Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/vHKu84SFtHCeddnzZA8vGBg-9ww.roa
File: vHKu84SFtHCeddnzZA8vGBg-9ww.roa (raw, json)
Hash identifier: 5SzbReA5mQfN0h/aLdCv+Jtgw5vSqNJsj6tWrHMk8zM=
Subject key identifier: BC:72:AE:F3:84:85:B4:70:9E:75:D9:F3:64:0F:2F:18:18:3E:F7:0C
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01F87157
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/vHKu84SFtHCeddnzZA8vGBg-9ww.roa
Signing time: Thu 17 Feb 2022 12:44:38 +0000
ROA not before: Thu 17 Feb 2022 12:44:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 101
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33059159 (0x1f87157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 17 12:44:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc72aef38485b4709e75d9f3640f2f18183ef70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:85:0b:94:4f:b9:5e:51:20:0e:d9:6c:2b:
1c:11:d3:bf:53:b3:dd:c3:61:df:34:2f:14:58:44:
32:84:fb:68:74:6f:c2:fc:d1:b8:3b:f9:23:88:2d:
e1:af:e5:d9:06:98:ed:6e:20:f4:50:2d:3d:3f:fb:
6c:83:6e:97:df:08:87:62:8e:12:92:d9:23:c9:0e:
a8:97:1b:73:88:83:22:03:9b:df:57:be:6f:af:0b:
c4:46:81:1a:75:7c:05:39:f9:69:d3:31:49:66:dd:
e1:1c:65:c3:40:93:53:d6:e5:5f:60:2c:67:1b:f8:
9f:d4:b0:5d:51:42:70:0f:03:83:8d:32:0d:0d:cf:
e6:e9:23:27:51:fa:71:82:06:34:24:78:13:86:6c:
0a:4d:9f:65:0c:33:c4:5a:dd:ab:93:b6:e0:01:e4:
af:7e:7c:f3:3b:25:2f:00:c7:b5:e8:ea:23:ad:7f:
1c:8a:f6:5e:8b:46:d3:2e:5f:a2:34:e5:8b:76:b4:
c7:73:52:30:74:34:d8:25:d3:17:24:63:3b:59:9c:
d3:7d:47:c4:a0:9d:a2:b4:fc:39:36:14:3d:66:4a:
aa:9e:53:96:68:71:61:9f:cf:05:5e:e1:e7:14:25:
84:4c:13:8f:10:66:e3:36:53:0d:29:a8:78:12:20:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:AE:F3:84:85:B4:70:9E:75:D9:F3:64:0F:2F:18:18:3E:F7:0C
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/vHKu84SFtHCeddnzZA8vGBg-9ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:79:39:6e:72:a4:41:05:76:2f:f5:a5:fe:24:51:ea:5d:60:
1d:99:49:5f:f8:34:26:82:49:f0:fa:81:39:08:ea:c4:2b:2b:
40:d1:08:07:a6:96:a0:6a:94:f5:28:9d:1a:f6:45:0f:13:97:
23:1c:af:d3:f4:ae:6f:69:8c:85:e4:5a:9f:b2:f6:dd:e9:0f:
88:09:98:a0:2b:6d:bd:1f:ea:64:23:ff:33:a1:e5:e0:fc:16:
22:0b:39:fe:ca:e5:47:b1:75:94:d9:05:4f:33:b6:59:22:c5:
f1:c8:74:2e:cb:19:3b:6a:80:79:2d:5b:4e:66:dc:54:c3:4f:
3d:3f:e6:b1:90:2d:cd:a2:b4:7d:6e:80:db:4c:7b:ef:1e:51:
9a:e0:71:f1:f4:e4:19:26:05:50:4c:8c:06:4a:f7:6e:1a:c6:
a6:2a:8f:55:42:18:3c:2e:00:cc:57:b4:32:68:85:db:d5:f2:
0f:49:ba:b5:12:c5:9a:74:d1:7e:3b:5f:5e:1f:fa:ca:84:07:
0f:85:37:05:ed:3f:e1:ce:e6:89:6b:c7:e8:2c:63:1f:5d:2e:
de:2d:76:c2:3e:0a:ac:7d:1d:a3:c7:6b:c2:a3:b2:bf:e9:48:
d5:7e:a1:9c:f1:cd:39:0d:75:4f:f1:b6:cc:72:92:95:f8:ad:
c8:66:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:53:27 2025 by rpki-client