Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PV8y-DzH2x4qIAndwErpBWrnlfA.roa
File: PV8y-DzH2x4qIAndwErpBWrnlfA.roa (raw, json)
Hash identifier: KhsBGHRmYgPVjKjFfcXxcmkOAJwUS/lMxgFtWe2TA/k=
Subject key identifier: 3D:5F:32:F8:3C:C7:DB:1E:2A:20:09:DD:C0:4A:E9:05:6A:E7:95:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F4A167F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PV8y-DzH2x4qIAndwErpBWrnlfA.roa
Signing time: Thu 03 Mar 2022 11:08:25 +0000
ROA not before: Thu 03 Mar 2022 11:08:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867126399 (0x6f4a167f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 11:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d5f32f83cc7db1e2a2009ddc04ae9056ae795f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:55:fa:76:4d:6f:c1:4b:2d:34:f9:be:60:
d4:c7:1d:5f:31:65:cd:11:14:e5:08:a1:b2:93:06:
48:b4:8a:53:85:41:f0:52:ee:dd:dc:79:c5:1d:2f:
54:ef:f1:c0:a1:1f:03:44:93:19:07:0c:c5:b8:a1:
33:ad:67:d4:02:57:60:e2:f0:1e:a6:3f:55:e6:a3:
8b:2f:33:ed:fc:54:61:c3:60:c9:49:02:b2:74:a5:
32:26:a4:3f:c0:b3:0b:3d:c3:d8:11:df:c3:8e:f1:
70:69:79:60:4a:eb:a4:c2:3c:e6:b7:8d:5e:b1:19:
7a:b4:64:5a:67:0e:64:7b:41:5d:cb:5c:02:1e:d9:
2c:4d:ae:b0:0f:5d:a7:eb:7e:42:26:88:ec:e6:bc:
2d:46:7a:f6:54:da:14:32:e4:7a:06:77:01:f4:c7:
47:4f:c7:0b:2b:26:25:98:0e:01:74:a5:52:dd:fd:
1b:42:a7:8f:c7:f3:16:f5:62:db:84:48:c0:c9:eb:
4c:ae:b5:b4:41:ef:82:b0:a2:95:42:22:01:06:07:
e1:e0:06:aa:f1:ba:cd:c6:d4:d3:90:fc:fc:45:fe:
46:95:13:b9:34:b0:c8:72:a9:8e:be:2d:f6:fe:02:
a2:55:0d:b7:ac:26:87:39:dd:fb:1d:f1:ff:d0:76:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:32:F8:3C:C7:DB:1E:2A:20:09:DD:C0:4A:E9:05:6A:E7:95:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PV8y-DzH2x4qIAndwErpBWrnlfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:a3:aa:52:de:e6:ed:71:a9:da:22:53:5c:a1:6c:a3:64:3f:
f2:06:37:4e:34:63:1f:d2:a3:f0:c8:4f:d4:76:36:00:23:3c:
58:56:da:e6:b5:d4:40:c6:32:0a:e2:4f:0b:78:94:bf:73:1a:
41:db:5c:d5:08:b4:77:d5:5b:4b:08:c8:1c:f5:a4:4f:a6:1a:
d4:f6:5a:e5:4c:5f:17:ff:b5:ed:74:2b:31:0d:36:21:54:0f:
55:0b:7c:3c:fe:48:9c:f4:9c:3d:75:07:ea:fb:6b:5a:b2:10:
fa:64:a3:e3:a6:b5:f2:4d:b3:c3:a9:16:08:f5:b4:21:2b:47:
62:b7:1e:7b:cc:b2:27:15:32:41:28:d4:ea:1c:cf:bf:eb:42:
60:3d:92:f1:58:73:7d:16:6a:7c:c2:d0:c1:c1:72:60:48:f0:
91:d9:23:6b:4a:e1:ab:7e:db:e8:34:c0:8a:b0:39:56:fa:57:
00:a6:17:2f:1c:92:ec:5c:de:f9:e0:eb:cd:28:7f:9d:cf:04:
ff:94:6e:59:c7:2c:b2:07:ff:c4:c9:d0:b8:fb:61:37:12:7b:
89:80:cf:7f:4a:d2:20:bc:e4:9f:57:d7:d0:e2:9f:2e:8b:cb:
41:00:0e:48:58:67:df:21:41:6e:da:4e:9a:e8:24:21:ea:45:
be:26:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:10:15 2025 by rpki-client