Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/ilVcmt6hrhMbQFRFrp66i4Lu524.roa
File: ilVcmt6hrhMbQFRFrp66i4Lu524.roa (raw, json)
Hash identifier: FD7p0pscd0BAotU/G2A7GtbGQHrflwX6GKmj58qGmYc=
Subject key identifier: 8A:55:5C:9A:DE:A1:AE:13:1B:40:54:45:AE:9E:BA:8B:82:EE:E7:6E
Certificate issuer: /CN=0552d8488abd03f7668f72fbc7d57f7630cd2bcf
Certificate serial: 0205F0
Authority key identifier: 05:52:D8:48:8A:BD:03:F7:66:8F:72:FB:C7:D5:7F:76:30:CD:2B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVLYSIq9A_dmj3L7x9V_djDNK88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/ilVcmt6hrhMbQFRFrp66i4Lu524.roa
Signing time: Tue 26 Apr 2022 09:03:07 +0000
ROA not before: Tue 26 Apr 2022 09:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210238
IP address blocks: 81.22.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132592 (0x205f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0552d8488abd03f7668f72fbc7d57f7630cd2bcf
Validity
Not Before: Apr 26 09:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a555c9adea1ae131b405445ae9eba8b82eee76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:0c:aa:1e:08:15:58:2e:ad:8a:6f:2d:e4:
d4:0c:5c:3a:a0:f0:99:71:78:80:19:4f:d2:bf:5c:
59:ea:fa:60:4d:d6:b9:a1:45:78:ad:ce:cf:9b:80:
8f:16:7a:00:f9:4e:c5:8c:24:d9:aa:0f:3b:86:60:
8c:45:b2:f7:35:49:f9:ed:b6:45:d8:fd:2f:7e:07:
29:1a:a1:6e:27:ce:47:56:23:2c:b0:d9:b7:d5:7c:
42:b5:33:92:31:92:ab:78:af:6d:87:ae:f1:89:ee:
7d:0f:eb:b1:ff:49:27:c0:57:a7:e0:5f:f3:62:c7:
16:a4:0c:a9:07:7d:78:84:68:5c:dd:a6:2a:b0:25:
3e:cc:81:52:49:89:44:93:e4:38:74:55:0e:bc:34:
32:a9:7b:f9:26:43:03:d2:b8:75:27:78:10:9a:90:
8c:21:05:0c:3a:93:99:14:6f:cf:00:16:6d:6e:79:
ca:fd:53:78:cb:b7:28:0b:67:a6:f7:39:fb:f2:28:
a8:e5:87:0b:b8:4a:b3:b7:c8:50:0b:d0:b0:4f:fd:
af:f2:8b:84:7d:c1:c6:f4:8c:2e:60:5f:ad:fd:3b:
aa:da:75:b8:80:49:89:c6:b6:47:08:96:c9:29:2b:
b1:ae:00:b2:b2:66:f5:30:a9:36:73:9e:6c:f1:f7:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:5C:9A:DE:A1:AE:13:1B:40:54:45:AE:9E:BA:8B:82:EE:E7:6E
X509v3 Authority Key Identifier:
keyid:05:52:D8:48:8A:BD:03:F7:66:8F:72:FB:C7:D5:7F:76:30:CD:2B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVLYSIq9A_dmj3L7x9V_djDNK88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/ilVcmt6hrhMbQFRFrp66i4Lu524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/BVLYSIq9A_dmj3L7x9V_djDNK88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.224.0/22
Signature Algorithm: sha256WithRSAEncryption
18:25:82:39:e5:6e:7f:e2:c4:02:66:1c:43:9d:ef:a0:d2:8d:
f2:09:58:25:6f:f1:d7:e0:59:f7:e2:b1:32:9b:63:f3:ce:cb:
bb:84:11:b5:7c:c6:f7:16:68:3a:72:d0:e2:7c:a6:47:c5:6b:
42:e2:72:48:67:6b:41:7b:a7:cb:dd:6a:d0:63:79:ee:1b:32:
e6:4a:af:3d:eb:4b:48:3d:a8:db:22:31:3c:c2:3e:03:af:40:
d1:ed:22:b8:71:fc:99:24:b3:3e:0d:48:9f:22:93:d8:43:d3:
46:aa:13:66:7f:65:b2:29:cd:11:7e:83:e2:7d:bf:90:f2:6b:
94:8d:c9:57:40:47:fb:30:b2:fa:ae:be:84:d5:68:c2:a4:3b:
2c:be:64:ca:f9:ee:6a:a2:af:ab:b8:6f:ce:4b:62:c7:5e:82:
bb:4b:8c:a4:ba:7a:0f:c0:9e:f4:6a:e9:3b:6e:9a:a9:1f:88:
38:b9:92:51:1f:e8:a7:e8:09:82:88:b2:cc:3b:11:81:e8:35:
23:3b:2e:34:d9:5e:28:58:a3:c3:f3:16:7a:55:d4:89:6b:18:
cc:c2:be:a2:e1:c0:de:f2:49:e6:8f:e1:40:88:c6:5c:26:c9:
fd:82:9b:8b:60:ab:40:87:66:24:09:19:c3:f3:b2:df:90:63:
bd:e1:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:28 2025 by rpki-client