Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/qNjnS3juk6NnvvVoNEZy_ezIcF8.roa
File: qNjnS3juk6NnvvVoNEZy_ezIcF8.roa (raw, json)
Hash identifier: FH01gUyjRTZ/Q8n8r8B7gSNkvGTl7Ahfn9EyC5mR4KQ=
Subject key identifier: A8:D8:E7:4B:78:EE:93:A3:67:BE:F5:68:34:46:72:FD:EC:C8:70:5F
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01E8F08B
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/qNjnS3juk6NnvvVoNEZy_ezIcF8.roa
Signing time: Tue 15 Feb 2022 19:04:19 +0000
ROA not before: Tue 15 Feb 2022 19:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 107
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32043147 (0x1e8f08b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 15 19:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8d8e74b78ee93a367bef568344672fdecc8705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:37:bf:8e:fa:b3:0e:67:ba:7a:8e:1f:6b:
48:83:92:53:a4:ce:71:39:00:b6:79:98:78:ad:4f:
28:54:ff:9e:d7:80:ca:31:dc:49:5e:3c:f3:13:cd:
6f:7b:45:3d:e5:b5:11:bf:d3:ee:ff:ca:4c:3e:a3:
31:38:d6:5d:5c:b5:8d:6a:ce:29:61:2c:d7:f1:67:
2e:38:e0:11:58:6b:35:6e:8b:fa:c4:5b:af:d7:44:
de:e4:b8:0e:62:f4:87:b8:43:89:6a:84:48:6f:0b:
79:29:e0:1e:9e:71:84:ab:31:02:5e:4e:ca:37:92:
5c:d8:5c:6e:74:a6:46:51:56:20:1f:7d:3a:a9:8b:
48:95:7d:c4:f5:dc:be:50:a1:5c:22:c2:81:59:3a:
cc:7e:a9:d7:04:be:18:e6:e9:54:4e:1e:91:56:15:
16:db:d3:aa:22:03:58:88:80:03:dd:69:b4:d5:f2:
96:e6:cd:14:2c:54:2c:5b:28:ac:c0:55:4b:09:a6:
a1:58:11:99:0e:ee:25:1a:63:95:d7:fe:a6:02:7d:
9d:a3:df:3a:5b:de:f9:5d:9c:3f:e3:ae:8b:69:85:
b8:93:d5:bd:2c:2d:fd:e8:b6:20:c1:ec:0f:88:19:
9d:f2:70:66:92:55:bd:c8:c7:1a:5c:91:fc:6c:59:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:E7:4B:78:EE:93:A3:67:BE:F5:68:34:46:72:FD:EC:C8:70:5F
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/qNjnS3juk6NnvvVoNEZy_ezIcF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b8:0f:da:9d:7e:7c:57:f5:4a:67:4d:7b:99:fb:29:c4:56:
82:08:78:f0:f6:42:c7:e4:1e:a2:66:08:e7:3c:02:52:52:66:
b3:6f:96:9c:04:f5:53:82:fa:90:53:4e:f7:0f:90:37:22:83:
15:aa:97:d1:ae:a6:75:e2:1a:a2:24:d2:60:24:93:26:c6:99:
18:9b:c8:6d:c4:fc:6e:7e:d1:64:1a:49:2e:2d:1b:89:94:07:
7f:5c:b3:27:82:03:41:29:c4:bf:62:26:0f:fc:13:01:6b:2d:
3b:dd:e4:56:a7:f4:9c:14:16:58:46:cc:7e:c1:ff:07:28:ce:
f8:69:51:8c:ca:2c:41:bd:a3:97:d1:bf:33:3b:0f:74:af:73:
29:4e:51:18:8e:00:05:fb:0d:10:aa:6a:47:b2:0f:f0:1b:c5:
9b:1d:41:8f:f8:3d:f4:85:4c:de:42:0b:06:ca:da:4b:87:a8:
0e:25:0e:78:e6:16:cd:f8:31:bd:1c:58:7e:fb:86:0b:e9:9c:
63:5c:ca:90:93:af:67:9b:f3:8a:fa:26:d1:9e:9b:08:4b:6c:
0c:6e:d0:3a:69:8a:f3:4c:fa:78:c8:d7:34:38:98:05:3d:1f:
e0:7a:f7:2d:87:1a:73:62:97:cf:9c:85:ec:f8:63:a1:b7:b0:
63:c7:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:48:46 2025 by rpki-client