Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/hyaj4NlGFcmb8YwdQipnGWLkuvI.roa
File: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (raw, json)
Hash identifier: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=
Subject key identifier: 87:26:A3:E0:D9:46:15:C9:9B:F1:8C:1D:42:2A:67:19:62:E4:BA:F2
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 01942522072405D060ECD2E3BD1B4C7B29B0
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/hyaj4NlGFcmb8YwdQipnGWLkuvI.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204281
IP address blocks: 94.26.4.0/22 maxlen: 24
94.26.8.0/21 maxlen: 24
94.26.10.0/24 maxlen: 24
94.26.16.0/21 maxlen: 24
94.26.26.0/24 maxlen: 24
94.26.30.0/24 maxlen: 24
94.26.45.0/24 maxlen: 24
94.26.66.0/24 maxlen: 24
94.26.72.0/24 maxlen: 24
94.26.74.0/23 maxlen: 24
94.26.75.0/24 maxlen: 24
94.26.86.0/23 maxlen: 24
94.26.94.0/24 maxlen: 24
94.26.96.0/24 maxlen: 24
94.26.100.0/24 maxlen: 24
94.26.102.0/24 maxlen: 24
94.26.108.0/24 maxlen: 24
185.108.140.0/22 maxlen: 24
2a01:b760::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:07:24:05:d0:60:ec:d2:e3:bd:1b:4c:7b:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8726a3e0d94615c99bf18c1d422a671962e4baf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:c4:de:f2:8c:50:55:74:3e:c4:50:6c:80:
09:ca:1b:5a:a0:c2:fe:00:8c:5a:08:d2:bb:b8:f6:
e4:7f:6e:b0:4f:08:ef:bd:8a:f4:6a:db:63:97:bd:
4f:63:73:44:3a:ec:66:04:6a:e2:e2:7f:e4:5c:67:
da:75:88:8a:ac:d6:0c:f8:d4:31:53:7f:e6:5a:4e:
83:ef:1b:81:47:b4:66:9d:df:ca:58:73:c6:59:23:
29:0a:10:90:b9:9f:be:db:34:2d:b2:69:e9:b9:07:
b2:9e:d3:c3:32:21:da:ba:9b:3f:b4:ab:6e:2a:62:
c0:ba:71:fe:8c:d9:a7:ad:c7:c2:93:24:b4:f5:cb:
df:e1:4b:14:ef:06:cf:75:0e:65:43:80:46:97:8b:
b6:f2:4e:b1:19:d4:e8:a9:eb:11:ec:3d:2d:4e:23:
1b:e4:06:65:70:59:9b:70:eb:0e:15:41:b3:47:52:
1d:29:83:2c:b9:5d:df:f2:b5:a2:a0:fb:33:b6:e5:
7e:82:cc:6c:ba:92:71:10:a7:71:2d:e1:58:10:f3:
b1:07:4b:52:98:11:f8:aa:3c:95:60:13:ae:37:1e:
ca:58:51:cf:a3:5a:66:80:7d:22:20:0f:e7:c7:c0:
af:ba:3d:7b:ed:17:09:6c:55:6f:7c:2b:45:60:6b:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:A3:E0:D9:46:15:C9:9B:F1:8C:1D:42:2A:67:19:62:E4:BA:F2
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/hyaj4NlGFcmb8YwdQipnGWLkuvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.4.0-94.26.23.255
94.26.26.0/24
94.26.30.0/24
94.26.45.0/24
94.26.66.0/24
94.26.72.0/24
94.26.74.0/23
94.26.86.0/23
94.26.94.0/24
94.26.96.0/24
94.26.100.0/24
94.26.102.0/24
94.26.108.0/24
185.108.140.0/22
IPv6:
2a01:b760::/32
Signature Algorithm: sha256WithRSAEncryption
3f:f4:5a:d1:c8:60:ae:c2:f8:f8:ad:56:9a:1c:32:26:0d:43:
d7:40:05:ab:2b:f3:4c:30:c5:44:5c:3e:88:93:09:83:ee:ea:
c8:49:1b:e7:cd:4b:a7:43:4e:d7:64:97:c5:0e:74:ad:92:bf:
a8:b9:51:f6:7d:4c:64:33:46:77:f6:50:63:3d:be:58:c1:34:
1a:c3:b7:70:30:2e:35:89:3b:cb:78:01:ed:e4:6a:33:c1:5d:
69:79:ef:f0:ab:ae:f6:d7:c2:64:b3:bc:45:a6:37:0c:99:01:
bb:be:d5:10:94:ab:bc:99:5c:9c:d2:54:d5:d8:b4:c0:28:3f:
66:28:94:47:c6:5b:37:b1:16:5e:5d:ae:38:e4:3e:b1:8f:f2:
e7:bd:05:b4:31:88:98:88:ad:e0:ee:47:21:30:6b:94:07:f6:
72:63:9b:b8:59:5e:45:ea:32:d2:75:c5:8b:f1:28:1d:aa:16:
a4:e1:8c:0f:fc:f1:9c:6e:78:d9:da:bd:16:86:a0:a0:ca:96:
55:c9:40:d0:8f:9a:d6:ab:21:f8:ae:25:00:dd:cc:dc:d0:0b:
ee:1c:e7:90:2f:98:28:be:03:11:de:72:da:75:4a:14:c5:ec:
eb:59:61:1a:a0:9d:b4:0c:6a:f7:28:f5:01:4f:f2:75:42:d1:
c4:86:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:14 2025 by rpki-client