Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gm_T9YtvVCc0bKOjWO2Y_scoOhU.roa
File: gm_T9YtvVCc0bKOjWO2Y_scoOhU.roa (raw, json)
Hash identifier: oFV757IvYOB8Q4y5jsbnRefT7yGjMdPzUCpkgUGQ4DQ=
Subject key identifier: 82:6F:D3:F5:8B:6F:54:27:34:6C:A3:A3:58:ED:98:FE:C7:28:3A:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E00E5F728784CA88E2FF5785206D8CBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gm_T9YtvVCc0bKOjWO2Y_scoOhU.roa
Signing time: Mon 05 Dec 2022 02:12:29 +0000
ROA not before: Mon 05 Dec 2022 02:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e0:0e:5f:72:87:84:ca:88:e2:ff:57:85:20:6d:8c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 02:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=826fd3f58b6f5427346ca3a358ed98fec7283a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:01:aa:51:4f:4a:a5:97:10:00:09:01:07:
3d:15:3b:53:60:ff:f2:62:c2:e0:1b:0c:48:c0:d7:
97:9e:01:70:48:9a:8a:85:22:b5:bb:69:6e:d4:c2:
28:94:e6:f5:8e:f1:ef:4b:29:da:16:e2:87:a5:f6:
9d:94:c5:bc:10:44:53:13:c9:47:b4:b7:55:40:6b:
f9:47:47:bc:74:e6:2d:d1:d2:46:d2:2d:c0:19:4a:
02:cb:4f:07:fc:b2:0f:8b:c6:f2:d5:53:14:25:9f:
14:e3:f7:9c:4d:f1:8d:2e:c8:de:32:d3:80:73:fe:
27:57:d1:a6:8e:4a:c1:58:63:84:d9:ce:17:8a:87:
de:1d:31:9f:cc:ea:25:d5:18:9b:12:ae:b9:16:58:
87:34:21:ab:fc:68:6b:84:4b:7f:f1:29:7b:be:bf:
4e:1e:02:4f:87:61:b0:8f:40:04:a8:e5:1a:49:5b:
72:72:4f:3b:11:34:66:d7:ca:85:7a:63:5a:4b:e4:
ae:79:4a:3f:23:d0:05:46:d8:5c:53:71:72:a4:e1:
a9:dd:b7:0e:28:72:8a:de:75:e5:b1:da:b3:3c:1b:
e0:cb:53:74:7a:7d:27:7b:1c:9f:94:f3:4a:c8:87:
da:f4:47:93:b3:77:f7:9b:f1:66:2d:d0:df:87:af:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:D3:F5:8B:6F:54:27:34:6C:A3:A3:58:ED:98:FE:C7:28:3A:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gm_T9YtvVCc0bKOjWO2Y_scoOhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:97:45:fa:1e:b2:b3:b5:95:08:35:5c:22:5d:aa:47:64:31:
aa:00:09:93:a9:90:a4:f9:07:16:d0:8e:8f:66:8b:f8:87:af:
c5:07:57:99:5b:96:9b:fb:7a:ce:26:31:54:68:5a:04:0d:1c:
90:7a:05:a5:ce:67:eb:b5:e5:dd:80:42:4f:78:b6:33:9b:50:
4e:d8:60:83:7b:a4:fe:b1:ed:33:8d:68:31:01:a5:85:67:68:
3d:c9:27:0c:d2:87:f2:ba:d2:0b:ee:5a:b6:76:e9:19:e8:5d:
30:97:e9:5b:b1:24:bf:a8:d3:36:1f:bd:ba:a4:a6:80:85:a9:
d9:cf:81:05:75:d1:a5:33:3d:f9:46:bb:8d:09:f3:45:ed:38:
0c:97:61:a1:ea:2e:bd:12:1f:46:b7:23:90:48:03:3c:ef:ee:
39:02:0f:6a:2f:bd:2f:fa:08:7e:d5:e7:68:a7:9a:91:cd:68:
90:d4:76:2e:2c:26:6b:53:6f:0c:86:cf:b3:f7:c2:3c:a1:84:
86:88:5f:e4:b1:04:51:5e:c1:47:25:a2:ae:89:54:ff:32:2b:
11:38:59:0a:3a:71:75:4d:95:ae:41:50:8c:3e:a9:c8:1c:5b:
bc:7e:3f:bd:9f:8d:f0:24:f2:86:d6:e1:9a:f4:73:4e:70:fe:
82:8a:af:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:46 2025 by rpki-client