Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P2eBk33PShcCPMRiRGceMVBdCyQ.roa
File: P2eBk33PShcCPMRiRGceMVBdCyQ.roa (raw, json)
Hash identifier: bvMSkMx8KI0di6L2tRbbAdstcIxxKolLc7h+mLwHqEk=
Subject key identifier: 3F:67:81:93:7D:CF:4A:17:02:3C:C4:62:44:67:1E:31:50:5D:0B:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F735F9E4AA588A101D320B1D9C6C2B44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P2eBk33PShcCPMRiRGceMVBdCyQ.roa
Signing time: Sat 28 Jan 2023 07:09:47 +0000
ROA not before: Sat 28 Jan 2023 07:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f7:35:f9:e4:aa:58:8a:10:1d:32:0b:1d:9c:6c:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 28 07:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f6781937dcf4a17023cc46244671e31505d0b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:67:d8:dc:02:21:1c:66:55:e2:90:46:c8:30:
95:4a:b1:1d:4e:f9:e1:b2:18:a9:68:7a:8d:1d:d9:
89:88:ce:1f:22:8c:88:4b:0f:97:ad:f0:bd:4c:73:
0b:72:a7:78:c5:b0:e7:d1:11:e1:3c:09:ba:66:9c:
5e:97:dd:e4:eb:87:39:1f:a4:3f:e2:df:a6:d1:e2:
e8:5b:1f:3d:f4:71:b2:fa:d2:0b:a7:71:95:3b:b3:
49:5d:cb:09:58:7d:12:52:30:6c:51:de:98:cb:cb:
1c:31:7b:84:2f:e5:f8:ec:a7:72:e0:08:ed:bd:51:
29:45:f8:be:b3:e4:cf:e6:20:d5:38:80:61:9b:96:
78:e3:f2:66:1f:94:59:ae:8b:f0:a0:f7:e7:6a:cd:
e0:fb:a5:23:33:42:50:30:3f:ea:c9:ae:7a:a3:05:
e5:c4:81:2c:07:22:c5:e6:37:05:0f:8b:f7:38:16:
45:86:91:24:1e:f7:48:c1:8a:1a:1e:82:db:20:73:
01:a8:82:79:f0:de:54:46:84:3d:2f:c6:0f:fa:79:
06:54:dd:c2:8f:02:86:89:3b:b8:70:d8:44:20:94:
f6:79:bf:30:8c:58:0d:03:7a:b3:ec:3e:00:a6:75:
6d:c4:4b:e8:33:77:1c:3b:e7:0c:d6:bf:14:27:95:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:81:93:7D:CF:4A:17:02:3C:C4:62:44:67:1E:31:50:5D:0B:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P2eBk33PShcCPMRiRGceMVBdCyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:f7:63:6c:88:65:f1:04:36:a7:8d:bb:bb:0a:53:74:be:26:
73:01:2b:a6:d4:94:7c:89:4c:14:6b:bf:8b:49:64:ff:a0:a5:
33:7c:b4:de:4d:d1:0a:f1:02:10:3e:03:91:a1:51:cc:ca:c5:
d8:e9:d9:fd:10:ed:26:9e:76:ba:fd:61:64:f3:cb:2f:2e:60:
ce:52:30:c4:da:e0:64:21:a8:a4:fc:ca:bb:b9:37:a5:93:18:
a2:f0:8a:42:a6:83:1e:6b:d0:58:f3:e6:6c:0a:8d:bd:12:90:
1d:20:27:26:1d:d3:d7:38:06:ee:3f:45:65:18:db:8c:70:31:
d4:f5:15:da:2a:69:63:03:97:29:d6:63:35:6c:a8:b7:69:d2:
11:18:0c:ab:1a:9f:8a:31:6c:3e:a3:6d:61:be:a1:79:86:82:
3a:d2:ad:d1:7f:52:b8:20:16:80:1c:66:7f:bf:6e:23:d6:6f:
ab:12:ab:85:73:b7:9a:97:a5:e5:ef:44:30:a6:2d:b9:1f:11:
54:0e:7f:93:ab:b4:34:2e:de:a6:17:db:11:63:36:39:64:52:
2f:09:34:2d:e9:b8:df:f2:18:e1:aa:6c:65:0a:43:df:37:32:
35:f5:75:ea:05:7e:ed:7c:79:05:d0:1f:11:f7:4b:16:e3:40:
27:e8:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:47:53 2025 by rpki-client