Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OSIAjTJ7LZrymMX6izTS6D8XhwY.roa
File: OSIAjTJ7LZrymMX6izTS6D8XhwY.roa (raw, json)
Hash identifier: UHpNiqUdWpwAvuW8R+AnKoWICNs02wEFwEVwsg/kDrQ=
Subject key identifier: 39:22:00:8D:32:7B:2D:9A:F2:98:C5:FA:8B:34:D2:E8:3F:17:87:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1A5CCB6B97A5EAC67BA5EC66674D9210
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OSIAjTJ7LZrymMX6izTS6D8XhwY.roa
Signing time: Thu 07 Mar 2024 19:21:12 +0000
ROA not before: Thu 07 Mar 2024 19:21:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:5c:cb:6b:97:a5:ea:c6:7b:a5:ec:66:67:4d:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 19:21:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3922008d327b2d9af298c5fa8b34d2e83f178706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:62:39:80:c3:07:d0:9d:58:2a:cf:c7:22:
38:d6:e9:39:76:b5:4a:3b:77:69:c0:f2:82:b7:87:
e7:33:8f:25:3d:10:60:91:db:83:1f:a2:0e:26:9d:
c0:1d:fa:04:a2:c1:d4:9e:85:f5:f0:96:5f:fe:7e:
9e:17:8c:cf:d1:88:1c:b6:1f:2c:65:dc:ef:29:d4:
67:ff:29:af:97:84:98:36:2f:e4:d6:e9:76:25:24:
04:b9:05:60:5b:da:a3:50:09:af:29:5b:27:df:c3:
ed:99:84:a2:04:95:fb:f5:c9:1f:d5:c8:ed:40:52:
aa:be:4a:ee:bb:d1:f7:20:06:64:dc:30:bf:bd:14:
f7:15:e0:be:45:8c:b4:af:72:18:4d:b9:37:8d:e3:
ef:cf:18:63:1a:21:de:a9:3c:b0:3b:46:a5:4a:f7:
e5:6e:da:2a:be:a4:40:2d:1d:8d:71:d6:38:9c:69:
b8:f8:80:63:e9:fe:64:a2:bf:56:41:0f:92:76:27:
0a:12:a0:7b:b7:ef:a0:86:95:a5:be:9a:d4:8e:9c:
c2:9c:86:af:f2:44:a8:67:61:09:dd:e9:d9:ab:96:
70:9a:1b:d2:58:5a:ab:58:d3:ab:b5:b4:db:6d:e7:
9a:28:1d:49:8a:ae:e8:bd:c0:ef:5b:65:93:c1:54:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:00:8D:32:7B:2D:9A:F2:98:C5:FA:8B:34:D2:E8:3F:17:87:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OSIAjTJ7LZrymMX6izTS6D8XhwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:59:1a:96:eb:ff:1c:2d:55:41:57:d3:f6:b7:a8:87:0a:52:
15:ed:b5:da:56:6f:ac:40:98:9d:27:5b:0f:90:07:1c:1b:8f:
73:d0:92:3d:49:d7:7b:75:09:64:49:20:9a:35:4f:66:16:93:
07:44:f8:d8:0d:f3:93:8e:3a:a0:7f:db:3c:3f:0f:f8:16:7d:
63:1b:23:16:31:ca:76:be:8f:89:8f:92:d3:61:f9:d6:88:23:
3d:8e:e7:60:b2:7d:27:61:96:a8:1e:7e:59:2d:a9:5d:54:5e:
4d:b7:39:14:4f:66:1b:aa:e6:5c:64:77:ce:e6:4f:30:06:8f:
f9:e7:b4:68:61:3b:ee:4b:28:7b:1c:b5:9b:15:be:b4:ac:8b:
d7:59:2b:ae:10:ca:07:91:72:3a:6a:cd:56:68:5a:c3:76:24:
68:79:81:a3:45:93:6e:04:f5:52:2f:5c:9e:94:8b:b4:11:ac:
66:b7:f8:ba:36:c3:77:89:eb:5b:c1:6c:5f:29:75:37:cb:93:
8d:2e:84:fe:83:f3:c9:2f:78:e7:2f:f2:4b:f6:e3:cd:4f:61:
82:6b:df:e0:f2:0a:33:0a:2b:24:47:65:c3:9d:af:f1:83:97:
95:33:da:72:fd:00:77:4a:9c:99:c7:69:19:ac:d3:5b:95:86:
de:80:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:05 2025 by rpki-client