Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/IqYl6wBKt41VfvbUxpyAg8iB_SM.roa
File: IqYl6wBKt41VfvbUxpyAg8iB_SM.roa (raw, json)
Hash identifier: cix01hBg73eFhNc9pI6G2cvehObmGcxj/c4+5nYxql0=
Subject key identifier: 22:A6:25:EB:00:4A:B7:8D:55:7E:F6:D4:C6:9C:80:83:C8:81:FD:23
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019421442A12573B9E649BA127907C061ADE
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/IqYl6wBKt41VfvbUxpyAg8iB_SM.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 188.95.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2a:12:57:3b:9e:64:9b:a1:27:90:7c:06:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22a625eb004ab78d557ef6d4c69c8083c881fd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:e1:b9:6c:1e:b4:c5:39:63:3e:bf:84:f0:
84:3e:03:22:5c:d6:ec:3f:f9:0b:ee:b6:78:ca:7e:
a1:5f:81:e5:c4:9c:e4:3e:db:1c:1f:9a:62:89:1a:
25:98:29:ed:be:25:a7:a8:a5:41:dc:b7:dd:d2:9b:
75:8c:c7:6f:c3:73:62:5d:7d:91:e4:a9:c7:fc:ce:
f8:dc:d3:ca:6e:4b:d7:ec:83:4a:9f:dd:28:b6:a8:
ed:da:c3:67:ad:8a:d7:fb:d6:a7:8b:23:3b:20:6c:
50:7d:05:3c:6b:c3:b4:aa:25:cf:ca:b1:a9:a9:f5:
c4:a2:7d:c8:a5:f3:5f:72:d2:be:e8:f9:6e:c6:fa:
5e:24:03:1c:ba:05:f5:52:93:f4:93:81:30:19:6f:
2a:3c:4e:3e:15:89:36:d1:7c:a4:9a:d9:48:09:53:
f2:8c:05:a5:a5:23:c6:e7:71:41:67:a7:f9:fb:6a:
9a:5a:b8:db:39:f3:50:42:4e:e4:04:de:ae:e3:ec:
c9:bc:dd:76:90:f4:3a:cd:2d:fa:61:7a:4f:54:d7:
a2:e1:5c:fe:6c:3b:b3:82:84:f2:8a:0b:da:c6:b6:
18:ba:dd:ef:bf:95:23:f4:64:62:03:fd:e1:aa:e9:
2c:1e:20:94:76:42:14:fe:f7:8b:f8:06:37:02:fd:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A6:25:EB:00:4A:B7:8D:55:7E:F6:D4:C6:9C:80:83:C8:81:FD:23
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/IqYl6wBKt41VfvbUxpyAg8iB_SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:10:7a:f6:7e:f9:26:32:c9:60:69:07:e7:8e:a8:8c:30:d8:
d3:af:69:27:52:6f:60:e6:99:3d:6d:fa:ec:16:a7:17:62:3f:
41:8b:a2:e1:4d:9c:3e:57:84:bf:a6:aa:e7:a2:f2:ab:72:89:
d7:92:8b:50:0a:e7:39:65:86:d5:98:1c:67:24:0f:66:a4:69:
09:92:c7:54:90:a9:36:2a:88:29:b4:e2:2b:37:2e:11:04:74:
79:3e:29:b0:2f:2c:f8:e1:21:a2:e7:56:aa:05:45:3d:0d:07:
77:09:51:ea:86:5e:c6:02:34:dd:fa:68:ca:ad:61:48:6f:d9:
44:92:a2:fd:d3:cf:74:86:9c:25:ab:aa:94:9d:65:b6:a9:5e:
7d:50:1e:2a:d6:13:dc:a2:b8:b3:98:b3:25:e3:10:4a:7e:25:
fb:11:83:9b:e7:b7:f3:37:4f:29:dd:b2:ed:a1:aa:53:09:5a:
39:ae:31:06:0f:37:42:02:49:68:16:41:b0:bc:e6:5d:0d:dc:
c9:8e:7e:1e:1e:97:71:8f:11:47:f5:51:ff:24:8f:51:6a:9d:
30:10:4f:e3:3c:6f:76:50:71:76:08:6b:81:99:50:1b:7a:3c:
ce:b3:39:e1:43:ca:55:6c:8f:58:d3:f1:01:9b:91:83:36:c9:
8a:3c:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:09 2025 by rpki-client