Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GdpjAGlI5SG8NUehOfJK7BXNazM.roa
File: GdpjAGlI5SG8NUehOfJK7BXNazM.roa (raw, json)
Hash identifier: hYc+XrGx3kBcEcSsiHzk9xAXBKjnPP69i2/VHAz9L7g=
Subject key identifier: 19:DA:63:00:69:48:E5:21:BC:35:47:A1:39:F2:4A:EC:15:CD:6B:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850299EFB10F7B723C9F3F0AFE19C1AC7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GdpjAGlI5SG8NUehOfJK7BXNazM.roa
Signing time: Sun 11 Dec 2022 19:12:00 +0000
ROA not before: Sun 11 Dec 2022 19:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:02:99:ef:b1:0f:7b:72:3c:9f:3f:0a:fe:19:c1:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 11 19:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19da63006948e521bc3547a139f24aec15cd6b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:59:81:5b:c9:c5:c1:cc:6a:ea:69:dd:12:
f0:e8:90:52:cd:dd:3b:6d:71:e4:67:04:c5:4a:38:
66:d7:bc:51:88:d9:7d:d3:cc:22:b6:e8:70:af:93:
cc:de:33:85:70:2c:ed:90:62:90:bd:90:a3:86:9d:
00:d1:48:3c:43:b6:86:0e:a2:48:8b:70:0d:3f:aa:
9c:84:50:e5:e2:d6:63:2a:9e:ea:33:75:97:7b:a2:
6c:cb:9c:25:06:06:9e:27:6f:95:d0:93:d9:ee:2b:
ee:9f:a3:eb:9b:aa:29:83:a2:5e:5a:7b:cd:cb:dd:
cb:cb:8f:40:52:50:b9:a3:c0:7f:6d:b4:65:ac:41:
61:cd:c0:29:eb:14:a9:45:08:ad:43:f9:11:44:aa:
e6:2a:23:62:fa:0e:14:2e:92:3a:47:bb:a0:cc:47:
0b:d3:87:f8:48:b7:bc:6c:2a:a0:e4:d9:b5:14:4f:
2c:e1:f7:10:56:e8:19:97:c3:d9:65:e8:dc:45:d3:
c3:13:78:c7:14:de:43:0b:12:42:b1:42:ed:09:ef:
32:dd:bc:06:b1:48:9b:17:94:d7:06:ec:1b:86:f3:
dc:43:de:53:eb:f4:b4:1e:97:94:d1:0e:05:4d:3e:
b1:e2:3a:56:d7:05:1d:31:bc:a1:09:0c:bd:b6:08:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:63:00:69:48:E5:21:BC:35:47:A1:39:F2:4A:EC:15:CD:6B:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GdpjAGlI5SG8NUehOfJK7BXNazM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:58:ca:b5:c5:96:cd:a8:ef:45:c2:5d:25:d3:aa:b0:a0:d2:
03:60:c7:6d:2f:97:86:10:76:c6:74:78:78:88:72:e7:ec:6d:
41:85:df:50:54:6f:f6:07:05:1c:bb:2f:a8:97:59:53:04:d5:
c2:68:ca:74:0c:43:f0:dd:a3:34:d5:51:d6:da:00:65:a1:cf:
90:b6:6f:75:08:7c:31:ab:57:3c:51:16:ba:5c:9c:e7:b0:0b:
a4:d8:28:02:15:cb:ad:5c:ed:95:66:0e:6d:39:2b:d8:20:5f:
ab:e1:34:c9:21:18:ae:3a:0d:49:31:a9:77:da:ab:e7:03:79:
e4:a2:c9:ab:ed:3d:56:ab:00:f3:4f:a4:b8:c7:6f:c6:ca:e2:
32:21:94:c2:d8:ce:1a:9b:70:e0:2e:6b:7b:d7:74:02:cf:21:
56:88:d0:38:06:b2:91:76:39:1d:7c:0e:0a:23:98:75:6d:e1:
76:04:8c:13:f2:aa:11:64:98:78:80:72:e5:28:de:50:69:21:
81:66:20:ef:a9:b6:d8:f3:17:60:bb:53:90:84:25:25:56:ef:
80:25:bd:57:99:c5:e3:a3:4a:5c:c0:c4:bb:d4:c1:bd:84:3b:
dc:6d:cf:4a:51:cd:dd:5c:a0:a3:b6:e0:81:10:9c:98:41:7a:
a0:c7:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:37 2025 by rpki-client