Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/mm9iMCQqkT89EIed8q9Z0eWHVTk.roa
File: mm9iMCQqkT89EIed8q9Z0eWHVTk.roa (raw, json)
Hash identifier: 2fKS9CdUa+3HLyByPjWSyzDyzWFMiE/8DH8Y2JHxz8U=
Subject key identifier: 9A:6F:62:30:24:2A:91:3F:3D:10:87:9D:F2:AF:59:D1:E5:87:55:39
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 02BAD867
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/mm9iMCQqkT89EIed8q9Z0eWHVTk.roa
Signing time: Thu 05 May 2022 17:46:33 +0000
ROA not before: Thu 05 May 2022 17:46:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56690
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45799527 (0x2bad867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: May 5 17:46:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a6f6230242a913f3d10879df2af59d1e5875539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:1f:2c:00:41:9e:d0:fb:80:1c:69:4f:8f:
d7:85:bd:f5:56:d3:4f:ef:4e:1f:5d:92:25:5b:f4:
a2:00:df:7b:f3:e9:f6:33:8f:69:fd:75:7f:c5:c1:
e4:cd:59:df:fc:b9:3b:e1:f6:e5:83:db:8b:70:67:
1a:0b:5d:71:35:b7:f9:cd:7f:57:08:13:77:40:99:
4c:e9:6e:fb:94:b6:2e:4a:ea:ee:48:b5:2d:9b:9c:
90:26:8e:18:61:6c:84:cc:0b:5b:1f:c1:66:c6:b8:
68:4f:e1:f3:c1:b1:74:a5:44:85:51:5a:e8:c9:fd:
6e:eb:bd:4d:66:48:7e:ba:af:ec:27:7e:06:9a:87:
e5:ca:de:fe:2a:32:ac:78:c6:fa:6c:91:04:5a:f4:
65:7b:e7:81:b7:07:34:74:21:e5:03:e9:59:29:2e:
52:2c:b4:55:77:ed:8a:4b:dd:84:18:60:b1:6f:9b:
a0:82:dc:db:58:41:cc:3f:9e:bc:af:62:4f:46:ad:
e2:38:cd:68:1d:e1:8d:08:5e:2c:ea:17:b2:56:d8:
5a:14:a3:0e:9d:48:d1:1d:9b:67:ae:07:af:e8:5b:
01:6f:2e:72:76:1a:33:c4:34:88:11:79:c6:2b:25:
5e:67:54:b8:5b:17:b5:63:f6:7a:f8:76:85:09:de:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:62:30:24:2A:91:3F:3D:10:87:9D:F2:AF:59:D1:E5:87:55:39
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/mm9iMCQqkT89EIed8q9Z0eWHVTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:07:0f:ca:ec:8e:2b:c4:87:5a:64:96:32:ad:50:8a:5c:ec:
e5:c3:3b:f3:3f:b0:e7:b9:10:72:30:db:5f:fd:be:ed:6f:2b:
2d:46:f3:be:12:3c:1e:a8:cb:12:b0:4a:81:d3:10:2c:a8:6b:
30:10:24:9a:80:a0:50:ad:35:60:b0:58:a9:08:c1:d3:ae:38:
30:58:a3:7d:ca:6d:90:b7:7a:47:f3:af:c8:99:48:43:0a:f8:
22:1c:84:d7:14:fb:08:48:93:79:6f:ae:17:30:69:20:a7:f3:
77:0e:9a:4f:c1:30:76:2d:71:c6:89:2c:15:5b:e5:5f:53:a3:
6a:86:eb:a3:e3:91:b3:01:10:6f:69:35:27:5c:9c:09:2f:3b:
4a:4c:e0:43:20:e0:65:ff:7e:f9:58:90:36:a4:1a:b4:6f:45:
8e:18:4f:8d:ed:6f:00:b4:bd:c3:cb:26:97:f7:85:ba:b5:eb:
4e:84:6f:bb:f9:83:8c:a0:4e:b7:05:c2:6f:7f:35:a7:5f:e5:
f6:93:8f:ec:00:a9:85:5d:8e:20:32:4e:5f:55:6c:00:ed:75:
2d:68:ef:f2:a9:81:6c:4f:9f:25:ab:a0:5f:ec:73:78:67:f5:
09:26:1a:4a:1c:1e:f6:ae:52:9a:3f:81:06:73:a2:b6:25:04:
51:8e:f0:87
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEArrYZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODc5Njk5MmRmODgzYmUxYmFiMmE1MmY0NWY1MjU0ZWJiNTJiNjk3MB4XDTIyMDUw
NTE3NDYzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE2ZjYyMzAyNDJh
OTEzZjNkMTA4NzlkZjJhZjU5ZDFlNTg3NTUzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnCHywAQZ7Q+4AcaU+P14W99VbTT+9OH12SJVv0ogDfe/Pp
9jOPaf11f8XB5M1Z3/y5O+H25YPbi3BnGgtdcTW3+c1/VwgTd0CZTOlu+5S2Lkrq
7ki1LZuckCaOGGFshMwLWx/BZsa4aE/h88GxdKVEhVFa6Mn9buu9TWZIfrqv7Cd+
BpqH5cre/ioyrHjG+myRBFr0ZXvngbcHNHQh5QPpWSkuUiy0VXftikvdhBhgsW+b
oILc21hBzD+evK9iT0at4jjNaB3hjQheLOoXslbYWhSjDp1I0R2bZ64Hr+hbAW8u
cnYaM8Q0iBF5xislXmdUuFsXtWP2evh2hQneBPsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSab2IwJCqRPz0Qh53yr1nR5YdVOTAfBgNVHSMEGDAWgBSIeWmS34g74bqy
pS9F9SVOu1K2lzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lIbHBrdC1JTy1HNnNxVXZSZlVsVHJ0U3RwYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvN2UwNzBlLTc5MzAtNDNjOC1hNjZkLTIxNWMzZDhmODkxNC8x
L21tOWlNQ1Fxa1Q4OUVJZWQ4cTlaMGVXSFZUay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
N2UwNzBlLTc5MzAtNDNjOC1hNjZkLTIxNWMzZDhmODkxNC8xL2lIbHBrdC1JTy1H
NnNxVXZSZlVsVHJ0U3RwYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMQSjANBgkqhkiG9w0BAQsFAAOC
AQEAWgcPyuyOK8SHWmSWMq1Qilzs5cM78z+w57kQcjDbX/2+7W8rLUbzvhI8HqjL
ErBKgdMQLKhrMBAkmoCgUK01YLBYqQjB0644MFijfcptkLd6R/OvyJlIQwr4IhyE
1xT7CEiTeW+uFzBpIKfzdw6aT8Ewdi1xxoksFVvlX1Ojaobro+ORswEQb2k1J1yc
CS87SkzgQyDgZf9++ViQNqQatG9FjhhPje1vALS9w8sml/eFurXrToRvu/mDjKBO
twXCb381p1/l9pOP7ACphV2OIDJOX1VsAO11LWjv8qmBbE+fJaugX+xzeGf1CSYa
Shwe9q5Smj+BBnOitiUEUY7whw==
-----END CERTIFICATE-----
Generated at Wed May 7 16:16:37 2025 by rpki-client