Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oHTfrz7xbqx_X-RKyFN2aeiqvls.roa
File: oHTfrz7xbqx_X-RKyFN2aeiqvls.roa (raw, json)
Hash identifier: E8Hcozwbkqqr6hwUksatZv2b9qlgKn03EAv9JuDTGCU=
Subject key identifier: A0:74:DF:AF:3E:F1:6E:AC:7F:5F:E4:4A:C8:53:76:69:E8:AA:BE:5B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CAC0EC59DA1A87E355BC64C3AE063CBB2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oHTfrz7xbqx_X-RKyFN2aeiqvls.roa
Signing time: Wed 27 Dec 2023 16:14:58 +0000
ROA not before: Wed 27 Dec 2023 16:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:0e:c5:9d:a1:a8:7e:35:5b:c6:4c:3a:e0:63:cb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 16:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a074dfaf3ef16eac7f5fe44ac8537669e8aabe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:9c:6f:d9:33:3f:4d:47:33:be:40:be:ef:
24:a9:80:de:42:cc:02:a0:05:7a:21:c3:30:4c:60:
4c:76:62:c9:3f:41:ce:47:2d:78:79:84:94:5e:26:
71:b0:b9:ca:80:32:03:1e:44:00:a5:45:95:c3:f4:
63:e4:ad:d3:fd:53:88:aa:9b:a6:63:fa:39:d4:62:
fc:a3:0d:52:bb:77:45:d9:30:1c:33:14:fa:19:1e:
93:ba:de:65:5d:51:b7:eb:21:48:b2:76:75:4b:e5:
68:9d:20:bc:c5:9c:c0:68:be:d0:00:a2:7e:9a:ef:
7b:66:14:cd:24:af:d4:77:d4:93:1c:71:07:16:64:
26:dd:73:9b:a8:05:74:04:2f:2c:ce:2c:d5:96:e4:
1a:0b:07:0e:f3:bd:42:5d:c1:4d:9a:b4:10:10:fb:
b3:cf:4a:bf:18:8f:82:66:f0:c0:cf:b8:f1:75:e2:
8e:71:e3:b0:06:29:63:1d:9e:84:b1:0b:36:e0:83:
3c:c1:44:b9:b3:e2:a8:b2:8f:68:53:0a:f1:2c:2f:
65:c1:21:3a:21:e9:e9:5f:78:d8:bf:c7:01:f4:a9:
61:a4:e3:95:5c:7a:c2:c3:3d:ee:67:18:9a:a5:67:
85:a2:af:e0:ac:ed:1f:81:0a:b7:e2:1e:01:ab:5d:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:DF:AF:3E:F1:6E:AC:7F:5F:E4:4A:C8:53:76:69:E8:AA:BE:5B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oHTfrz7xbqx_X-RKyFN2aeiqvls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:46:7e:2a:42:c7:26:d5:a1:7b:c2:8f:3d:e0:67:52:07:80:
6b:05:b2:2b:72:e7:4f:45:96:b4:ea:70:0f:a3:c3:b3:a1:84:
50:bc:a1:97:ae:8d:69:af:e7:78:ef:06:09:0b:d4:73:80:be:
b6:32:73:1b:62:9b:08:ec:5c:4e:d0:05:f1:5d:c8:23:83:8c:
02:5e:d4:18:b7:b6:2b:30:7e:29:a3:9d:0f:0c:1c:96:e0:f1:
0e:e7:9e:d3:ac:56:9b:17:91:d2:07:3a:d4:36:24:a4:cf:d0:
f9:50:6b:a1:e8:73:b7:05:ab:83:ab:0a:28:ec:e0:e5:69:ed:
1e:a4:f9:1c:a9:37:54:35:37:04:8c:d4:ff:61:ff:c9:02:12:
bd:24:9a:30:d5:71:ed:58:57:80:31:ac:6c:e0:08:d7:22:38:
a1:3b:b3:c5:eb:fe:d7:41:f8:12:cd:5d:26:3d:af:ee:17:14:
fb:3c:5a:b8:7f:cf:25:f4:3e:35:de:d1:44:6e:fa:9c:c9:2b:
8e:a0:e0:f7:e6:2d:bc:18:82:95:26:d2:83:9e:6e:03:45:11:
46:1d:42:e0:87:ce:eb:47:85:12:2e:44:3b:e2:25:5f:73:0b:
c1:8d:b6:43:a4:a4:d1:37:7f:24:2a:af:bf:cb:e9:5d:21:7b:
b6:57:f4:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYysDsWdoah+NVvGTDrgY8uyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI3MTYxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDc0ZGZhZjNlZjE2ZWFjN2Y1ZmU0NGFjODUzNzY2OWU4YWFiZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilucb9kzP01HM75Avu8kqYDeQswC
oAV6IcMwTGBMdmLJP0HORy14eYSUXiZxsLnKgDIDHkQApUWVw/Rj5K3T/VOIqpum
Y/o51GL8ow1Su3dF2TAcMxT6GR6Tut5lXVG36yFIsnZ1S+VonSC8xZzAaL7QAKJ+
mu97ZhTNJK/Ud9STHHEHFmQm3XObqAV0BC8szizVluQaCwcO871CXcFNmrQQEPuz
z0q/GI+CZvDAz7jxdeKOceOwBiljHZ6EsQs24IM8wUS5s+Koso9oUwrxLC9lwSE6
IenpX3jYv8cB9KlhpOOVXHrCwz3uZxiapWeFoq/grO0fgQq34h4Bq1148wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKB0368+8W6sf1/kSshTdmnoqr5bMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvb0hUZnJ6N3hicXhfWC1SS3lGTjJhZWlxdmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHhGfipCxybVoXvCjz3g
Z1IHgGsFsity509FlrTqcA+jw7OhhFC8oZeujWmv53jvBgkL1HOAvrYycxtimwjs
XE7QBfFdyCODjAJe1Bi3tiswfimjnQ8MHJbg8Q7nntOsVpsXkdIHOtQ2JKTP0PlQ
a6Hoc7cFq4OrCijs4OVp7R6k+RypN1Q1NwSM1P9h/8kCEr0kmjDVce1YV4AxrGzg
CNciOKE7s8Xr/tdB+BLNXSY9r+4XFPs8Wrh/zyX0PjXe0URu+pzJK46g4PfmLbwY
gpUm0oOebgNFEUYdQuCHzutHhRIuRDviJV9zC8GNtkOkpNE3fyQqr7/L6V0he7ZX
9Co=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:00:09 2025 by rpki-client