Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2PV5_3C2DVqU5-WktGkRqfoJQjE.roa
File: 2PV5_3C2DVqU5-WktGkRqfoJQjE.roa (raw, json)
Hash identifier: W3hBa05FJMBiNhBFT7xifrZ9UCV1i2RtjWgrd1Y2Q3s=
Subject key identifier: D8:F5:79:FF:70:B6:0D:5A:94:E7:E5:A4:B4:69:11:A9:FA:09:42:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852F73561710A35F4EB0B10B2357AED351
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2PV5_3C2DVqU5-WktGkRqfoJQjE.roa
Signing time: Tue 20 Dec 2022 12:12:45 +0000
ROA not before: Tue 20 Dec 2022 12:12:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:73:56:17:10:a3:5f:4e:b0:b1:0b:23:57:ae:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 12:12:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8f579ff70b60d5a94e7e5a4b46911a9fa094231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:9f:14:c4:3a:81:b7:ae:c4:93:72:b9:33:
4d:fe:b8:10:7a:ec:86:96:c8:e9:0a:03:ac:7d:6e:
67:d4:0b:7e:61:df:2e:3e:c9:53:ac:78:bd:ab:30:
9d:97:74:38:a7:cf:25:04:17:45:af:33:d1:e0:d8:
d3:de:ba:4b:c0:c2:e3:8a:b0:eb:2c:75:92:6f:6c:
7d:9b:c7:e5:fc:a0:99:1c:5d:bd:14:b6:e9:07:13:
70:a1:cc:f6:49:24:17:22:52:40:d6:3a:56:e2:d9:
c4:26:57:5b:1d:a2:7e:3f:da:fd:ff:e8:b8:d6:2f:
b4:f9:d1:fa:5e:cd:cf:82:bf:ee:1c:e8:ab:56:c2:
f8:d8:f1:99:53:64:d3:39:ba:fb:cb:5e:31:5a:29:
69:63:d9:d8:9c:ba:55:e0:27:fd:78:ab:27:5d:db:
b0:d7:45:ea:fd:e3:5c:c7:1e:8a:77:4a:b0:2e:16:
e8:db:c6:7b:24:8f:c4:81:00:ba:d1:35:46:7e:3d:
98:2a:46:2a:f1:8a:cc:d7:67:73:2c:c8:7b:e2:e2:
10:74:3a:74:6b:71:35:56:59:89:43:01:e5:7b:75:
90:a2:cc:56:cb:e8:69:c0:cd:a7:ae:6d:37:c9:71:
e0:14:b6:24:ec:b2:7f:bc:3d:23:07:37:5f:e4:23:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:79:FF:70:B6:0D:5A:94:E7:E5:A4:B4:69:11:A9:FA:09:42:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2PV5_3C2DVqU5-WktGkRqfoJQjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:7c:78:c1:8d:55:ff:9d:b5:75:95:b9:81:3d:82:6d:82:c7:
56:8c:85:5e:a6:1c:5f:c5:2d:16:d7:ec:b2:49:78:9c:04:39:
a9:2b:54:12:d3:f5:a5:86:db:6f:e5:fc:53:84:1b:eb:4c:be:
ee:85:10:5d:fe:e4:17:ec:5b:6c:bd:07:77:06:07:35:b1:cd:
9d:36:25:3b:2d:f9:c6:a8:97:2e:4a:80:47:95:7b:0e:f2:3c:
ad:8e:36:df:53:15:50:2d:65:de:bd:e5:70:8a:db:09:0b:e4:
6a:c5:6e:92:25:77:01:27:d1:70:3d:f1:9e:c2:c9:54:76:90:
44:1a:54:4e:a3:2b:ea:40:57:00:9b:86:55:92:77:15:2f:e3:
42:af:66:c4:97:a1:9b:b1:5e:8d:a8:53:f1:3a:40:44:f6:ff:
da:41:f2:6d:96:30:0a:a6:a5:38:89:25:55:da:25:ae:f7:6c:
2e:66:12:cf:13:03:cd:63:d5:8d:1f:6f:db:68:61:c2:b0:75:
47:87:11:af:d6:42:4e:00:02:fc:0e:a3:cc:0e:0d:48:8e:08:
10:e8:74:ae:69:67:bd:f9:7d:06:6d:5e:48:1f:0d:35:bd:66:
97:c4:c8:2e:a4:7b:81:8f:46:fd:94:06:b4:4d:75:45:98:28:
5a:46:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:09 2025 by rpki-client