Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcQT6wLauju4eKBDmr95zzzvuDo.roa
File: GcQT6wLauju4eKBDmr95zzzvuDo.roa (raw, json)
Hash identifier: hDRI5vMj+J94Q7sPJS9bW+7gfs4gYBFWW6TCu2Mclug=
Subject key identifier: 19:C4:13:EB:02:DA:BA:3B:B8:78:A0:43:9A:BF:79:CF:3C:EF:B8:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018204592F884BFC04A6B6E3D04A820B503E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcQT6wLauju4eKBDmr95zzzvuDo.roa
Signing time: Sat 16 Jul 2022 00:12:09 +0000
ROA not before: Sat 16 Jul 2022 00:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:59:2f:88:4b:fc:04:a6:b6:e3:d0:4a:82:0b:50:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 00:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19c413eb02daba3bb878a0439abf79cf3cefb83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:20:44:72:f9:8d:79:a4:e8:c7:55:63:42:6d:
1d:48:2b:b4:55:06:bd:86:27:1b:b3:bd:d0:9b:38:
9b:8e:4a:7a:c5:d4:e9:61:e5:36:02:1f:a4:05:5f:
85:fd:74:3b:14:34:ee:aa:ca:b9:1d:19:e5:f3:9b:
86:cb:38:e3:53:88:2a:2b:45:7c:32:95:76:c9:67:
aa:ec:96:cc:5d:75:9f:6c:a0:79:18:ee:62:07:76:
cf:e7:e8:01:09:90:8d:7f:50:27:a1:19:38:a4:a0:
8b:cb:ab:26:f5:58:72:dd:37:2c:56:04:3d:98:6f:
de:5d:3f:35:30:bc:5c:d0:9b:18:e9:9c:96:36:f8:
5b:1f:68:ac:ae:db:73:3d:f0:ea:e9:22:4a:33:1e:
8b:85:3a:ed:1c:76:e3:7f:53:e7:d6:7d:58:9c:e8:
7d:de:8d:8d:99:dd:a9:25:3f:99:a7:2f:6c:6c:c1:
2a:00:b2:31:ce:05:df:2e:25:1d:7d:c0:cf:00:b5:
3c:39:16:47:6d:d9:1c:d9:22:64:b1:8f:f7:63:fe:
22:0e:cc:83:7d:eb:d0:a0:e5:99:7e:83:b6:2d:62:
58:f2:89:73:7d:01:dc:1d:3d:b8:12:59:06:c4:1d:
60:b3:64:47:53:a9:bf:ba:ad:c8:c8:44:92:23:fd:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C4:13:EB:02:DA:BA:3B:B8:78:A0:43:9A:BF:79:CF:3C:EF:B8:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcQT6wLauju4eKBDmr95zzzvuDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:31:86:90:4a:10:fe:45:d4:a2:3f:13:0f:30:3e:42:c2:0d:
a8:ec:39:12:9d:80:2d:3b:3f:d2:0a:9a:ee:22:47:7b:a1:ba:
55:d7:ae:08:f0:ba:45:d1:80:b5:20:9d:88:8f:47:04:1b:9e:
97:d3:46:05:91:17:63:2b:7a:05:90:45:e0:3e:ab:12:07:5c:
12:53:75:db:a8:fc:28:a9:c4:10:61:56:f8:6c:e7:02:f0:66:
66:f2:1b:b6:29:26:a2:75:4c:92:b1:47:7e:4d:0f:c5:0d:1c:
d0:57:df:53:d0:81:07:eb:5b:94:fe:1c:1b:c6:87:91:76:96:
6f:81:dc:50:92:42:ed:22:64:6b:c6:16:a8:88:5e:8f:8a:0e:
e7:75:2e:6a:3c:21:cf:13:9b:e6:3e:f0:62:7d:c8:cb:be:82:
22:97:64:d9:85:6d:b7:44:ec:ad:dd:29:5f:0a:59:7a:35:31:
1f:33:0e:fa:e3:6f:bb:18:fc:d4:22:50:f0:b3:f6:16:1d:b5:
d8:15:b6:57:1e:79:b5:ff:f7:b0:f9:28:ae:ba:43:14:f9:1c:
b8:fc:91:86:19:59:ba:ea:a3:08:1b:4a:71:ea:9c:70:cd:d8:
b4:01:4d:1b:9a:73:75:8b:6e:74:4a:7a:66:ad:5a:82:3a:dd:
1d:77:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:52:10 2025 by rpki-client