Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GamnJIqpQBhUCRlaaBPY33Z80-E.roa
File: GamnJIqpQBhUCRlaaBPY33Z80-E.roa (raw, json)
Hash identifier: NSyyDmCdnHWJjexLpjxxBQHCIS+a34tyyxFf9kth910=
Subject key identifier: 19:A9:A7:24:8A:A9:40:18:54:09:19:5A:68:13:D8:DF:76:7C:D3:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851C569771E6812AB9D1ED019875F2B75F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GamnJIqpQBhUCRlaaBPY33Z80-E.roa
Signing time: Fri 16 Dec 2022 19:08:34 +0000
ROA not before: Fri 16 Dec 2022 19:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:56:97:71:e6:81:2a:b9:d1:ed:01:98:75:f2:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 19:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a9a7248aa940185409195a6813d8df767cd3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:ad:b3:88:08:91:8b:76:5a:40:4a:b7:57:
9c:48:ca:fa:72:e7:49:8b:62:6e:ea:38:86:fe:0a:
e8:1e:49:f9:96:92:1a:c8:b5:5f:57:38:5b:06:af:
84:62:62:49:3c:6c:30:f1:27:34:23:cd:b0:f1:8e:
8d:3d:1c:6e:96:04:7d:cc:35:8e:d7:c8:7c:2d:f4:
25:52:b2:e2:49:7d:76:97:51:0d:a7:e4:43:3d:50:
9e:bf:9c:5e:36:15:20:9a:9c:a3:83:70:f3:25:e6:
42:e1:f6:d3:69:30:dd:3c:4f:56:01:31:11:f7:5a:
4a:4e:f1:69:5b:10:d5:0f:06:9f:2d:66:3f:b0:82:
76:7c:34:7e:eb:a0:05:98:33:2f:0c:e7:dc:63:0e:
bd:7a:02:d3:18:49:f6:b7:86:9c:83:4d:ae:0e:e3:
fe:f8:17:05:4b:30:3e:55:56:ba:1a:1c:65:fe:31:
86:cb:c6:b6:7a:2e:19:e4:91:10:50:87:e7:e1:ce:
26:07:70:e8:34:45:d3:d1:43:c8:69:61:f4:d6:a9:
33:07:43:91:7c:60:be:33:3d:e2:98:b8:b8:af:9d:
f3:62:06:c4:56:99:7f:54:fd:a0:3d:7a:ea:16:47:
e8:b9:cb:68:21:34:22:16:46:32:57:bb:15:ff:2a:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:A7:24:8A:A9:40:18:54:09:19:5A:68:13:D8:DF:76:7C:D3:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GamnJIqpQBhUCRlaaBPY33Z80-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:ed:2b:23:57:a9:06:25:79:a2:fc:0e:85:1d:e4:a0:3e:6e:
1a:6e:41:43:a0:06:d2:0c:ef:c1:ed:eb:c5:a3:1e:92:e6:f5:
3e:7f:ed:40:f9:44:de:03:6a:0c:19:6e:51:f8:95:4e:6a:00:
7e:d5:42:34:51:cf:cb:a9:59:6b:c7:f4:7e:3d:d8:87:65:5f:
93:30:8c:4f:d6:39:f8:2f:ff:a0:17:fd:a1:11:e0:80:da:04:
1d:69:cc:50:86:b1:d3:5b:d4:a8:32:b9:ca:8e:49:15:fb:1c:
0a:b8:99:e1:88:c1:d2:18:ea:af:7b:ff:a8:bd:f8:f3:e8:92:
1d:c7:72:f6:bd:30:3d:5b:bc:c3:f9:5b:5d:22:ff:29:fd:ea:
70:e0:b3:30:23:d0:fd:25:33:0a:31:7a:36:88:25:77:1c:2b:
be:68:e3:ac:a7:67:8a:c7:bb:64:a0:71:a0:15:c9:d0:8f:0e:
a5:59:a9:d8:96:9f:6f:6f:f7:6c:15:6a:3c:13:f0:81:df:af:
d2:57:6c:3c:49:7b:a1:9b:02:3b:83:e2:dd:a4:8e:d6:a3:ab:
03:d0:34:bb:5f:dd:3c:94:70:be:fa:91:6d:cc:24:3d:4a:80:
3c:9b:e0:3e:e5:60:99:58:ab:db:19:65:de:a5:22:f8:16:0c:
ab:93:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:12:13 2025 by rpki-client