Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P2Wj5lBowUU0HePadvZ7CWyepG4.roa
File: P2Wj5lBowUU0HePadvZ7CWyepG4.roa (raw, json)
Hash identifier: oDZ9ufUqbrNJoeVfb2CyNuNV36KdhfLryPa5Q+xcZEg=
Subject key identifier: 3F:65:A3:E6:50:68:C1:45:34:1D:E3:DA:76:F6:7B:09:6C:9E:A4:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827B715D43D2630E3B68CE4855C515E5FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P2Wj5lBowUU0HePadvZ7CWyepG4.roa
Signing time: Mon 08 Aug 2022 03:13:23 +0000
ROA not before: Mon 08 Aug 2022 03:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7b:71:5d:43:d2:63:0e:3b:68:ce:48:55:c5:15:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 03:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f65a3e65068c145341de3da76f67b096c9ea46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:dc:2b:41:54:69:67:4a:97:2e:1b:ad:e7:
b7:b8:3d:a7:8c:63:af:1c:69:a6:ce:c4:91:38:6e:
89:72:0b:e7:b0:10:e0:57:28:f4:3f:a5:83:5c:7a:
ab:95:28:68:60:90:d5:3b:0a:e9:a3:8e:44:47:99:
a8:98:65:ba:72:65:6c:c0:f4:21:66:0f:f7:86:f9:
70:c2:8c:f7:c6:cd:00:99:72:7e:f8:4b:6f:22:b6:
18:37:9f:66:38:fb:84:3a:db:5e:58:60:96:99:57:
01:d9:97:d7:46:32:b9:63:71:65:56:6e:ee:0a:72:
ee:56:17:fd:59:35:94:7d:70:5a:3e:32:a5:88:e4:
63:3b:b7:17:26:eb:31:8c:fe:95:b1:b9:f3:05:dc:
10:a5:b9:bd:02:e6:40:f1:5d:9a:b1:92:c0:c1:67:
02:39:7e:16:ff:57:53:74:7d:f2:21:f9:08:49:62:
47:1d:08:e3:31:3e:d5:05:78:b6:9a:70:76:f0:08:
29:c4:46:31:ae:4a:60:34:fd:d3:d5:de:34:d6:80:
3c:07:4d:6c:62:72:cd:8c:64:e0:63:57:85:c1:09:
c9:4a:46:37:b0:0b:a5:32:5d:d2:29:05:f4:8e:e0:
63:0f:9d:b4:77:4c:df:a6:98:f9:b9:b8:5f:f7:15:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:A3:E6:50:68:C1:45:34:1D:E3:DA:76:F6:7B:09:6C:9E:A4:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P2Wj5lBowUU0HePadvZ7CWyepG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:30:20:c8:38:22:3a:60:fb:be:14:d4:d6:0d:66:c5:34:d2:
13:5e:57:f8:f6:16:6e:01:ed:b4:9d:12:ed:d9:49:00:db:24:
ab:62:b7:95:e4:e7:db:d7:92:f7:92:33:8f:8c:d2:68:b7:da:
29:df:2f:43:ba:f3:70:74:5e:7f:19:c7:88:f0:06:54:c1:e8:
1a:25:b4:88:63:42:5b:7b:01:5b:bb:67:34:e7:6e:c4:e3:48:
05:8e:9a:82:4f:6e:0f:d7:b4:8f:b1:50:5c:08:be:2b:7f:7f:
95:5e:a4:95:a4:0d:5f:4a:3f:d3:c4:b0:0b:ab:27:85:0e:b4:
fb:99:78:4e:af:39:a7:da:f5:e9:47:6f:99:2c:69:5f:f8:f1:
da:4c:9a:d1:a6:20:21:0f:e6:79:81:47:cc:61:53:2f:1e:6e:
fc:00:ba:c0:17:d8:eb:4f:b9:ff:b2:2e:d3:b0:0e:56:75:11:
8a:21:ce:ee:f7:18:c1:bb:f6:ad:e3:84:ab:f6:fe:5f:09:68:
b6:77:b0:f7:79:e2:97:11:f6:62:3a:5e:3d:cf:20:47:d3:dd:
81:2e:00:85:56:21:c7:b3:cc:35:df:d3:8d:8b:2a:da:01:7e:
4d:a5:52:f7:b7:04:f0:d2:78:3b:fd:c9:f3:ec:30:06:91:5f:
e9:3e:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:32 2025 by rpki-client