Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/TjIcuCVmMC4qX6XPWL09ZPdwcPs.roa
File: TjIcuCVmMC4qX6XPWL09ZPdwcPs.roa (raw, json)
Hash identifier: zuTQtDxq/KiCq5Q/DtXb4tjFyEiJqxNPGMK7scayJ8I=
Subject key identifier: 4E:32:1C:B8:25:66:30:2E:2A:5F:A5:CF:58:BD:3D:64:F7:70:70:FB
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 0182F93A47E5AD518EA8B51648895C4C8166
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/TjIcuCVmMC4qX6XPWL09ZPdwcPs.roa
Signing time: Thu 01 Sep 2022 13:25:22 +0000
ROA not before: Thu 01 Sep 2022 13:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:3a:47:e5:ad:51:8e:a8:b5:16:48:89:5c:4c:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Sep 1 13:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e321cb82566302e2a5fa5cf58bd3d64f77070fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:c4:19:35:35:f5:ca:20:fe:90:b2:7c:88:
3d:31:62:ea:f6:52:43:c3:fe:c5:1c:92:bc:ef:60:
6e:70:c5:43:04:62:08:db:5c:ca:4d:58:9a:e1:1b:
69:ff:45:1c:5b:ae:a1:9b:a1:35:7e:7d:da:c1:c5:
60:e1:ee:6b:fd:00:61:9a:8e:e3:e4:0d:dc:e5:4f:
a8:17:8a:ce:29:de:7e:91:8f:28:f4:a3:04:39:30:
13:69:f5:a0:1c:23:de:a2:3a:1a:6a:ec:d8:00:c7:
1c:1a:bd:7c:e0:41:12:7b:84:98:0c:9b:e2:db:0b:
54:b3:74:1a:e7:20:fe:50:14:27:dd:ed:06:c8:2e:
11:27:db:74:fb:65:cd:44:0e:60:3c:19:34:67:a8:
6b:af:fb:83:d3:ea:ed:75:29:82:7b:1f:7b:c6:95:
f3:9e:34:db:04:45:0c:7b:f7:ab:3a:52:80:28:2c:
ec:ac:89:19:de:3c:18:e9:18:c1:80:6a:ec:54:33:
2f:6a:98:fa:e0:bb:69:c3:94:cb:b0:7a:12:e0:cb:
51:27:91:29:71:bf:8e:c8:7b:65:71:4c:80:bb:8a:
bc:89:01:08:7e:a0:da:57:9d:7f:6e:26:51:86:99:
30:73:1f:b3:f2:75:48:e5:62:64:8b:30:5b:b3:ae:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:1C:B8:25:66:30:2E:2A:5F:A5:CF:58:BD:3D:64:F7:70:70:FB
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/TjIcuCVmMC4qX6XPWL09ZPdwcPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:74:b9:2f:d1:7c:af:d6:e3:8a:4e:e1:c2:60:5a:23:8e:cc:
96:32:6f:b1:ea:8c:33:b7:9d:9b:cf:84:c7:fa:ac:30:ac:94:
69:0b:62:e3:12:b2:3e:4d:34:0f:3b:72:da:45:19:5f:41:99:
68:09:6a:27:35:50:23:b3:d3:37:de:b2:0b:ce:48:ff:13:7a:
f4:19:cb:44:98:65:f2:1f:17:fa:34:7e:ca:f5:a7:cd:70:a0:
57:c8:45:e1:10:45:f7:27:2a:4c:88:18:6c:70:a3:bb:88:ab:
dc:71:bb:73:86:43:ae:14:63:b2:e2:0f:06:cb:31:a2:f7:d7:
b1:de:03:5f:18:64:f5:68:16:81:be:d2:a5:83:d8:77:15:a9:
4d:e8:5b:a7:ac:6c:e0:e4:73:c4:44:3b:93:eb:16:9b:a5:14:
43:71:85:f5:8a:66:20:70:36:0a:40:19:6d:96:f9:6d:aa:4c:
f1:96:bf:c9:88:2a:5a:0f:68:3c:4c:80:91:aa:51:1b:74:f0:
1b:c8:b6:89:c6:ce:68:7c:d6:09:f9:b8:50:ab:38:80:14:00:
ab:08:10:55:91:dd:e9:b3:ca:b9:5d:72:72:fe:46:38:6c:6e:
06:ed:75:70:fe:f6:09:1e:d9:b0:b7:d7:a6:44:16:1c:87:93:
f0:aa:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:19:31 2025 by rpki-client