Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CV-R2Cv5oIobn6CxHYTm1gAGUqI.roa
File: CV-R2Cv5oIobn6CxHYTm1gAGUqI.roa (raw, json)
Hash identifier: sC11d7pv0d2EaA9aH0WO1XKZYsrEvE5fkSzJm4SYLuI=
Subject key identifier: 09:5F:91:D8:2B:F9:A0:8A:1B:9F:A0:B1:1D:84:E6:D6:00:06:52:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6726CA5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CV-R2Cv5oIobn6CxHYTm1gAGUqI.roa
Signing time: Wed 02 Feb 2022 09:08:33 +0000
ROA not before: Wed 02 Feb 2022 09:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730595422 (0x6726ca5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 09:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=095f91d82bf9a08a1b9fa0b11d84e6d6000652a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:f7:86:ac:62:ec:ad:40:71:72:1d:fe:b9:
f1:12:e2:fa:d1:08:0a:39:40:54:4d:73:77:8e:33:
82:cd:b8:10:aa:77:33:4e:90:07:e7:3c:b1:2e:af:
b9:a2:5d:1d:d8:db:7e:b4:b7:a7:81:8e:d6:55:55:
ea:c6:45:74:e3:ca:02:9f:19:40:16:c4:9c:44:34:
c2:67:4f:37:2c:5d:7e:b4:20:a5:47:0d:a8:22:d3:
99:f9:7b:35:15:21:3e:de:fc:aa:69:e1:ff:54:80:
60:54:c6:14:2e:0f:16:5e:ad:9f:21:6b:a8:09:54:
b6:f5:78:be:e1:4b:67:0a:1d:bf:e4:0b:ef:ab:d0:
38:b5:84:8f:c1:97:4b:5a:f7:1a:f1:fc:dc:75:4b:
3c:c9:76:32:ee:ae:d6:c0:b9:62:64:41:e5:72:a2:
a8:b9:f3:24:ed:80:61:e0:9e:06:d8:01:f6:59:a1:
fa:c0:62:57:d7:96:ef:d6:f7:e3:b3:ea:b9:90:da:
a4:e0:9f:3f:0d:a0:9b:3c:f9:e4:62:d6:23:ff:46:
83:b2:70:b8:53:b1:ee:fc:9a:39:10:c6:55:48:8b:
4e:31:c8:32:b2:0c:ad:fb:3d:a9:b6:0f:cd:47:02:
0d:75:e8:f7:81:83:25:ea:26:57:e6:53:32:12:c4:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:91:D8:2B:F9:A0:8A:1B:9F:A0:B1:1D:84:E6:D6:00:06:52:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CV-R2Cv5oIobn6CxHYTm1gAGUqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:38:d3:fd:6d:3f:8b:14:57:f5:31:0e:5c:3d:f2:c2:ff:0b:
3c:bb:05:53:a7:a4:b0:94:c5:58:89:ae:5b:25:76:50:b4:13:
20:1d:a3:b8:1c:7f:90:b8:36:cd:29:27:04:88:3f:ab:17:e3:
22:e3:8d:b5:54:bc:48:3b:94:f4:32:2a:f2:36:99:b9:d8:e5:
a3:52:10:fe:1f:fd:0d:a6:49:c7:69:c4:83:b3:e2:4b:ea:d6:
c4:d6:b6:01:a5:f9:17:6d:ec:7a:ce:8e:34:6f:46:a3:24:4c:
a7:53:36:f4:38:1a:5f:98:2b:3a:d5:cf:a8:f4:fe:33:14:4c:
e2:c3:d1:31:bb:ba:c3:5f:b5:42:28:22:88:3a:b6:2c:bb:20:
7b:1e:80:c2:8e:f3:21:8a:94:e1:d8:e5:49:de:49:02:e8:a8:
2a:69:12:86:7e:8f:61:a7:9d:be:6e:ba:f1:23:fc:70:5d:6a:
e1:db:41:f9:a3:bc:f2:97:0b:34:46:c4:84:bd:a0:f7:de:b5:
fd:13:be:44:ce:cb:2c:83:42:d3:f1:14:07:71:6b:33:2f:b7:
e9:2b:91:82:3c:38:ea:7b:e4:bc:29:28:d3:76:dc:74:e6:33:
c6:90:8b:b3:f1:bf:f0:c2:58:9c:cc:1a:59:1d:bc:de:ff:19:
86:99:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:40:31 2025 by rpki-client