Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IQgQcHSoYIywXQgGc89YrRTVViE.roa
File: IQgQcHSoYIywXQgGc89YrRTVViE.roa (raw, json)
Hash identifier: hjIpWN+tB+/Gxt1ZT6+HollIBqvdAvL1U8FJOiuZn5Q=
Subject key identifier: 21:08:10:70:74:A8:60:8C:B0:5D:08:06:73:CF:58:AD:14:D5:56:21
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AA4AE87E9532517E789B3EB3246544FA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IQgQcHSoYIywXQgGc89YrRTVViE.roa
Signing time: Sat 13 Jul 2024 04:12:34 +0000
ROA not before: Sat 13 Jul 2024 04:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:aa:4a:e8:7e:95:32:51:7e:78:9b:3e:b3:24:65:44:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 04:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2108107074a8608cb05d080673cf58ad14d55621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:56:45:0b:a7:8d:d9:93:df:46:d7:54:87:
45:07:0e:95:c9:58:0d:07:ef:03:d0:9a:b8:84:a7:
3d:79:67:6e:67:15:9d:61:b1:2c:74:52:9f:78:a9:
2a:a1:4c:fd:b5:ce:54:0d:e4:02:ea:63:58:4e:c7:
a1:c7:33:ac:94:c2:cc:a6:33:1e:c3:b4:d7:a6:dc:
2c:90:64:fd:f3:74:0f:77:ff:e7:32:86:50:7a:36:
e6:ad:cd:94:17:9f:72:59:22:68:43:7c:83:41:03:
31:e0:0b:1a:08:1d:f3:56:89:8c:fc:7c:25:6b:c8:
e0:50:72:4a:04:56:9a:66:cc:e3:48:18:20:89:61:
90:21:ae:80:48:a6:2d:a0:b6:6b:f5:63:87:d4:45:
33:b8:a3:62:fa:3b:36:23:53:97:d9:9f:1d:c9:c5:
7b:b6:4c:74:cc:56:8e:76:b2:e6:03:cd:21:77:3b:
3f:c2:ad:f2:58:56:1c:2c:c4:5b:ef:87:54:9e:0e:
1a:2a:2c:fd:3c:f4:f3:2a:e7:b8:a7:c7:01:71:bc:
fe:86:c4:dc:72:08:8b:9a:ef:81:07:5f:ff:10:81:
45:25:b9:a2:86:4a:71:22:63:69:b2:bc:67:66:f7:
14:e5:da:b8:c5:99:d4:e5:10:32:7d:6b:55:f8:b4:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:10:70:74:A8:60:8C:B0:5D:08:06:73:CF:58:AD:14:D5:56:21
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IQgQcHSoYIywXQgGc89YrRTVViE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:52:95:67:4b:f0:f2:ef:ec:6e:8b:ca:4d:ca:fe:1f:c1:93:
84:21:00:3c:e8:69:ba:dc:41:f8:d2:14:15:97:54:42:af:d7:
3a:1e:a1:dd:2b:a7:f5:43:6c:fd:bf:36:42:f2:7f:fa:21:69:
32:36:ec:de:f7:21:33:89:20:9f:48:4d:43:b7:ed:97:5d:84:
33:8e:a1:d0:91:85:25:51:d6:af:97:42:2f:9f:22:cf:84:9d:
5e:bf:8f:38:c0:55:5e:59:b0:73:78:22:02:f7:b7:d3:5b:3d:
24:30:84:5c:52:fd:cc:fb:13:1f:2f:c1:a0:19:14:2a:3d:30:
86:4b:54:4c:f5:97:4b:6b:a4:94:8a:ca:54:8d:74:69:ed:c1:
3a:9b:10:8f:af:e7:5e:7c:53:80:1c:94:e6:ff:f6:ab:ae:73:
b7:92:a2:20:ee:5b:85:19:5c:fb:cb:6e:fa:3c:05:da:ba:a1:
1a:0b:24:e0:ec:47:14:4a:21:42:aa:f3:85:89:08:ad:02:d9:
a1:21:e0:22:df:f4:01:a6:1e:dc:b7:0f:3b:e1:54:16:48:28:
d0:79:85:11:27:01:0d:d2:d6:10:b2:cd:91:18:18:ea:86:0d:
45:91:38:03:cd:fa:95:ea:c4:db:5c:4f:d9:ba:b3:51:90:b1:
e8:cd:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:01 2025 by rpki-client