Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/qL68vktVLjJPUxnS_apjiCH7eA0.roa
File: qL68vktVLjJPUxnS_apjiCH7eA0.roa (raw, json)
Hash identifier: Ueq2XAkDCTc/CoYdyJbLgvM966CamluRtsIktZ40We0=
Subject key identifier: A8:BE:BC:BE:4B:55:2E:32:4F:53:19:D2:FD:AA:63:88:21:FB:78:0D
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01CB3EDC
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/qL68vktVLjJPUxnS_apjiCH7eA0.roa
Signing time: Fri 11 Feb 2022 13:56:05 +0000
ROA not before: Fri 11 Feb 2022 13:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 103
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30097116 (0x1cb3edc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 11 13:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8bebcbe4b552e324f5319d2fdaa638821fb780d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:00:b9:0b:79:7c:ac:3a:ba:45:d6:cb:9d:
41:05:d7:6d:76:41:4d:88:68:c3:a6:ce:d9:d0:e4:
e8:89:49:12:ee:93:68:23:0d:db:e9:91:1f:47:25:
8e:45:f9:f6:c6:2a:74:67:09:53:b9:18:1d:ba:61:
e4:b1:e0:20:5d:05:4e:ed:93:d1:c4:07:f2:9d:5d:
ff:28:24:d6:97:0c:ba:a8:ad:dd:fd:30:e0:fb:b7:
31:dc:68:7d:11:9b:6a:ec:f9:09:d2:64:c8:58:78:
92:0f:d6:3b:eb:dd:05:e1:1a:9a:93:62:44:f5:78:
43:f0:2d:4b:ce:e0:d8:f3:8d:39:ca:98:4c:03:98:
a5:ce:e3:a6:00:6a:54:88:c5:ab:f6:85:93:1c:88:
57:68:32:23:bf:6b:34:39:86:29:a2:49:f3:31:76:
dc:fa:2c:c0:29:44:e7:29:d7:1c:87:bd:d0:6f:de:
b0:33:9c:bd:72:47:ca:1a:97:9b:35:58:c6:35:15:
3f:32:cb:21:5a:30:bd:84:e2:b4:ad:6e:28:11:2f:
d2:88:a9:ba:24:1a:05:cd:ea:d0:99:96:ee:dd:27:
0e:69:49:17:77:87:95:30:22:25:38:48:6a:eb:cf:
56:a7:a5:6d:f4:8f:f7:c7:3c:ea:5b:2f:2a:f5:55:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:BC:BE:4B:55:2E:32:4F:53:19:D2:FD:AA:63:88:21:FB:78:0D
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/qL68vktVLjJPUxnS_apjiCH7eA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
15:11:76:6f:24:f5:5c:e3:16:8a:87:58:c1:82:47:c1:57:4d:
c2:84:ee:08:20:54:ac:e7:fe:f8:c7:4a:78:5c:aa:cb:05:b0:
64:33:a7:42:67:3b:97:25:a3:9a:b1:54:e4:04:97:2b:d3:2b:
12:b8:7f:d6:04:1b:3c:62:17:86:e8:f4:6b:0c:86:65:bb:3d:
5e:5e:12:c9:04:99:90:ae:ac:f9:21:97:d1:86:ae:4a:03:f9:
07:0b:90:65:ac:46:84:3b:99:ba:41:63:de:a1:87:c4:20:88:
47:0e:5c:4b:83:bc:a7:9d:c9:1e:59:d3:5b:18:3a:1c:c2:f1:
7d:ea:9a:f1:73:43:15:8e:06:d7:eb:54:a0:99:91:54:ee:f3:
ad:58:bd:20:96:df:03:f9:e3:cf:c5:78:db:ff:f8:b5:21:6a:
2a:61:31:01:55:bc:e6:73:ff:d3:24:ff:04:44:8b:2d:88:79:
88:b4:07:c8:ef:9b:1a:ff:e2:9d:d0:34:3e:f0:92:8a:6f:aa:
5d:e3:6d:79:28:f0:b5:be:05:18:37:e4:b8:dc:d0:ed:87:8e:
55:d0:b5:2d:59:89:be:3d:93:d5:27:8b:e3:55:61:5a:1d:3f:
d4:c3:ba:07:e2:34:38:4c:44:d4:46:82:c7:35:42:88:e0:66:
4c:b8:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:52:45 2025 by rpki-client