Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/1BZLpzgx8Vbas48aKByNp4GdaQ8.roa
File: 1BZLpzgx8Vbas48aKByNp4GdaQ8.roa (raw, json)
Hash identifier: A72JQQz1ASDp+khUFMPJZotDEPAKScPpjUyZnTaYQFM=
Subject key identifier: D4:16:4B:A7:38:31:F1:56:DA:B3:8F:1A:28:1C:8D:A7:81:9D:69:0F
Certificate issuer: /CN=b18ed65d295a861a1fb46b24bf6a9ecaf7f3eab9
Certificate serial: 01BFFDD8
Authority key identifier: B1:8E:D6:5D:29:5A:86:1A:1F:B4:6B:24:BF:6A:9E:CA:F7:F3:EA:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sY7WXSlahhoftGskv2qeyvfz6rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/1BZLpzgx8Vbas48aKByNp4GdaQ8.roa
Signing time: Sat 01 Jan 2022 02:55:18 +0000
ROA not before: Sat 01 Jan 2022 02:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44489
IP address blocks: 195.88.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29359576 (0x1bffdd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18ed65d295a861a1fb46b24bf6a9ecaf7f3eab9
Validity
Not Before: Jan 1 02:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4164ba73831f156dab38f1a281c8da7819d690f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:7d:53:6a:26:48:65:ed:e3:c1:a4:ef:ec:
19:6d:ac:b5:69:b3:3f:08:43:f3:13:de:51:e3:16:
70:61:b9:71:f4:96:3f:d9:7d:cb:ab:d4:8d:4f:dc:
7e:41:e6:5c:e7:3e:59:2f:ed:a2:0d:2c:ff:d2:14:
f9:7c:a1:52:57:28:06:5c:9e:3c:b3:d8:4c:92:b6:
52:e2:4c:7b:d8:e9:80:87:23:1c:86:6c:1c:d7:e2:
1e:55:80:54:9e:b4:1c:a9:07:2f:34:1d:a8:f3:01:
4c:3b:bf:53:8c:67:35:6d:2a:f7:0d:6e:75:8b:58:
a3:26:3c:9d:0b:2c:67:f3:af:37:a9:31:24:28:6a:
47:8d:17:ea:3a:80:66:6a:b9:23:c2:2a:f5:4a:29:
44:eb:92:d4:07:65:da:0f:d6:fc:e2:f7:ba:f9:bd:
09:d6:ba:5f:20:cf:40:46:8c:38:5a:3f:d5:6b:92:
c8:3c:79:78:17:72:7a:d4:f6:3b:ed:0e:9f:da:fa:
68:68:9d:53:34:4e:cd:28:c3:29:a3:48:4c:68:98:
56:e6:39:8b:2b:41:39:c7:63:3c:d0:b8:66:ab:8f:
ac:46:16:3d:f0:82:41:eb:f7:58:c1:0f:1f:ad:a9:
30:e9:ee:15:25:c1:bb:5e:8c:bd:09:71:fe:b4:6e:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:4B:A7:38:31:F1:56:DA:B3:8F:1A:28:1C:8D:A7:81:9D:69:0F
X509v3 Authority Key Identifier:
keyid:B1:8E:D6:5D:29:5A:86:1A:1F:B4:6B:24:BF:6A:9E:CA:F7:F3:EA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sY7WXSlahhoftGskv2qeyvfz6rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/1BZLpzgx8Vbas48aKByNp4GdaQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/sY7WXSlahhoftGskv2qeyvfz6rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.142.0/23
Signature Algorithm: sha256WithRSAEncryption
55:f9:f6:62:75:9a:3e:77:39:22:ff:e0:9f:9d:57:08:42:bd:
33:e8:0e:d5:23:0f:c6:1c:6f:3d:20:0b:83:f9:99:c3:07:8d:
32:93:f6:79:25:63:ff:f5:34:c8:1b:df:9a:19:3b:4d:8f:31:
e8:f8:11:19:e8:02:c5:4b:68:d0:4d:dd:bb:9e:48:b3:fc:8c:
a3:7f:1a:78:cf:73:58:b8:89:e7:88:1f:b4:c3:5f:32:18:4f:
16:d8:ef:15:29:42:03:7d:d1:b5:f9:63:45:5f:fa:03:96:1e:
63:84:b6:2c:cf:fd:e0:8a:ca:e1:bd:1b:f4:b3:e8:0a:5c:34:
7f:cf:76:17:4e:98:7d:eb:01:ae:d8:a8:a5:82:ab:ab:d7:54:
25:db:10:cf:c1:b5:7e:b6:c6:59:1b:86:02:09:58:e6:a1:34:
85:48:f7:02:04:ac:e3:07:80:91:aa:4e:8b:44:81:98:f4:16:
ea:c2:85:c7:f1:9d:e5:41:d2:1b:45:15:5d:4b:fb:64:81:e0:
c7:d8:b9:39:27:ff:65:b6:4d:0c:a2:b4:8d:45:db:6f:0c:7a:
41:c7:16:f2:14:72:45:e4:1c:3f:9a:e2:28:b0:b3:53:b6:c8:
01:9e:14:92:ad:9f:39:be:e6:0b:e5:c5:a2:9a:d0:f5:4b:45:
1f:dd:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:02:28 2025 by rpki-client