Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcgpdX17B4KWG54aqyri9lG-Ly0.roa
File: GcgpdX17B4KWG54aqyri9lG-Ly0.roa (raw, json)
Hash identifier: G9FmlaSswC8/p1XYIRhvc/cX6gSzzQm//eCrUSRSFnQ=
Subject key identifier: 19:C8:29:75:7D:7B:07:82:96:1B:9E:1A:AB:2A:E2:F6:51:BE:2F:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860182B20A1D0068354B34873F5CBF30DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcgpdX17B4KWG54aqyri9lG-Ly0.roa
Signing time: Mon 30 Jan 2023 07:09:47 +0000
ROA not before: Mon 30 Jan 2023 07:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:82:b2:0a:1d:00:68:35:4b:34:87:3f:5c:bf:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 07:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19c829757d7b0782961b9e1aab2ae2f651be2f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:c4:29:95:b2:30:a2:6a:8d:97:78:76:de:
bf:0c:e2:e4:21:75:b6:5e:71:91:62:17:8a:fd:7e:
98:6d:fe:0d:d5:bf:5c:a5:4c:b3:07:f6:37:e3:cf:
e4:58:5d:48:a0:9b:80:fd:4f:ac:4e:eb:de:6a:10:
47:46:84:1a:18:2f:00:90:79:7c:4f:7c:6d:a0:7d:
d9:b6:3a:a1:85:ce:70:eb:58:ad:ac:fd:a3:87:e2:
df:67:6a:52:c0:33:9c:85:d1:1d:68:00:ab:ae:38:
45:15:ef:5f:7e:01:a3:c5:b7:73:68:d3:15:c3:a1:
a8:ed:9c:65:b8:28:a4:f6:76:68:5e:b8:ae:55:f2:
29:85:85:65:d4:c1:65:f6:50:4c:4e:10:69:d8:5f:
4a:1a:83:28:a0:4a:fb:29:05:47:f8:f5:62:0c:e0:
bb:ea:2e:ff:f3:c5:c3:6d:9a:aa:18:62:92:21:55:
bf:be:e1:2f:12:d6:68:53:bf:7f:32:8b:7c:10:9b:
70:1d:5f:3e:89:44:d2:af:3f:90:c5:40:5a:b1:31:
26:90:e6:64:e3:c8:f8:a9:30:93:77:73:ec:f6:8a:
11:98:ea:30:69:df:ae:43:c2:51:c2:52:e9:c4:9d:
46:61:c7:b9:84:57:61:39:2f:2e:95:54:c7:39:96:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C8:29:75:7D:7B:07:82:96:1B:9E:1A:AB:2A:E2:F6:51:BE:2F:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcgpdX17B4KWG54aqyri9lG-Ly0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:e5:73:9e:c9:c7:fa:cb:9a:78:14:57:87:3c:bc:fb:5a:b0:
f8:e8:93:38:f7:07:fe:9c:98:73:8f:34:65:4d:8f:cc:3c:c8:
0e:6c:3a:71:b9:cc:21:ff:98:e2:c5:42:f5:c6:08:28:a2:b0:
93:67:3e:36:11:73:8b:99:02:5f:36:46:63:1f:e0:7d:27:f5:
33:ca:c6:66:44:6f:06:b4:9b:74:7e:7a:71:8e:03:fa:95:dd:
7c:34:a7:a8:d5:ad:74:0d:e2:bf:72:b1:00:76:68:02:e6:08:
06:1b:0a:a3:43:9c:1c:89:6d:a6:82:54:30:43:4f:5a:40:84:
2a:45:d6:e1:17:4b:41:61:06:95:d1:61:d9:cb:cf:df:bd:ba:
23:04:63:be:12:09:0f:60:ce:41:06:a2:bc:96:e0:17:12:72:
58:5b:dd:72:89:b8:70:15:ab:2f:d4:a6:b2:c3:ec:5e:dd:fe:
d7:11:84:69:4e:22:43:cf:ad:44:86:f4:e3:79:6a:2e:57:92:
c8:a3:fb:d8:e4:7c:d6:6f:fb:23:79:46:5d:f5:fd:a3:7f:16:
c2:8c:6a:80:e9:b4:cc:a4:7c:ba:67:ca:82:a9:a0:97:3b:60:
f5:9e:06:12:87:96:26:44:82:5e:03:aa:ee:2a:ea:da:45:cc:
c2:c0:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:59:12 2025 by rpki-client