:e4:c4:53:2d:da:79:39:78:c9:
f9:4f:4b:c8:58:2a:33:9d:28:4b:53:35:48:01:63:c4:a6:35:
5e:6d:6b:94:18:26:bf:26:c0:49:d4:ff:c5:dc:55:d3:2c:2a:
73:94:ff:17:c8:5b:3d:4f:f7:4a:76:3b:61:79:1a:9c:e4:bf:
ed:88:c3:d6:e5:a3:80:eb:0e:31:c5:60:cb:b5:7b:c7:4b:db:
75:c3:38:a3:93:4c:aa:c0:ce:5d:bb:1c:d3:82:92:bf:15:7d:
30:37:2c:d4:37:68:8f:b1:31:e4:9a:af:b0:39:f2:54:ac:d3:
ba:b0:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:37 2025 by rpki-client