Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/o-iB_z6zZ8T4dnfYBhxo3ehv7GY.roa
File: o-iB_z6zZ8T4dnfYBhxo3ehv7GY.roa (raw, json)
Hash identifier: qDZQwBk+mOB1nlqVggQlXqd4I4QnKFo5J9jwMlLIjq4=
Subject key identifier: A3:E8:81:FF:3E:B3:67:C4:F8:76:77:D8:06:1C:68:DD:E8:6F:EC:66
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 0197441AD20B92D4A2A9BC6A4251F5D53DC7
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/o-iB_z6zZ8T4dnfYBhxo3ehv7GY.roa
Signing time: Fri 06 Jun 2025 07:18:17 +0000
ROA not before: Fri 06 Jun 2025 07:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.32.0/24 maxlen: 24
94.26.35.0/24 maxlen: 24
94.26.37.0/24 maxlen: 24
94.26.83.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:1a:d2:0b:92:d4:a2:a9:bc:6a:42:51:f5:d5:3d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jun 6 07:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e881ff3eb367c4f87677d8061c68dde86fec66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:0e:e7:23:02:35:10:6b:b9:cd:aa:14:34:
84:18:a1:70:57:f9:c2:d4:39:32:66:51:17:83:de:
28:ae:e2:17:86:ed:d5:cf:c4:82:a9:0a:47:36:b6:
b5:28:fd:ba:94:e0:6a:82:ab:16:0a:00:1d:76:6b:
eb:e9:d1:58:a1:5b:3e:f6:18:1e:8e:0b:16:08:b5:
f8:73:db:ed:f2:3e:b4:8d:44:16:25:74:67:a4:64:
83:45:02:f7:5f:1a:f2:b4:6c:e5:88:cc:37:08:91:
c9:bd:db:cb:d9:5b:59:cd:98:cb:10:11:22:e2:72:
e4:85:a2:9f:76:ad:35:43:60:36:6d:94:b5:dd:15:
6b:8d:c3:73:c9:de:34:bd:8c:23:33:5c:1d:f9:20:
4d:42:8f:50:b1:b9:a2:73:a8:23:54:d5:70:d4:95:
8e:2b:d3:6b:16:87:c8:93:90:d4:39:6b:71:33:f3:
72:6e:f4:ec:a8:27:b9:e4:b9:9c:de:8f:49:58:be:
4e:5a:97:be:ee:08:d3:d4:c8:df:b2:17:09:ee:75:
bc:e2:31:3a:c0:4d:5d:76:2d:1f:d9:65:5c:6d:43:
53:9e:b9:fb:cd:bb:d3:c3:ca:9f:be:5e:ec:c4:01:
8d:8c:0c:15:69:3d:cb:a5:d9:3d:9a:18:28:58:3a:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:81:FF:3E:B3:67:C4:F8:76:77:D8:06:1C:68:DD:E8:6F:EC:66
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/o-iB_z6zZ8T4dnfYBhxo3ehv7GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.32.0/24
94.26.35.0/24
94.26.37.0/24
94.26.83.0/24
94.26.88.0/24
Signature Algorithm: sha256WithRSAEncryption
45:39:54:5c:6f:12:5f:3e:e4:14:46:4f:1c:e3:45:f9:bb:b2:
26:95:9d:b7:63:a1:bf:76:14:7a:53:9e:27:ce:7f:a7:50:24:
48:1e:fb:e3:2b:c8:47:d8:a2:04:f9:6e:74:2e:59:ea:aa:c0:
3f:81:7b:b1:87:7f:c9:43:99:c8:3b:79:a0:11:79:5a:cb:8a:
ba:2c:b2:49:37:6b:0d:91:2b:d8:2f:73:f7:a3:6d:6a:b2:71:
5e:49:33:cb:a8:fa:66:54:c7:4d:be:be:a7:8f:46:30:55:56:
d9:7d:16:f5:10:83:39:07:88:8b:59:72:39:9b:ac:86:20:fd:
96:26:73:8c:66:76:28:81:d4:c7:56:20:22:24:cc:a9:4b:2d:
f1:78:1f:48:dd:a2:21:39:0c:ea:6c:8c:47:76:3c:2a:46:92:
fe:2e:ad:2f:01:16:fe:c4:78:42:c8:0f:b7:33:82:7c:13:b2:
ce:82:a0:0b:c4:bc:dd:35:bf:60:ee:30:2d:db:ba:a9:b4:5e:
d9:e4:a7:d9:f3:b6:80:13:e3:7c:86:19:32:01:80:27:66:70:
94:97:f7:07:d4:d6:e7:00:03:2a:6f:47:28:f3:b6:38:5d:be:
49:e5:d8:75:ac:fe:f5:70:f9:5d:12:fd:ab:36:7b:ba:49:5b:
24:f5:53:e9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZdEGtILktSiqbxqQlH11T3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1
NThlYTkwHhcNMjUwNjA2MDcxODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2U4ODFmZjNlYjM2N2M0Zjg3Njc3ZDgwNjFjNjhkZGU4NmZlYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPsO5yMCNRBruc2qFDSEGKFwV/nC
1DkyZlEXg94oruIXhu3Vz8SCqQpHNra1KP26lOBqgqsWCgAddmvr6dFYoVs+9hge
jgsWCLX4c9vt8j60jUQWJXRnpGSDRQL3XxrytGzliMw3CJHJvdvL2VtZzZjLEBEi
4nLkhaKfdq01Q2A2bZS13RVrjcNzyd40vYwjM1wd+SBNQo9Qsbmic6gjVNVw1JWO
K9NrFofIk5DUOWtxM/NybvTsqCe55Lmc3o9JWL5OWpe+7gjT1MjfshcJ7nW84jE6
wE1ddi0f2WVcbUNTnrn7zbvTw8qfvl7sxAGNjAwVaT3Lpdk9mhgoWDpk1QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKPogf8+s2fE+HZ32AYcaN3ob+xmMB8GA1UdIwQY
MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt
ODc5MDIwNmYwZDc0LzEvby1pQl96NnpaOFQ0ZG5mWUJoeG8zZWh2N0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0
LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXhogAwQA
XhojAwQAXholAwQAXhpTAwQAXhpYMA0GCSqGSIb3DQEBCwUAA4IBAQBFOVRcbxJf
PuQURk8c40X5u7ImlZ23Y6G/dhR6U54nzn+nUCRIHvvjK8hH2KIE+W50LlnqqsA/
gXuxh3/JQ5nIO3mgEXlay4q6LLJJN2sNkSvYL3P3o21qsnFeSTPLqPpmVMdNvr6n
j0YwVVbZfRb1EIM5B4iLWXI5m6yGIP2WJnOMZnYogdTHViAiJMypSy3xeB9I3aIh
OQzqbIxHdjwqRpL+Lq0vARb+xHhCyA+3M4J8E7LOgqALxLzdNb9g7jAt27qptF7Z
5KfZ87aAE+N8hhkyAYAnZnCUl/cH1NbnAAMqb0co87Y4Xb5J5dh1rP71cPldEv2r
Nnu6SVsk9VPp
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:13:54 2025 by rpki-client