Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OhAY7JTnKR7CB7Mue2a2FaVsGNI.roa
File: OhAY7JTnKR7CB7Mue2a2FaVsGNI.roa (raw, json)
Hash identifier: 87Rpe4uqiWM3+RC4WhD2XhfZuehoqPLbvkP2LBB5Dho=
Subject key identifier: 3A:10:18:EC:94:E7:29:1E:C2:07:B3:2E:7B:66:B6:15:A5:6C:18:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDF8280DC9B631350B7AE6860F9504437
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OhAY7JTnKR7CB7Mue2a2FaVsGNI.roa
Signing time: Sun 25 Feb 2024 09:04:48 +0000
ROA not before: Sun 25 Feb 2024 09:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:df81:ee8e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:df:82:80:dc:9b:63:13:50:b7:ae:68:60:f9:50:44:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 09:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a1018ec94e7291ec207b32e7b66b615a56c18d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:ae:43:8c:b9:08:0b:10:76:b1:06:4a:c0:
0c:f6:87:5a:c1:8f:c3:b8:f2:16:27:bb:fe:9d:82:
ae:a6:4f:8f:40:70:1f:b7:05:ce:ad:80:6c:e8:31:
fb:df:01:a3:e7:2a:be:c6:95:72:a6:43:36:0b:2f:
f9:89:cf:a5:6b:51:96:41:21:0c:a6:30:7a:2a:5e:
d2:68:54:f0:35:4a:9a:9c:6c:05:ea:35:ed:61:e1:
66:fa:57:1e:75:4b:fb:02:43:18:5d:62:c0:c3:33:
d2:bb:39:55:5d:78:15:34:6b:1f:d2:11:03:1f:6e:
51:86:9e:fc:85:b6:93:07:dc:4f:f3:d3:88:45:10:
20:c4:c7:86:32:08:60:ed:f0:1f:a6:11:09:64:e3:
a1:af:60:56:e2:45:46:83:f4:c3:49:e1:18:df:f1:
14:56:6a:f0:96:2c:5c:f9:93:e4:c7:b3:1c:50:72:
c7:ec:86:c1:7c:cc:23:85:44:2a:b5:de:3f:a0:72:
f2:24:be:2b:f5:2d:64:16:e2:2d:d6:69:15:db:c9:
db:1a:85:c5:6a:8e:90:1d:71:9a:9e:d3:42:49:83:
8c:05:7c:2c:b8:f8:ab:48:8f:54:76:5b:65:ad:ef:
2d:4d:44:45:28:b4:da:b4:f9:94:56:9b:e4:19:1c:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:18:EC:94:E7:29:1E:C2:07:B3:2E:7B:66:B6:15:A5:6C:18:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OhAY7JTnKR7CB7Mue2a2FaVsGNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:f9:23:e1:c0:2e:c0:b8:e5:03:89:98:77:2d:36:e5:c9:4f:
4f:92:ff:2f:39:81:c2:91:25:25:cf:77:ee:97:0c:27:cf:78:
76:86:67:0e:d4:0c:1d:cf:c3:80:94:fc:f3:1c:73:bc:73:4e:
a3:a6:b3:32:0d:69:8d:76:97:cf:b4:00:20:7e:15:b5:d9:5a:
4d:b7:0b:21:b9:d4:80:32:92:3a:b5:82:8d:1d:57:55:ed:90:
0b:c0:63:ab:f5:d9:8e:05:cb:01:bf:09:8b:36:06:38:90:7e:
ff:5e:10:76:67:ab:df:e3:56:d3:3c:21:4d:f7:dc:7a:1e:09:
d8:11:07:43:1e:f4:5f:5a:d2:b6:13:4b:9f:26:37:b4:3d:10:
12:9d:e6:93:71:2a:bd:34:23:3c:96:43:4e:ce:a1:ba:13:f2:
a1:aa:a4:4c:a2:9f:8d:c9:11:6f:ad:da:e0:57:b3:5e:5c:68:
e0:1d:2c:63:ac:c4:4e:62:98:00:32:bc:4f:c3:84:a1:22:9f:
2e:c2:ec:09:a9:03:23:1f:98:50:be:0b:91:0a:45:16:9f:67:
1c:7e:76:ed:18:a3:f9:0d:17:5d:dc:f6:68:0f:b4:ac:0e:ec:
ba:03:78:d2:de:c9:4f:e5:e4:8e:a3:ec:3e:92:1c:88:0f:4b:
cc:b4:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:43 2025 by rpki-client