Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/t5x8pkdJ0ifuY7FJSIkNfTXzxV4.roa
File: t5x8pkdJ0ifuY7FJSIkNfTXzxV4.roa (raw, json)
Hash identifier: YO0O68oI4SH5PwqEQH8h+mr/D58ZvsN4QaK57qfX+oY=
Subject key identifier: B7:9C:7C:A6:47:49:D2:27:EE:63:B1:49:48:89:0D:7D:35:F3:C5:5E
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01E92C1B
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/t5x8pkdJ0ifuY7FJSIkNfTXzxV4.roa
Signing time: Tue 15 Feb 2022 19:04:38 +0000
ROA not before: Tue 15 Feb 2022 19:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 108
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32058395 (0x1e92c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 15 19:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b79c7ca64749d227ee63b14948890d7d35f3c55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:2b:dd:72:3d:31:b6:02:eb:bc:cf:c1:b3:
78:ea:a9:56:1c:e8:63:37:6b:7a:60:15:11:c4:be:
3e:66:07:6c:0a:cb:73:63:8f:44:ad:ce:e8:b0:9d:
f3:5e:29:f4:aa:d3:3b:48:75:a3:23:4f:bb:e5:4d:
41:a3:5c:a6:19:73:a1:c3:f9:3e:75:33:85:ae:b8:
a6:61:79:a1:cb:4b:82:1c:12:01:54:4d:48:4f:a0:
8a:cf:8e:b7:19:4b:09:5a:31:07:70:47:2d:b2:d3:
2d:ca:29:81:47:cc:86:6b:4c:f9:3f:ba:3d:52:f9:
8c:3c:bd:f2:29:89:bc:a4:89:8c:93:94:02:ad:15:
a8:ee:47:e8:bf:a9:39:0b:ab:9d:59:95:3d:cd:f1:
90:8b:e5:4f:f6:f6:aa:dc:bc:53:4b:c1:6e:0e:f7:
a6:2f:71:73:ae:8d:d5:08:2b:2f:38:2f:d6:c8:e3:
69:84:e5:42:8d:8f:f9:da:65:66:62:e8:55:5a:26:
c5:c7:0e:c4:db:7f:02:a4:ba:63:4e:dd:e7:4b:08:
39:c7:a6:e3:24:a8:8a:b8:0a:74:3b:78:54:d9:a3:
60:b6:c5:3b:72:bd:6b:fd:d6:6a:d7:d7:68:1b:4a:
c8:d9:7d:2d:63:1c:ef:33:8b:78:07:57:dd:d1:4a:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:7C:A6:47:49:D2:27:EE:63:B1:49:48:89:0D:7D:35:F3:C5:5E
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/t5x8pkdJ0ifuY7FJSIkNfTXzxV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e6:7d:7b:47:82:94:39:d3:af:e5:fe:83:13:ee:0c:ed:21:
4f:2b:e9:cf:cd:76:09:1b:b3:84:ab:93:03:03:83:82:96:37:
a6:7c:73:9b:92:60:0f:a0:ed:eb:b8:27:68:a6:9d:d6:45:65:
d3:55:99:58:4f:8f:a4:95:ac:17:e6:74:b4:c2:4a:48:19:4f:
03:35:c7:ef:78:e2:fe:1e:8b:89:66:3a:80:8f:aa:04:9b:0d:
d1:2d:3f:b5:3b:9a:a4:32:5e:42:1e:fc:fd:25:d2:a0:f2:9c:
45:dc:b6:62:6f:37:98:9b:46:b6:b4:43:41:72:24:15:03:e0:
d2:e8:a2:a5:2b:98:da:71:7b:34:31:78:d7:0b:39:2a:e7:ee:
be:d3:d5:7d:da:d1:eb:6c:a3:18:d0:ee:5f:fd:6e:40:5c:77:
9f:09:75:8c:27:6a:42:84:7a:72:b9:5f:86:bd:55:ee:a1:d5:
40:43:fc:39:bf:f5:29:9b:84:43:75:4e:ea:d2:e4:a0:a6:26:
6a:e8:b6:6e:3d:a5:a6:dc:cd:37:b5:13:96:15:cd:bd:3a:a8:
15:42:b7:66:d7:54:7b:81:16:49:0b:28:90:55:45:88:ef:53:
08:6c:f4:fc:45:da:b6:88:51:7a:69:c8:96:01:a9:71:c7:c5:
e3:82:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:46:35 2025 by rpki-client