Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O2h-9g2kI5OpaXnfwM8anmlcHWQ.roa
File: O2h-9g2kI5OpaXnfwM8anmlcHWQ.roa (raw, json)
Hash identifier: C/zPR6BsGa1X0ZbZif5khtBb721VF91Oi6BtJkeN9qA=
Subject key identifier: 3B:68:7E:F6:0D:A4:23:93:A9:69:79:DF:C0:CF:1A:9E:69:5C:1D:64
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1FE2556959E5C04B85DADDE9BC3D2FE9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O2h-9g2kI5OpaXnfwM8anmlcHWQ.roa
Signing time: Fri 08 Mar 2024 21:05:10 +0000
ROA not before: Fri 08 Mar 2024 21:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:1fe1:7909/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:e2:55:69:59:e5:c0:4b:85:da:dd:e9:bc:3d:2f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 8 21:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b687ef60da42393a96979dfc0cf1a9e695c1d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:48:48:1e:69:10:31:1d:e9:56:f6:3d:51:
0f:18:8b:36:af:41:65:ed:13:63:a4:ae:f9:c2:cb:
c3:79:2a:18:f1:da:41:74:c2:f2:f0:5f:fa:3c:51:
1c:d4:b4:25:06:c9:f8:8d:32:69:d7:0b:59:57:59:
84:d9:00:5a:8f:7c:9d:d7:87:70:bc:e4:92:07:71:
89:4c:5f:0f:1e:7a:5d:14:12:61:eb:49:74:6e:c5:
e1:b4:27:79:fc:1a:e7:f0:8b:a6:52:4c:c6:4c:02:
46:ab:bb:fa:f5:b9:fb:e1:fb:b7:d2:c2:51:cf:b9:
f6:f0:fb:1d:47:a5:17:1f:0f:a6:07:af:48:da:ee:
71:a6:9d:a1:5d:38:ff:a7:ef:45:0b:b1:3c:66:18:
9d:e1:71:0c:39:5e:79:8d:3e:b2:7b:3f:97:ee:b1:
2c:99:6c:64:bc:d1:78:6d:ce:f3:0d:d9:83:d4:0d:
a8:10:ec:38:82:3d:c7:46:25:d7:35:fc:a8:78:fa:
21:88:fe:66:4d:b2:a7:f8:c9:a1:f5:91:d3:b9:e4:
b0:4c:65:b1:1b:2c:a0:51:82:b2:05:0e:65:12:27:
ac:5e:46:c2:20:82:37:7c:1e:c9:3f:bb:88:3a:ba:
5a:fe:58:b4:b2:39:66:06:63:2d:54:86:5b:25:20:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:7E:F6:0D:A4:23:93:A9:69:79:DF:C0:CF:1A:9E:69:5C:1D:64
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O2h-9g2kI5OpaXnfwM8anmlcHWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:1a:d5:72:17:d7:73:54:ae:a8:e4:13:75:97:90:ad:57:f8:
f0:89:e9:ab:9b:e7:de:c8:4d:55:18:3d:d4:69:92:c0:1f:fe:
04:d4:5e:3b:48:c1:1a:c4:93:c3:76:d1:63:fc:c5:4e:c4:12:
2e:4a:44:7e:cd:2e:18:2d:54:39:55:f1:33:f8:c5:89:f3:5c:
39:e8:df:40:1a:fa:27:e4:bf:d3:46:36:ff:e7:67:ae:dd:f7:
09:a2:a4:83:90:8d:5f:0d:0d:41:e7:6e:e4:d6:aa:7a:18:c5:
73:a0:8f:fb:5e:ad:76:97:96:5a:6c:06:05:c6:dd:dd:d2:98:
0a:73:6b:81:c2:3e:37:fe:c4:8e:de:cc:f4:8e:40:40:7e:90:
cc:7f:59:55:9e:05:74:05:e9:b3:90:6b:c3:4d:e5:a0:65:a7:
32:9d:86:a1:01:f8:21:ea:79:97:86:05:58:95:eb:50:00:77:
30:9a:b1:6d:0e:3d:83:c6:57:8a:3e:59:c4:af:88:e2:16:f5:
59:90:34:61:83:e5:bf:93:10:51:63:66:c8:d5:6b:d9:67:56:
64:77:3e:a0:44:07:13:26:ac:6b:dc:ad:d6:73:15:cb:19:3a:
20:a5:53:bb:08:e6:62:18:c4:27:22:8b:ae:41:7b:18:55:d1:
b0:21:6e:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4f4lVpWeXAS4Xa3em8PS/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA4MjEwNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjY4N2VmNjBkYTQyMzkzYTk2OTc5ZGZjMGNmMWE5ZTY5NWMxZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls5ISB5pEDEd6Vb2PVEPGIs2r0Fl
7RNjpK75wsvDeSoY8dpBdMLy8F/6PFEc1LQlBsn4jTJp1wtZV1mE2QBaj3yd14dw
vOSSB3GJTF8PHnpdFBJh60l0bsXhtCd5/Brn8IumUkzGTAJGq7v69bn74fu30sJR
z7n28PsdR6UXHw+mB69I2u5xpp2hXTj/p+9FC7E8Zhid4XEMOV55jT6yez+X7rEs
mWxkvNF4bc7zDdmD1A2oEOw4gj3HRiXXNfyoePohiP5mTbKn+Mmh9ZHTueSwTGWx
GyygUYKyBQ5lEiesXkbCIII3fB7JP7uIOrpa/li0sjlmBmMtVIZbJSDjMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDtofvYNpCOTqWl538DPGp5pXB1kMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTzJoLTlnMmtJNU9wYVhuZndNOGFubWxjSFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAQa1XIX13NUrqjkE3WX
kK1X+PCJ6aub597ITVUYPdRpksAf/gTUXjtIwRrEk8N20WP8xU7EEi5KRH7NLhgt
VDlV8TP4xYnzXDno30Aa+ifkv9NGNv/nZ67d9wmipIOQjV8NDUHnbuTWqnoYxXOg
j/terXaXllpsBgXG3d3SmApza4HCPjf+xI7ezPSOQEB+kMx/WVWeBXQF6bOQa8NN
5aBlpzKdhqEB+CHqeZeGBViV61AAdzCasW0OPYPGV4o+WcSviOIW9VmQNGGD5b+T
EFFjZsjVa9lnVmR3PqBEBxMmrGvcrdZzFcsZOiClU7sI5mIYxCcii65BexhV0bAh
bvA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:37:33 2025 by rpki-client