Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/odpogCTcVYdSk3a8vnpkEBrEZVE.roa
File: odpogCTcVYdSk3a8vnpkEBrEZVE.roa (raw, json)
Hash identifier: 5jJXyRCR9LXKg2acK2KovABpZa7QYdELsZLiJaszv4k=
Subject key identifier: A1:DA:68:80:24:DC:55:87:52:93:76:BC:BE:7A:64:10:1A:C4:65:51
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E650058A5B49FDD2B95C64E65D2368852
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/odpogCTcVYdSk3a8vnpkEBrEZVE.roa
Signing time: Fri 22 Mar 2024 07:11:45 +0000
ROA not before: Fri 22 Mar 2024 07:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:00:58:a5:b4:9f:dd:2b:95:c6:4e:65:d2:36:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 07:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1da688024dc5587529376bcbe7a64101ac46551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:17:07:dd:fe:3d:9b:be:a2:b4:f8:6d:83:
88:d8:6d:d5:e3:69:e0:80:7e:78:4c:d6:34:f1:43:
e1:59:23:25:71:c1:50:1a:54:53:f4:09:36:4c:d4:
6a:1a:c9:4a:8c:81:c4:1e:fc:be:c8:0d:97:6e:0c:
1e:d9:ef:a5:d6:fc:0e:36:fb:06:c8:be:20:9b:c8:
5d:bf:33:c2:0e:71:43:92:1c:0b:f0:04:39:30:b4:
ae:14:a6:0c:1b:44:84:1b:20:2f:03:90:46:86:5d:
aa:8d:dc:bc:ec:6e:4d:41:f2:9d:fa:7f:df:a3:29:
c1:47:16:90:af:bf:01:df:f1:8f:b1:1c:ff:8c:80:
92:13:b7:29:df:3b:a6:d8:18:9c:ed:f9:44:19:70:
74:e7:f8:31:38:cf:7f:fa:5b:3f:a0:90:1a:ac:67:
05:fa:00:af:ec:76:40:26:15:d8:f4:03:b1:ff:8d:
f0:14:20:b5:1e:88:84:41:0a:dd:d4:2c:02:86:9e:
c5:79:3a:cd:2e:d6:1d:b7:79:9f:fe:05:b5:07:07:
54:87:18:95:03:45:10:cc:ed:2e:89:53:5a:31:b4:
0e:ab:f5:71:4d:94:3a:16:3b:0a:57:35:78:9c:ba:
b4:bf:51:d9:5a:81:16:c1:48:1f:7a:49:d4:a5:eb:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DA:68:80:24:DC:55:87:52:93:76:BC:BE:7A:64:10:1A:C4:65:51
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/odpogCTcVYdSk3a8vnpkEBrEZVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:96:c5:20:32:4f:9d:46:75:62:c6:88:c6:ff:36:50:6f:96:
82:8c:c8:40:8b:70:13:f6:55:d1:73:39:6c:3b:3e:ff:2f:09:
8e:74:25:01:59:f9:1c:b8:c0:08:92:2b:5c:50:91:81:72:b5:
b1:35:61:f7:f1:cc:0b:3a:90:1b:0b:25:52:94:3a:87:0d:a6:
f0:60:1b:d1:3f:ec:51:48:7b:00:a5:2c:2e:a4:6a:d2:53:2c:
11:6d:fb:aa:68:c0:e4:e3:41:98:0e:22:c1:d5:25:e6:ca:f1:
42:50:99:6c:38:07:f8:e1:15:2e:d3:28:1b:fe:f6:ca:f6:a2:
50:9e:d1:aa:0a:d5:51:69:b5:ac:1e:6d:1c:0b:d7:b9:f5:43:
ae:64:92:2b:3d:bd:4f:a2:59:2d:4e:d7:63:c0:22:ad:f5:69:
c3:80:ef:29:90:97:01:40:13:89:00:63:26:3d:fe:f6:8c:6c:
e9:ca:d9:67:ad:37:eb:f4:92:0d:cb:4c:a5:ea:62:ac:3e:fe:
2c:b0:1c:ab:5a:b1:ea:7f:89:9b:ed:ec:1f:42:da:6d:46:c9:
4f:4c:86:7d:23:87:63:80:52:97:03:3b:1b:a5:b9:a5:bb:b6:
2b:5a:1d:08:0a:75:df:be:a0:08:1c:d2:7a:d5:5e:74:5e:cb:
8c:d8:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:27 2025 by rpki-client