Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IGABp1-ToAW9mwD-r6iULhL_GIM.roa
File: IGABp1-ToAW9mwD-r6iULhL_GIM.roa (raw, json)
Hash identifier: OhChkgqt9QFAf04jm6W3jdbP0D8aOWOeYnX7tyXiTOs=
Subject key identifier: 20:60:01:A7:5F:93:A0:05:BD:9B:00:FE:AF:A8:94:2E:12:FF:18:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859337BDFD020733E6C3778A226A1AFC8E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IGABp1-ToAW9mwD-r6iULhL_GIM.roa
Signing time: Sun 08 Jan 2023 21:09:41 +0000
ROA not before: Sun 08 Jan 2023 21:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:93:37:bd:fd:02:07:33:e6:c3:77:8a:22:6a:1a:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 21:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=206001a75f93a005bd9b00feafa8942e12ff1883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:81:94:20:1d:88:66:79:f3:68:ca:dd:af:b9:
07:0b:99:7e:96:a1:b9:7b:15:73:98:c9:f6:11:d6:
a9:37:f0:db:10:e9:94:ec:4f:5b:e2:93:b5:7f:67:
11:ee:13:5f:73:b9:20:39:e9:d3:19:84:84:79:36:
81:2e:15:74:04:09:f1:70:fe:dd:fa:e6:f0:c5:8b:
a8:a8:a1:f3:70:8e:0e:fb:7c:b4:9c:8c:d0:fe:3f:
81:4a:c9:52:e0:f2:8e:0e:f5:b5:67:6e:03:2c:19:
85:fd:1a:bc:12:d7:7d:1d:da:22:8b:e2:8c:5e:23:
64:4b:f2:98:a6:84:40:a1:8c:17:9a:c6:55:03:09:
b3:e7:39:7f:cb:e2:2f:3d:66:9c:be:b0:21:a7:a5:
65:4d:09:0b:1c:d5:ec:c2:f0:31:24:2a:ed:03:c7:
08:37:c6:80:96:5e:c7:5d:64:3f:b2:28:9c:b6:56:
ab:0b:54:9c:d7:64:b8:6b:8b:9a:6b:fa:72:17:26:
10:58:a4:dc:75:15:c7:bd:05:86:1c:93:03:16:0c:
22:6b:4e:3d:70:93:d0:55:af:c0:36:92:56:d8:d5:
f5:dc:24:35:6c:26:1c:1b:9a:75:93:7a:c7:98:c1:
0e:4c:b6:df:62:f5:76:ff:4f:d6:7f:6e:44:73:cf:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:01:A7:5F:93:A0:05:BD:9B:00:FE:AF:A8:94:2E:12:FF:18:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IGABp1-ToAW9mwD-r6iULhL_GIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:4d:35:7b:da:c2:47:0a:43:aa:3d:84:2b:db:39:d5:a5:75:
36:3c:3b:6d:55:5b:a8:ff:da:80:4e:2b:58:6f:e0:f5:70:aa:
f2:4c:c9:19:0f:ea:67:ac:06:a9:68:d9:ce:db:0d:70:47:81:
06:a9:84:92:d6:ce:6b:6e:99:3e:fb:6a:f5:d4:f4:1d:38:7e:
6c:ae:58:1f:f3:44:0b:3b:e9:7c:ef:d2:14:ca:8f:bc:92:fe:
23:34:70:92:11:8a:0d:a1:da:1e:20:b5:d2:d2:79:e8:7b:71:
2c:d6:42:15:74:9c:f1:74:2c:2f:e0:24:8a:07:ed:df:0d:af:
d8:96:e0:c7:16:51:3d:6e:d9:7a:a9:c4:f0:66:02:4e:5a:23:
5c:4c:94:4c:76:33:ce:7e:12:dd:49:7c:94:3c:45:40:1a:4c:
16:d4:14:d4:4c:61:a6:36:99:bf:e7:d0:e3:af:ff:31:10:7e:
d8:d8:1f:80:a6:bb:d4:af:0d:76:49:35:b3:c5:f7:ab:9d:0c:
1f:45:fc:20:64:ac:3f:61:a9:8f:95:4d:a8:64:5a:a4:be:8c:
d5:ba:23:97:db:05:1c:c8:78:cc:6e:21:4c:fe:08:41:a3:c7:
1b:12:14:ea:d8:34:5f:04:ae:6f:f9:db:24:e8:9d:a3:aa:46:
0d:c2:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:44 2025 by rpki-client