Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/769CohBRGd2Q-4l4T486epgoRNI.roa
File: 769CohBRGd2Q-4l4T486epgoRNI.roa (raw, json)
Hash identifier: QHuYMPT+iSLx8ENFcuZ7dmd0FmXg7Uf5h2Mr+8Eqqz0=
Subject key identifier: EF:AF:42:A2:10:51:19:DD:90:FB:89:78:4F:8F:3A:7A:98:28:44:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82692E80
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/769CohBRGd2Q-4l4T486epgoRNI.roa
Signing time: Mon 09 May 2022 06:04:47 +0000
ROA not before: Mon 09 May 2022 06:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a76b:9403/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187931264 (0x82692e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 06:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efaf42a2105119dd90fb89784f8f3a7a982844d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:5b:d9:5e:5f:c7:64:3a:07:50:ad:56:1a:
3a:d3:e6:8f:7a:ab:80:2a:70:24:26:7b:0d:6a:12:
40:5d:c0:1a:fe:4b:58:b7:6f:44:05:6f:26:cd:f0:
8a:ec:a8:28:57:7d:27:1c:4a:c2:14:2b:4c:77:1d:
10:8e:ee:82:2f:59:a1:00:8c:7b:bc:bd:1c:8c:b1:
a7:c7:cc:86:35:ef:f6:fd:53:7c:97:75:72:fe:32:
11:67:15:32:1f:88:22:5f:00:6f:ab:20:af:01:f3:
68:dc:39:42:de:61:c8:4f:e5:90:40:e9:10:39:c6:
b5:5b:14:65:5b:21:83:54:36:c5:06:5e:68:3b:91:
84:e4:e7:79:9f:07:e3:7e:bd:72:60:e2:33:be:60:
92:57:35:a1:0c:fb:e8:9c:09:a3:0d:69:07:c3:04:
3c:cf:18:52:a8:15:10:47:2a:0f:ec:5a:d4:28:2b:
89:77:81:44:98:14:8b:52:10:0a:d8:65:b5:42:0d:
bf:03:00:55:f2:26:37:e7:7b:9c:09:72:ed:03:1d:
5e:db:6b:79:a8:b6:ec:85:41:c7:4d:fb:51:25:68:
11:7e:6c:f8:9c:c1:78:c6:94:2e:b8:68:2c:c4:cb:
91:9f:91:5a:ac:38:1b:9c:90:a3:07:d5:3d:cf:bc:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AF:42:A2:10:51:19:DD:90:FB:89:78:4F:8F:3A:7A:98:28:44:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/769CohBRGd2Q-4l4T486epgoRNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:31:99:4c:4c:2b:88:47:2f:3c:6a:08:77:0f:1c:fc:4f:31:
c4:ce:2e:05:db:a7:8b:bd:32:a0:82:be:a7:94:02:92:6f:66:
c8:40:46:81:ab:74:41:88:ed:88:78:cd:ff:f9:52:94:5a:02:
1a:92:df:5a:33:db:e7:7c:e7:c3:1f:ae:4e:77:13:77:f5:dc:
85:5a:bc:be:10:83:1e:a9:a9:f2:bb:a6:31:9c:93:4a:d4:c2:
27:15:f2:cf:4d:a2:18:94:d6:71:f0:c9:68:75:b0:89:f8:fe:
02:be:34:d0:ba:ea:49:35:54:a6:a4:60:8c:7b:55:f9:f1:58:
11:e5:db:6b:e6:15:e8:26:b7:13:b8:d4:96:ef:56:29:89:6b:
70:2d:87:b8:a7:57:2b:65:2b:4a:6b:a5:42:13:79:26:93:73:
77:0d:77:52:20:fb:e3:f0:f7:fb:11:12:49:7a:d1:14:cb:20:
58:06:7b:b2:dd:68:85:0d:64:06:54:d2:23:17:ef:65:c1:19:
09:db:ae:b2:27:c6:47:bb:1a:b0:75:87:32:dd:ad:56:d3:a8:
bc:cc:2f:78:ce:df:71:50:44:2b:d5:56:a8:ce:26:61:9b:31:
56:19:c4:bc:54:a1:e1:d2:d5:1b:f9:e6:3f:d8:c4:cc:4e:ed:
cb:2b:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:45:45 2025 by rpki-client