Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/xBo64G5vd1FlYf66aj6eiR95iWM.roa
File: xBo64G5vd1FlYf66aj6eiR95iWM.roa (raw, json)
Hash identifier: JdtSlowkyqjSm9Xtaabm92vHzEqAyb9fbI48kb2x4rU=
Subject key identifier: C4:1A:3A:E0:6E:6F:77:51:65:61:FE:BA:6A:3E:9E:89:1F:79:89:63
Certificate issuer: /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial: 01E49496
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/xBo64G5vd1FlYf66aj6eiR95iWM.roa
Signing time: Tue 15 Feb 2022 18:58:30 +0000
ROA not before: Tue 15 Feb 2022 18:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 102
IP address blocks: 195.16.74.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31757462 (0x1e49496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
Validity
Not Before: Feb 15 18:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c41a3ae06e6f77516561feba6a3e9e891f798963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:67:67:91:cd:d3:2d:3b:27:45:cb:24:08:
81:b2:96:c7:db:14:cc:ca:11:f7:0c:94:88:5b:95:
24:34:50:66:40:65:e4:a9:a2:1a:83:60:d3:06:b9:
f9:47:d0:8e:06:41:38:42:c7:6b:50:6b:98:a7:94:
52:0c:00:66:a6:65:e7:04:16:55:cb:30:60:dd:2f:
c8:46:01:31:55:74:dd:03:97:c3:c0:3b:7f:37:71:
02:58:b9:c8:88:6f:d9:11:a0:8e:fe:dd:bf:36:91:
cc:e9:d6:17:a0:b4:b9:8f:55:52:92:42:53:0b:c6:
77:de:28:a2:84:e4:4b:7f:d6:47:7b:57:73:2f:e2:
50:ae:31:81:68:5b:d9:59:3e:7e:e2:8c:f1:45:76:
64:96:b6:15:45:fc:24:85:85:76:31:45:0f:82:a2:
4f:32:b9:de:bf:da:27:f7:f6:9c:11:61:cc:22:61:
df:17:78:9a:c5:b0:59:c6:a1:b6:08:67:e8:68:48:
47:39:7b:81:50:d0:44:53:da:92:53:eb:01:9b:7f:
a7:c0:37:96:9d:50:29:3d:de:3d:38:31:d2:4b:0e:
d1:42:99:20:de:83:69:c2:44:fd:85:d6:4d:ed:3d:
13:da:30:8e:e4:26:b7:03:16:cd:db:33:cb:6d:79:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:3A:E0:6E:6F:77:51:65:61:FE:BA:6A:3E:9E:89:1F:79:89:63
X509v3 Authority Key Identifier:
keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/xBo64G5vd1FlYf66aj6eiR95iWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a2:e1:7f:a6:7f:40:9f:6f:11:88:bd:09:65:46:e1:e0:16:
97:89:c9:7d:38:93:91:a3:4c:ce:79:2d:bc:eb:d1:a8:96:44:
b3:a9:3d:bf:8f:1f:1f:bf:5c:32:aa:2d:c9:5a:61:89:84:5e:
e4:c9:f6:7b:da:f2:ed:9a:84:eb:70:eb:1c:4d:a9:55:1d:a8:
0c:59:f0:83:a4:cc:84:bb:ae:fa:70:88:3e:a1:2f:60:f3:e5:
d2:9b:3e:be:b5:f0:2e:4c:87:9c:fc:13:ea:f8:8b:06:53:74:
e6:bf:bb:e7:fb:4d:89:58:2e:f4:b4:d4:5c:f7:0f:34:68:6d:
bc:59:03:1f:56:01:14:fb:47:1a:3f:64:73:d9:01:a3:b8:53:
6f:a2:51:85:10:2c:0e:b0:c0:22:55:76:81:c2:e8:48:ea:9a:
4d:ad:4e:ef:b0:70:19:2b:76:14:b0:e9:9f:1c:36:15:2e:fe:
3b:2f:fc:d0:7f:05:fb:b9:31:fc:ce:cd:c4:d2:90:ce:48:32:
d1:7f:11:4d:4a:cd:6f:7b:48:63:df:9c:f5:d0:f4:07:6a:78:
83:9f:cf:0e:62:1c:16:bb:a8:d7:1b:e2:4e:f2:6c:11:a3:2c:
ab:a8:9f:be:cf:b1:27:8a:a7:70:6f:80:92:ec:66:04:79:49:
d3:32:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:36:46 2025 by rpki-client