Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/AhA7BveUOofSP-37kaGd9xRFkZA.roa
File: AhA7BveUOofSP-37kaGd9xRFkZA.roa (raw, json)
Hash identifier: LdYsK68AI2KPjokNA9lIWn0FtxuMxVYs0nUgQ3RXTi0=
Subject key identifier: 02:10:3B:06:F7:94:3A:87:D2:3F:ED:FB:91:A1:9D:F7:14:45:91:90
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01D43EBB
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/AhA7BveUOofSP-37kaGd9xRFkZA.roa
Signing time: Fri 11 Feb 2022 18:24:25 +0000
ROA not before: Fri 11 Feb 2022 18:24:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 100
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30686907 (0x1d43ebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 11 18:24:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02103b06f7943a87d23fedfb91a19df714459190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:6c:13:14:f4:dc:9c:df:e8:99:9e:58:e8:
81:fa:70:49:85:91:51:f4:44:e4:6b:da:16:8b:e5:
14:3f:d6:d6:16:5c:76:47:3b:16:95:42:30:5c:b6:
c8:12:7a:71:9d:39:56:a6:91:69:ff:25:e8:ec:43:
ba:38:e6:81:e6:92:f0:28:d7:4b:e0:3e:6d:a1:4d:
cf:4a:01:e6:aa:8d:37:89:ae:1a:e6:c7:d9:1d:75:
63:09:b7:cb:f2:30:d9:75:bb:b2:66:37:48:ef:dc:
45:a2:63:da:91:e4:5d:3f:3f:8d:e5:c3:38:24:70:
5e:d4:67:d3:14:c8:02:95:0f:92:09:c0:26:75:63:
94:7f:16:e8:e0:8b:0d:46:fd:3e:af:24:0e:14:bf:
4a:aa:20:6c:ae:5d:56:ac:74:8f:be:7e:40:a6:62:
43:db:d2:ed:5d:da:b3:b0:9d:5d:de:d8:37:02:30:
56:18:f7:b4:80:17:b5:e6:d6:1c:9c:f4:fd:f6:9f:
79:46:d3:ce:60:05:ed:0e:44:8c:1d:d8:62:b5:79:
07:98:99:28:fb:32:36:7d:d3:ef:47:ac:9d:22:2e:
1a:90:e5:db:b5:37:3e:2a:ad:55:e7:c9:8b:b0:62:
5a:c9:9d:7d:bb:9a:37:24:63:c5:ae:e4:a4:47:a3:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:10:3B:06:F7:94:3A:87:D2:3F:ED:FB:91:A1:9D:F7:14:45:91:90
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/AhA7BveUOofSP-37kaGd9xRFkZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:78:ee:bd:77:28:58:80:ac:26:15:55:f4:28:ed:fd:ef:a4:
d4:4f:72:a1:2c:ad:e2:b4:93:5c:fc:c3:d0:0d:04:6a:04:b9:
b2:67:75:72:47:ee:29:59:51:45:6a:9c:cd:74:ad:79:62:f0:
c4:5b:0b:bc:45:ab:76:ee:96:07:72:39:cb:6b:92:70:b5:6c:
8d:20:bc:a8:3d:cb:55:8a:25:a5:dc:90:9c:1a:4e:3b:c3:58:
48:97:77:0e:01:06:86:3d:c3:4f:8f:a0:4c:ad:50:6d:6c:d4:
77:c7:bd:69:1e:44:a4:55:99:1f:03:ab:19:45:04:f7:89:9b:
96:29:29:9e:17:e0:03:f5:17:a8:8d:e6:26:e3:27:7e:46:04:
31:fa:24:e7:47:b0:48:93:0f:b8:ed:59:ec:49:14:fa:52:05:
f3:7d:36:11:f1:66:5a:53:1a:95:5f:c2:95:58:ac:03:06:54:
80:e0:de:84:3c:6b:55:0e:5d:d7:a1:4b:41:53:b4:f9:73:1d:
dc:3e:54:4a:3a:c6:43:59:1e:5a:b7:37:ae:51:aa:79:39:55:
ff:de:50:ec:66:d4:d1:82:cd:8e:92:77:31:65:b9:c1:a6:2d:
32:4c:77:e3:64:20:f2:6e:1f:99:c1:3a:51:9c:28:81:b8:66:
d0:cc:ca:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:36:30 2025 by rpki-client