Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/Zs3UltX0ZoOZEPLKtCTLhr-4SNQ.roa
File: Zs3UltX0ZoOZEPLKtCTLhr-4SNQ.roa (raw, json)
Hash identifier: zWi3x1wODcG106lyj9hXYTs1sDMbB5uJDWIlYnCKiMc=
Subject key identifier: 66:CD:D4:96:D5:F4:66:83:99:10:F2:CA:B4:24:CB:86:BF:B8:48:D4
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 0185C53CE272228493A4248A18258BD9DF8A
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/Zs3UltX0ZoOZEPLKtCTLhr-4SNQ.roa
Signing time: Wed 18 Jan 2023 14:16:19 +0000
ROA not before: Wed 18 Jan 2023 14:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:3c:e2:72:22:84:93:a4:24:8a:18:25:8b:d9:df:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Jan 18 14:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66cdd496d5f466839910f2cab424cb86bfb848d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:51:7f:e9:d4:b2:63:13:04:65:e5:f8:55:
42:f2:56:9b:84:a8:4a:05:09:ef:67:69:ff:4b:bf:
d8:ce:d9:3c:27:4d:19:43:de:bc:fa:6a:1e:98:83:
8a:98:55:28:3f:3a:34:1e:fe:43:89:04:a3:97:f2:
f9:b9:28:00:d5:2e:ce:00:cf:bd:28:c4:65:15:d4:
b3:6a:d1:51:2a:37:21:16:e8:0e:48:3b:c8:ff:c4:
45:1a:ae:1a:0f:09:1b:27:94:73:95:07:7c:b9:8a:
0a:11:56:09:93:d2:d7:7a:53:bf:fb:83:7b:39:02:
1d:17:de:46:33:7d:46:02:8a:93:84:50:cc:7b:66:
8b:99:a0:91:3c:e1:8d:5b:25:91:05:49:03:a1:d9:
f0:8a:7f:76:bf:e7:32:4b:94:ac:8c:28:de:7a:ae:
a3:2f:e4:58:90:cd:3a:81:1c:06:97:91:97:6a:9b:
cb:0b:1b:ab:64:26:11:6e:41:21:3b:19:92:8e:39:
09:73:2c:d8:a2:9a:e7:be:e5:b2:a0:8e:15:3f:2f:
c4:b6:27:5a:58:9d:19:24:f0:ec:47:ae:ba:9e:23:
6a:aa:13:06:f9:86:84:8c:72:04:44:00:b2:96:d8:
68:b8:9d:cf:13:be:13:1c:be:9b:99:cc:62:b8:53:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:D4:96:D5:F4:66:83:99:10:F2:CA:B4:24:CB:86:BF:B8:48:D4
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/Zs3UltX0ZoOZEPLKtCTLhr-4SNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
37:03:69:c0:25:21:6c:80:f8:b4:f7:11:dc:26:39:68:eb:25:
86:19:67:9c:84:34:0f:22:e6:6a:c0:8e:fa:23:10:93:4b:b3:
23:43:76:e3:b7:a9:a9:0a:ba:1d:f0:b8:e4:54:38:ad:92:45:
ad:11:f9:f2:e8:ea:ce:99:d4:aa:60:be:bb:f0:de:02:ca:c2:
97:bf:b0:43:ce:f1:35:66:2b:b7:71:4c:04:72:51:a1:3d:95:
d3:8a:87:12:75:04:80:5a:e6:74:e7:6f:5d:07:85:80:76:56:
06:97:62:3c:15:d3:f3:79:0c:44:69:6a:f0:06:a0:03:b6:f4:
b7:0e:17:00:78:10:9f:94:5c:f8:bf:06:e6:df:40:f7:8f:4e:
45:aa:d3:2e:28:7c:3c:cc:18:74:62:60:dc:1d:d8:99:a4:07:
2f:7d:3c:79:ea:1f:29:92:e3:9d:cf:ae:fe:ae:10:a3:0c:85:
05:7a:9d:14:59:24:03:d7:60:90:22:7a:36:45:42:7b:67:07:
c5:ad:68:67:72:7a:da:53:aa:87:a1:be:63:67:b3:02:6c:3a:
67:9b:20:6f:03:3c:d4:42:4f:b4:8d:da:59:18:88:b8:71:b1:
e2:a5:76:21:fc:72:91:97:a3:57:bf:53:02:96:2d:58:25:4c:
4a:6d:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:55:26 2025 by rpki-client