Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GaiGpzPnwi9adFVYwUiOW4AA7GQ.roa
File: GaiGpzPnwi9adFVYwUiOW4AA7GQ.roa (raw, json)
Hash identifier: i+67GGgbsUeYk5xUYwdX8fW/Ehab96pMH0Q++++ZyFQ=
Subject key identifier: 19:A8:86:A7:33:E7:C2:2F:5A:74:55:58:C1:48:8E:5B:80:00:EC:64
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C154C7A073C9D07F9642D71E02D6D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GaiGpzPnwi9adFVYwUiOW4AA7GQ.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24858
IP address blocks: 193.231.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:15:4c:7a:07:3c:9d:07:f9:64:2d:71:e0:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19a886a733e7c22f5a745558c1488e5b8000ec64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:de:f3:08:1a:ee:87:fe:d7:e1:c5:00:2f:
b0:68:f6:d1:b4:99:20:9b:5b:3d:05:a7:bd:cf:38:
ca:72:78:b6:e0:b8:2f:6e:fb:a1:ec:12:98:da:f9:
8c:5d:8c:9c:d8:32:58:99:10:d5:09:76:cc:2e:d6:
53:bb:2c:00:9f:f0:10:78:d8:ad:47:2e:0d:fd:52:
12:27:82:42:33:b9:0d:96:b2:78:8b:06:44:b4:8b:
e2:89:88:ad:71:5c:c2:08:f5:78:04:6f:bf:f8:d6:
b4:1d:82:12:55:2a:af:f8:f7:99:43:0b:d4:61:1d:
0f:58:1e:6c:08:dd:cb:a7:06:e9:9b:e7:cf:5c:8d:
1f:d0:6a:c5:9e:19:8f:8b:9a:a5:48:77:16:5c:8a:
08:b0:5a:07:e9:7b:b2:da:dc:43:d8:8f:ce:2d:10:
42:94:b3:3d:9b:da:f2:b1:71:4c:40:f1:40:79:c1:
5b:71:ca:82:97:f5:66:df:ec:a9:6f:79:fb:bb:9f:
26:90:78:02:bf:9e:ab:38:12:e1:4d:0f:42:d7:7a:
e8:1d:9c:59:cc:a0:7e:71:60:cc:f2:7e:fb:64:4d:
db:e4:82:32:8f:ba:c5:1a:cb:df:61:62:49:75:54:
d5:89:56:72:db:31:f9:e4:88:2c:8e:71:14:ef:d9:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:86:A7:33:E7:C2:2F:5A:74:55:58:C1:48:8E:5B:80:00:EC:64
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GaiGpzPnwi9adFVYwUiOW4AA7GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.93.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1d:a1:33:f1:2c:18:85:94:b3:7a:79:a4:1d:cf:c4:0c:b2:
83:35:0e:8b:c6:46:84:de:87:7a:bd:91:50:2a:f5:56:30:2b:
7a:3f:5f:91:2f:de:38:bc:03:17:7a:e7:3d:72:94:74:58:7c:
78:18:2a:35:8d:77:24:60:3c:9b:6f:4b:eb:03:dc:c7:06:59:
15:7f:92:7d:f7:79:89:57:03:da:71:20:61:e7:2c:1e:62:a6:
6f:56:d5:18:cf:7b:78:e0:f7:14:eb:5d:f2:b4:63:e0:cc:9a:
15:eb:37:73:97:8c:c9:8b:ee:33:2c:96:38:62:06:97:f8:06:
d2:90:3e:f1:22:7d:8a:cb:d0:7f:e9:fc:2f:0b:59:6a:bf:6d:
94:57:4d:3d:63:ae:b1:dc:cc:1f:65:dc:99:23:e6:30:a0:61:
c6:27:6e:b7:8d:c7:db:28:01:ad:6b:dc:89:ff:87:1a:9a:33:
16:2f:a3:c6:5c:27:5d:a1:98:4d:da:79:b4:79:04:0a:69:51:
c6:b0:84:9d:b8:59:c7:75:f5:ce:25:64:40:96:ca:7c:a5:e6:
98:4a:fe:5f:d1:8d:45:8a:39:3f:97:d7:61:35:d2:fb:e4:65:
41:64:ee:bd:91:4f:25:e3:b5:9d:7d:f9:9e:96:73:3e:e3:a1:
c6:26:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:04:03 2025 by rpki-client