Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/igpigssU7T4uDX2VmcPQBlcFySg.roa
File: igpigssU7T4uDX2VmcPQBlcFySg.roa (raw, json)
Hash identifier: VDSZaAw08qFlliADC31aCVCTWBeMWoL2LZ6FBcWdDt4=
Subject key identifier: 8A:0A:62:82:CB:14:ED:3E:2E:0D:7D:95:99:C3:D0:06:57:05:C9:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B9028D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/igpigssU7T4uDX2VmcPQBlcFySg.roa
Signing time: Fri 18 Feb 2022 04:09:23 +0000
ROA not before: Fri 18 Feb 2022 04:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804609744 (0x6b9028d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 04:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a0a6282cb14ed3e2e0d7d9599c3d0065705c928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:5b:66:9d:7c:24:47:8b:cf:d5:b2:ef:05:
8f:16:f1:93:58:c7:09:92:3a:05:84:f8:f8:a1:e6:
63:2b:5b:56:9c:e3:f1:92:7f:a3:db:9c:c5:a5:73:
93:25:05:8f:c2:07:0f:59:72:f5:0f:c9:a8:7c:d3:
37:29:b6:43:a2:8f:8f:10:f9:e2:27:21:ad:fa:71:
05:06:e6:d5:6f:79:84:a1:e3:72:a8:4b:a9:f5:3e:
84:c3:69:cc:fe:88:27:4f:91:65:b2:d4:5c:28:6e:
08:75:10:37:ed:39:59:a2:e7:3a:72:69:dd:7d:4a:
ee:64:c9:36:34:1c:da:d0:bb:51:ac:9b:21:dd:94:
e6:d8:5e:e6:41:03:34:48:60:2b:f9:71:39:b8:4e:
5d:6f:51:ad:a5:da:d5:ce:91:67:3a:43:5f:d1:63:
4d:c3:a8:ef:3c:08:f1:43:c6:04:f6:54:ac:d3:0d:
26:cf:bb:4e:47:a6:23:00:21:a0:60:7a:6d:01:5a:
ce:a4:b4:fd:6f:d3:df:8d:a3:b3:f0:32:23:a1:21:
77:57:44:4f:8a:28:ba:5a:86:76:38:a8:20:78:e1:
63:82:81:52:cb:45:91:01:2e:3a:ba:93:35:e8:71:
f1:c9:6e:e8:1b:7c:c4:ce:af:14:91:aa:ae:bb:a3:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:62:82:CB:14:ED:3E:2E:0D:7D:95:99:C3:D0:06:57:05:C9:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/igpigssU7T4uDX2VmcPQBlcFySg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:13:9a:08:80:c1:c3:75:dd:70:c9:75:c8:99:e5:3c:1e:5d:
34:47:0c:ec:7b:91:3f:45:54:7d:9d:8e:fd:70:94:54:e2:b5:
4a:02:d6:64:31:1f:af:0d:a4:8e:d4:97:8d:2c:06:55:35:45:
22:c7:da:40:61:77:00:89:5c:8e:9c:ba:9d:37:f1:af:52:ea:
71:aa:6b:a4:55:07:bc:5b:a6:05:72:c6:7d:3a:b5:d3:de:83:
ce:9a:d1:ab:b6:c4:da:37:28:f3:8e:29:5e:e5:54:8c:3c:8c:
da:c3:96:63:b7:b7:17:3a:5f:0d:96:61:b5:77:c8:dc:11:96:
37:46:06:f0:cb:e4:5e:cc:4b:d4:21:e7:b0:de:60:e8:4c:bf:
29:f9:b2:21:71:56:13:09:57:f4:30:ae:51:58:f4:ba:1e:01:
05:a5:4d:a2:6e:e4:67:12:a4:1e:4e:44:5a:83:e0:91:bb:e3:
95:e3:b3:0d:bc:a6:85:24:77:c8:42:5a:40:03:a1:45:ff:e1:
44:df:3c:de:8c:2f:ea:02:f4:69:c5:af:f5:16:03:e3:91:ca:
48:bd:9f:1d:22:a3:54:15:c5:10:e8:0e:0a:55:10:66:d3:41:
fc:cc:0b:e5:b5:f1:1d:e2:b9:f3:df:9d:36:3e:7c:4f:b0:72:
73:46:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:12 2025 by rpki-client