Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/HGxO_WnrFLVgN2ba7TDZz3JLlwE.roa
File: HGxO_WnrFLVgN2ba7TDZz3JLlwE.roa (raw, json)
Hash identifier: mP7vNCYhev3Fq9VEMkAPS1QcS7/+3UMMNs7gdgsvKPc=
Subject key identifier: 1C:6C:4E:FD:69:EB:14:B5:60:37:66:DA:ED:30:D9:CF:72:4B:97:01
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01E5BE05
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/HGxO_WnrFLVgN2ba7TDZz3JLlwE.roa
Signing time: Tue 15 Feb 2022 19:00:07 +0000
ROA not before: Tue 15 Feb 2022 19:00:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 103
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31833605 (0x1e5be05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 15 19:00:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c6c4efd69eb14b5603766daed30d9cf724b9701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:7f:f0:01:bc:e6:29:24:34:b7:c6:56:0e:
3e:3f:11:d3:27:ae:5f:2c:34:b2:fc:c1:86:de:f3:
10:ac:81:67:90:56:97:d6:d7:17:bb:31:e5:7b:0a:
49:17:e5:9b:fa:19:d1:fe:ba:18:59:a2:02:9c:77:
61:3c:b2:67:e7:1a:c3:74:b4:a3:fd:3e:59:f9:2a:
b4:18:b1:a1:87:34:eb:31:6b:09:70:8d:3a:24:6c:
05:4f:d9:57:8e:f4:07:50:aa:cc:ad:79:e6:66:14:
4a:a0:58:f5:39:2c:da:c2:75:5f:51:4c:de:a3:cd:
dc:4f:21:56:79:a1:ec:1f:41:78:4f:35:4c:9a:35:
2d:c2:c5:36:16:9e:d5:e0:72:e2:db:f4:c8:47:ca:
5c:bd:2c:75:eb:46:a8:59:9f:ee:b0:3a:45:3a:44:
c3:97:b9:61:4d:6b:74:0c:59:88:f4:1e:17:4c:7d:
bc:24:5f:f6:e6:92:e9:ea:77:cc:a2:bf:31:46:f6:
34:64:3b:30:66:c9:4b:50:2d:74:82:fb:b8:24:12:
c3:11:c7:2d:8a:c9:23:0b:08:9a:d5:09:b1:95:7b:
a2:93:f6:e0:f2:6c:1f:5a:ef:41:68:65:72:ca:91:
1e:9b:f4:27:35:3d:df:9e:85:b7:12:ca:46:6c:6e:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6C:4E:FD:69:EB:14:B5:60:37:66:DA:ED:30:D9:CF:72:4B:97:01
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/HGxO_WnrFLVgN2ba7TDZz3JLlwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ba:c8:cc:24:e2:d7:84:ca:22:4a:a0:5f:3b:a6:4b:49:9f:
84:4d:e5:9d:c8:b2:2b:a4:c4:82:c7:a1:bb:9a:c2:ed:83:8d:
5c:49:46:c4:8e:8d:6b:0e:61:61:dd:27:5f:88:ca:7d:28:d6:
97:ae:e2:6e:ac:d9:de:d5:6d:bb:f9:7b:a6:22:61:4c:1a:88:
80:34:37:3f:80:f0:13:f4:33:05:a4:23:fc:8a:ca:75:74:07:
fe:a4:47:a2:ce:a9:53:79:f5:c8:8e:83:fd:3e:3a:d9:fc:1e:
88:a6:57:25:2f:d8:16:54:ce:15:bc:fc:13:98:ac:6b:08:d8:
13:b9:70:5e:28:ba:b6:3b:a7:6b:08:99:1d:1e:f8:9d:f7:51:
30:e7:09:c4:19:11:07:d1:be:dc:19:1f:9a:ed:e9:64:41:32:
72:0c:d1:28:4a:16:2d:48:24:3a:17:5b:f5:6c:3b:f4:f3:dd:
f8:f1:a2:3c:7b:a8:08:2f:1e:f1:eb:9e:6e:f5:30:b6:c7:67:
3d:5c:a9:e1:5d:d5:a5:e1:97:db:12:92:e4:9d:24:7b:be:aa:
33:a3:e4:55:9c:13:1a:5f:c6:f9:8b:ad:20:35:5e:25:34:99:
41:32:03:d9:4a:63:aa:4c:be:09:ec:8f:2f:2a:9b:d9:19:46:
d8:86:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 14:01:29 2025 by rpki-client