Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OY6veq2ZxfAmDagDMJw4vcsj2B8.roa
File: OY6veq2ZxfAmDagDMJw4vcsj2B8.roa (raw, json)
Hash identifier: Jac+5fnRLDmnSmEy2jOF4VYzKDWTluefB+XVXhiCI6E=
Subject key identifier: 39:8E:AF:7A:AD:99:C5:F0:26:0D:A8:03:30:9C:38:BD:CB:23:D8:1F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D130CAC2B20B23BF47AF70695ECB08B18
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OY6veq2ZxfAmDagDMJw4vcsj2B8.roa
Signing time: Tue 16 Jan 2024 16:13:34 +0000
ROA not before: Tue 16 Jan 2024 16:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:0c:ac:2b:20:b2:3b:f4:7a:f7:06:95:ec:b0:8b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 16 16:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=398eaf7aad99c5f0260da803309c38bdcb23d81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:63:1f:6c:9c:bf:6a:f5:3d:67:65:d4:b7:
3d:5d:0a:54:03:d7:f1:24:b5:47:ee:7a:34:65:a5:
b3:3a:eb:3b:40:03:3a:33:06:ec:5d:e2:35:7b:a3:
8e:4c:d7:bc:ed:a2:7c:fb:15:8f:b3:46:8a:4f:99:
69:60:21:65:0b:2a:71:34:3e:1a:fe:dc:85:88:8e:
a5:36:43:ed:29:07:50:45:0a:3c:ed:00:f0:35:94:
9f:5c:05:6c:c0:11:5e:61:fb:2e:4e:38:c8:6c:f1:
dc:b5:81:03:b1:fa:21:37:94:32:ad:de:db:e0:09:
2c:40:25:3d:87:d3:73:ba:de:30:31:c6:e5:01:b1:
cb:2f:31:de:89:f9:24:b0:95:62:71:18:9a:25:a6:
6a:a5:02:08:01:f5:6b:67:b1:94:81:c2:57:cd:3c:
a8:ab:c5:72:1e:b4:41:15:cd:4b:45:3e:c0:86:64:
e9:92:60:4b:1f:04:e0:40:fc:ae:e6:04:23:0b:14:
39:af:a0:17:ae:5c:d0:6c:dd:a7:03:3d:96:d4:25:
6b:b2:d3:61:d9:bb:7c:22:75:cf:dd:41:20:3a:08:
6d:53:63:68:78:5a:9c:65:42:41:ab:63:be:73:45:
78:7b:d4:5a:06:8b:87:6c:bf:78:6b:c0:a4:8a:0c:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:AF:7A:AD:99:C5:F0:26:0D:A8:03:30:9C:38:BD:CB:23:D8:1F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OY6veq2ZxfAmDagDMJw4vcsj2B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:76:61:15:32:dc:1a:90:53:48:ab:47:1c:0a:8c:d9:25:7c:
88:78:4f:fb:62:5a:e2:cb:ba:16:ed:3a:4d:6d:80:64:de:fd:
4d:16:b7:9c:0a:02:6b:1d:07:a1:7b:0d:db:99:a3:aa:4c:46:
8c:24:58:fb:81:ff:21:ff:26:c2:f5:46:71:94:c6:f9:ff:5b:
ad:a4:72:25:34:b5:6f:76:a1:11:06:b0:2c:a6:97:e6:d5:67:
30:b0:49:93:2b:19:e2:a9:8a:36:c3:88:2e:4d:35:0c:69:12:
1e:68:c6:bc:6f:aa:51:3b:cb:14:b4:d5:d7:76:31:97:51:9d:
c2:23:57:2a:a3:e8:28:e6:af:07:38:2b:54:b4:fc:87:04:23:
c5:02:bd:80:96:91:3d:49:4a:60:6f:bb:df:e2:36:44:2b:13:
b4:50:4f:d4:2a:a6:62:4c:4f:1c:02:78:da:7d:04:8b:52:12:
25:70:d5:2e:cd:2c:ab:dd:32:a9:52:82:55:47:fc:f9:6b:48:
f2:2f:2d:6e:47:4d:0f:08:46:27:ff:73:53:c9:6f:ce:a9:00:
5e:9f:a4:ad:89:2b:1d:7e:04:23:0e:7d:51:37:52:6e:fe:f8:
eb:86:3b:ab:16:83:b3:ae:47:a8:04:db:6b:98:38:c8:8c:40:
73:06:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:23 2025 by rpki-client