Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/MOICOhtvIWKiXUtVUcViXZTRyOs.roa
File: MOICOhtvIWKiXUtVUcViXZTRyOs.roa (raw, json)
Hash identifier: ixvx14t3Sz4CRYe3erV8mbWv5bDeeWs7hYRdqVzfGek=
Subject key identifier: 30:E2:02:3A:1B:6F:21:62:A2:5D:4B:55:51:C5:62:5D:94:D1:C8:EB
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01E7F246
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/MOICOhtvIWKiXUtVUcViXZTRyOs.roa
Signing time: Tue 15 Feb 2022 19:03:39 +0000
ROA not before: Tue 15 Feb 2022 19:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 105
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31978054 (0x1e7f246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 15 19:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30e2023a1b6f2162a25d4b5551c5625d94d1c8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:ee:68:ae:32:db:b7:1a:f7:3c:c7:d1:c6:
6c:61:6c:12:0c:37:c4:26:73:97:36:b4:e3:dc:bb:
32:a7:f3:f8:2d:02:d1:4c:0e:0d:ce:a0:57:54:b1:
1f:08:bd:42:91:6e:48:e8:5d:e1:81:c1:2d:56:09:
92:e1:d4:68:55:23:de:26:aa:c8:11:a7:16:ee:94:
46:e7:63:ba:48:54:ca:e0:86:39:a7:61:0f:b3:be:
97:d2:9e:b4:ee:54:63:81:d0:48:f1:14:4c:f2:d3:
17:92:26:a4:04:70:01:fd:8d:39:83:35:4b:f1:68:
ea:44:36:54:ad:98:10:4b:34:bb:6f:d5:12:00:16:
ee:fd:2a:a9:9e:d4:fc:3f:a0:f0:15:52:16:ae:d6:
94:70:f9:bf:8b:8c:61:90:1c:24:70:e0:9b:2e:bf:
35:fd:51:ee:89:9d:81:dc:84:63:05:2e:c6:44:e4:
c3:5a:bb:77:36:ae:c8:9a:f6:a3:0e:8c:33:94:b2:
12:a1:f8:ab:1e:5f:22:21:99:00:d3:67:ec:c9:23:
d9:f4:68:90:2c:e6:9a:6e:86:a1:26:1f:6b:f6:8b:
33:95:ba:51:f8:0a:eb:95:de:e0:e1:12:ef:11:b8:
14:4b:09:6a:16:1b:e3:75:4b:00:d6:b9:20:63:02:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:02:3A:1B:6F:21:62:A2:5D:4B:55:51:C5:62:5D:94:D1:C8:EB
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/MOICOhtvIWKiXUtVUcViXZTRyOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:9f:71:e3:39:2b:fb:3a:9b:db:f1:32:36:8c:a2:e9:d8:0a:
68:f9:1a:02:06:be:a7:f9:9f:f2:0f:12:16:eb:07:20:31:ef:
0d:24:9f:06:a2:85:f2:08:34:31:ad:b5:e8:7a:e0:90:2e:36:
0e:93:c1:06:0b:46:ab:7a:29:30:14:f4:93:2b:6f:bd:c8:67:
61:b0:c9:23:8a:8e:28:69:21:29:38:df:e6:f5:6e:21:75:1c:
49:bd:41:34:d1:d3:05:e6:42:7b:b3:b9:66:f4:3b:f7:1f:32:
44:14:fd:85:9f:f1:f9:99:29:c6:25:db:c6:f6:d0:af:1e:55:
b5:5c:5a:2a:6c:b0:98:a1:af:c7:9f:fd:b6:89:2f:12:86:b7:
a2:43:0f:dd:38:50:ac:15:77:9a:d8:ed:40:79:48:17:c0:08:
df:c3:87:18:25:79:cb:06:49:f2:18:8c:06:60:c9:ee:55:05:
43:37:62:c6:f3:42:0a:06:1e:cb:10:4e:cc:ca:f5:8c:d1:9d:
12:87:b4:59:43:15:75:24:80:bd:02:74:a5:72:a0:1e:c5:e4:
df:7b:1b:4a:2e:f3:d6:c9:3b:79:a5:4b:c5:52:f8:62:e0:c2:
28:78:88:5d:d5:7f:d2:2b:df:c2:05:3d:6a:77:b6:de:4a:ef:
f2:e2:3e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 14:00:41 2025 by rpki-client