Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/tfSMW_nKqdSjT-MWJ2pmuUfg6nA.roa
File: tfSMW_nKqdSjT-MWJ2pmuUfg6nA.roa (raw, json)
Hash identifier: 7N6n2Vs1ryqhYhiI0bwhKc6GqLHRoCR2js6TR5jitGc=
Subject key identifier: B5:F4:8C:5B:F9:CA:A9:D4:A3:4F:E3:16:27:6A:66:B9:47:E0:EA:70
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 0210911F
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/tfSMW_nKqdSjT-MWJ2pmuUfg6nA.roa
Signing time: Tue 22 Feb 2022 17:47:34 +0000
ROA not before: Tue 22 Feb 2022 17:47:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 100
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34640159 (0x210911f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 22 17:47:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f48c5bf9caa9d4a34fe316276a66b947e0ea70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:15:2b:42:21:4e:af:39:b8:62:97:57:32:
ae:f0:e0:4d:43:3a:a6:91:93:54:6b:7f:85:fd:94:
e7:67:c8:3e:3b:36:40:93:ee:cf:2d:c3:1d:7a:df:
85:55:08:55:20:fe:78:da:ce:73:c2:61:a5:d6:54:
54:f3:81:f6:b9:44:8f:13:f1:f7:e7:db:f8:e5:c5:
68:5a:d6:c2:42:ff:4f:94:41:10:a7:ed:b6:91:4b:
bc:66:64:5a:16:33:bb:17:bd:f6:41:30:77:89:b3:
ee:d9:42:26:8d:c8:f4:5a:f7:f3:bc:c9:6d:e4:eb:
27:3f:04:de:57:24:07:9c:f5:46:cf:a3:3e:7f:7d:
24:46:5d:26:18:0f:7b:27:2f:c0:2b:03:47:e7:aa:
95:25:fd:57:c2:26:0c:9d:fd:23:5a:e7:77:54:54:
85:c6:49:50:c8:85:d4:ec:29:5e:aa:a9:d3:04:53:
31:e8:3e:0c:42:e6:0b:34:36:91:18:07:81:87:6c:
a9:cf:c0:4a:e7:d7:06:5c:45:14:9b:da:d1:8e:30:
c5:3b:47:4d:ec:b6:6f:02:5e:63:7c:43:69:9b:c8:
55:ab:d0:e9:0f:de:51:d6:3a:5f:7b:50:01:8c:6a:
46:ac:ae:51:e2:b4:5a:9c:2a:7e:e9:ef:85:52:d3:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F4:8C:5B:F9:CA:A9:D4:A3:4F:E3:16:27:6A:66:B9:47:E0:EA:70
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/tfSMW_nKqdSjT-MWJ2pmuUfg6nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
21:26:d5:0e:ed:22:b5:63:aa:45:26:ee:e1:de:3c:ac:df:94:
9f:68:3a:10:00:51:82:c1:5f:e5:77:3b:5f:d6:fd:50:4b:21:
54:6b:4f:c4:f7:06:68:0b:ba:5e:86:51:e3:b6:7a:2e:29:ea:
0d:21:25:9e:11:11:d9:0d:00:52:3f:8c:5a:6e:54:e3:81:a8:
e9:45:b7:f2:ec:27:fa:f9:d4:c0:2c:9c:c8:b2:90:f7:f8:94:
d4:94:b1:89:ba:0f:87:03:44:ea:eb:29:4a:16:f9:4b:28:02:
6f:f6:41:dc:12:5b:ab:06:97:85:31:cd:e1:e7:ff:e6:a7:f9:
01:70:4f:5f:d0:66:69:45:8e:bc:96:65:2e:b0:77:79:54:fd:
fa:fc:95:8c:33:f2:db:69:b4:2c:62:af:08:f4:ac:33:ef:9e:
61:c2:85:e7:b3:a7:82:5d:d9:d7:51:20:90:9a:09:4a:07:06:
84:c0:2d:6e:0f:3a:47:06:9c:2e:3c:ee:c5:c3:82:28:28:fb:
fa:50:39:9f:70:53:be:1a:20:cb:d4:75:60:fb:06:fa:83:e1:
3f:8f:65:80:13:e3:48:f8:16:9a:97:da:a2:e1:87:ad:6d:c2:
b1:c3:c8:f7:13:5d:99:d7:0b:9d:72:6b:d7:35:84:c9:6c:b5:
d6:b0:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:33:49 2025 by rpki-client