Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BbryAO3xE7BJOjdlDPwUly6JIDQ.roa
File: BbryAO3xE7BJOjdlDPwUly6JIDQ.roa (raw, json)
Hash identifier: RTloywGoD5sWg8vF5elCCyY0IoikCZiFVOl/g1W6CTQ=
Subject key identifier: 05:BA:F2:00:ED:F1:13:B0:49:3A:37:65:0C:FC:14:97:2E:89:20:34
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8531029DFA134E81E852C741D823CA44
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BbryAO3xE7BJOjdlDPwUly6JIDQ.roa
Signing time: Thu 28 Mar 2024 13:12:45 +0000
ROA not before: Thu 28 Mar 2024 13:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:31:02:9d:fa:13:4e:81:e8:52:c7:41:d8:23:ca:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 13:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05baf200edf113b0493a37650cfc14972e892034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:14:0b:4c:e3:f9:74:d6:ae:55:42:85:14:
8b:21:de:9b:53:e3:fd:c7:5a:0d:e4:e5:35:3e:81:
0a:6a:8c:c3:99:75:cd:47:ac:bc:03:d3:3f:a1:a2:
87:94:a7:93:b0:09:81:0c:d0:78:ff:8a:49:7a:c8:
36:ed:ac:ac:f2:2a:26:2d:f5:12:03:6c:62:f3:01:
c7:a3:05:c7:82:06:de:fd:aa:2b:4b:9a:54:e1:df:
b7:e1:79:cc:9d:1d:54:0c:a3:fb:9b:f0:48:2c:df:
8b:e6:2d:b9:dc:94:ca:f4:5b:2b:c8:2d:ef:97:db:
bc:07:5d:67:4e:6f:a3:10:ca:22:92:64:9c:31:c8:
7d:51:e2:a4:5a:60:c9:1b:a2:cb:55:c0:7a:60:b5:
27:97:25:a4:e5:38:6d:01:e0:b0:6e:de:4d:5b:83:
87:9c:89:3c:ab:53:f5:cc:49:77:ca:d6:81:6a:c7:
1c:b7:ce:57:3a:6c:07:56:69:3e:d3:ff:be:de:91:
8e:fe:28:af:23:35:d6:45:c4:6f:78:7f:f9:8a:2b:
72:fa:a6:58:48:00:be:b4:d5:90:c5:d6:1b:90:63:
89:ac:74:a8:33:93:4f:6f:50:18:1d:89:f0:ef:59:
50:a7:f8:e8:19:22:11:c8:b2:0d:12:92:2d:7e:29:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:F2:00:ED:F1:13:B0:49:3A:37:65:0C:FC:14:97:2E:89:20:34
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BbryAO3xE7BJOjdlDPwUly6JIDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:16:97:8e:0a:00:1a:49:ab:7b:7b:d9:27:5d:3d:b8:e9:5f:
57:97:b0:bc:c5:fd:d1:95:cc:5f:27:23:2c:76:b4:27:77:88:
be:e2:8d:10:97:44:2b:18:ca:5e:cc:81:9d:cb:e1:3c:c0:10:
9c:bf:2d:a2:df:36:68:1a:19:1b:ad:ab:78:82:65:f6:83:ec:
0b:d3:fd:e0:59:91:8f:88:5b:37:6c:69:44:33:81:d8:c9:b7:
4f:32:a8:2d:18:32:6b:0c:5d:74:29:84:96:dd:db:a5:1c:58:
90:da:24:c7:b4:ba:29:19:8e:a4:0b:73:97:43:66:c3:d1:46:
7b:b9:69:64:cf:8d:be:cb:1d:12:c3:a5:89:ca:34:37:cd:08:
f8:ca:8e:0d:f0:79:cf:a2:be:97:da:37:73:1d:0e:44:6b:3d:
71:76:7b:e1:f5:1f:1e:a9:b5:8e:85:df:7a:29:09:e3:1a:37:
68:f1:2a:57:65:ec:a7:63:db:f7:37:58:80:0d:26:9d:db:82:
3a:c3:5c:5e:64:da:c6:ce:d4:1e:c5:7e:e1:98:1e:e9:88:0e:
7d:6e:0e:3e:65:ff:73:f2:de:c1:70:c5:c1:04:2d:02:dd:1b:
07:66:39:b3:a6:f1:d7:a8:c9:99:d1:ff:50:c3:70:0e:de:96:
c5:eb:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:25 2025 by rpki-client