Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/igTCFm-esCoDmECjAhAaTlQL_Q8.roa
File: igTCFm-esCoDmECjAhAaTlQL_Q8.roa (raw, json)
Hash identifier: HVHTduuHUr/I03xcj5GEHbIJ6mDuB07iysDkADhirM8=
Subject key identifier: 8A:04:C2:16:6F:9E:B0:2A:03:98:40:A3:02:10:1A:4E:54:0B:FD:0F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF453DC3C3B4EB5C4A61B2E41CFF1A3A9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/igTCFm-esCoDmECjAhAaTlQL_Q8.roa
Signing time: Fri 07 Jun 2024 20:11:27 +0000
ROA not before: Fri 07 Jun 2024 20:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:53:dc:3c:3b:4e:b5:c4:a6:1b:2e:41:cf:f1:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 7 20:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a04c2166f9eb02a039840a302101a4e540bfd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:ae:29:92:3b:7d:20:76:a3:08:42:18:a1:
21:a7:56:2a:2a:73:c1:10:6e:ed:eb:6c:f3:37:de:
6e:e5:7e:e8:3c:8e:c9:53:d5:c1:62:2f:c0:ef:47:
31:a1:e8:de:46:63:d7:29:bd:6f:79:0b:3b:72:b9:
89:f2:6d:84:e8:0c:6c:b4:27:d5:28:4b:ad:3d:e7:
70:bd:d0:7e:24:4a:2c:db:f6:c9:16:06:d5:bd:58:
12:ba:f8:28:7a:6f:ee:9b:24:95:54:18:8d:34:1a:
4b:df:7a:18:6b:23:25:fb:26:21:41:3f:df:45:6e:
3c:ba:b9:21:ee:36:29:be:1c:1c:f0:21:63:66:9f:
50:7b:8e:6a:bb:54:fb:de:88:cb:2d:bb:8f:30:5c:
6f:e6:55:df:a7:5d:27:b2:78:54:f1:6f:63:7b:67:
8e:c6:95:51:48:9f:55:65:71:eb:56:5f:51:ba:a4:
2f:62:92:8a:8a:da:85:d4:54:a0:8d:01:cf:f9:f8:
3e:aa:a8:f8:5b:29:93:5c:78:66:6e:48:4a:b8:bd:
23:10:76:b8:38:39:89:ea:bf:8a:45:83:75:78:df:
da:f0:84:c5:03:c8:37:3c:2b:3f:b3:de:97:e8:31:
4c:e0:f6:1b:4f:0b:1e:b0:ef:f6:c7:bb:a7:b8:83:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:04:C2:16:6F:9E:B0:2A:03:98:40:A3:02:10:1A:4E:54:0B:FD:0F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/igTCFm-esCoDmECjAhAaTlQL_Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:06:08:06:a1:35:5d:6a:7f:e2:1b:85:d8:9e:4b:9c:67:59:
13:b9:12:e2:60:d1:c6:63:af:e1:1f:6e:9f:f5:19:c3:37:7b:
44:16:ac:bb:f4:7b:be:28:b9:d7:d6:03:a8:0a:20:9b:92:7d:
a4:b4:4a:06:fb:99:71:ea:f8:02:04:af:92:ef:63:c8:d7:fe:
27:59:a5:62:dc:20:97:4f:78:b7:19:8d:3b:05:c3:12:05:01:
92:30:92:18:4e:ba:60:8b:b4:ab:c0:16:10:9f:ca:65:f2:d7:
8c:a0:b2:19:17:e0:c5:7f:cd:86:aa:7e:de:75:ec:c0:b4:54:
18:da:b3:79:d6:c1:2a:9d:43:a7:81:ec:b5:ba:0d:c9:b6:c9:
a8:7b:fe:e5:49:4c:29:8a:cc:71:e6:8d:e8:d5:c0:92:24:87:
b3:41:24:90:e9:74:f3:9d:99:38:2e:7f:e0:e8:ab:91:52:36:
16:27:34:68:b0:db:43:f6:98:7d:71:4b:17:c1:35:c5:b8:f6:
79:18:3d:e0:e3:e3:f2:91:31:0d:27:8a:02:0c:9e:57:32:d0:
ea:18:8a:79:8c:77:94:34:d8:69:ce:96:ca:ae:da:5d:ea:2b:
7b:ee:bd:1f:fe:21:8a:62:c5:08:90:3d:34:5a:72:95:fc:4f:
4b:d3:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:54 2025 by rpki-client