Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/0u9mvlcHL24_1VpgxTSLwDQ4IiE.roa
File: 0u9mvlcHL24_1VpgxTSLwDQ4IiE.roa (raw, json)
Hash identifier: xmaisvIiAotKLIDJwG7Bft9M5BHT8zCviBOqM0v4s2M=
Subject key identifier: D2:EF:66:BE:57:07:2F:6E:3F:D5:5A:60:C5:34:8B:C0:34:38:22:21
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01867F8D16F4581C6B4FF3A0892E22762415
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/0u9mvlcHL24_1VpgxTSLwDQ4IiE.roa
Signing time: Thu 23 Feb 2023 18:33:18 +0000
ROA not before: Thu 23 Feb 2023 18:33:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.231.104.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:8d:16:f4:58:1c:6b:4f:f3:a0:89:2e:22:76:24:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Feb 23 18:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2ef66be57072f6e3fd55a60c5348bc034382221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:84:b8:fa:8f:3c:dd:3a:c6:64:25:10:21:
e3:37:38:bd:9e:f5:3e:cc:90:42:d6:a5:24:5b:fa:
e5:4c:d9:34:5d:72:5f:86:63:b0:24:38:02:90:a1:
8f:90:2a:fd:af:6d:49:61:4e:83:23:67:75:9a:5a:
74:de:af:ac:4e:92:98:c3:62:52:a0:c0:3a:c9:63:
cd:ef:54:eb:b4:1f:22:4f:8b:84:b2:2b:05:c2:86:
e8:39:ba:23:6e:14:f7:e3:bf:1a:fe:e1:24:10:f9:
0c:a7:33:1c:e5:18:7c:62:66:38:3d:3b:f5:b2:27:
0b:f9:2a:59:d2:d7:ad:8d:b0:4c:a8:89:bb:46:cd:
6c:67:5d:cb:a2:e4:0a:c4:9a:50:74:d6:4f:c2:f2:
55:e1:87:de:3a:ba:1d:fd:11:00:1d:eb:d2:a3:06:
31:17:a8:8a:90:9a:ad:b2:32:b1:66:36:1a:ff:84:
dc:4d:47:8b:77:3b:2e:1d:5f:a7:0f:d2:20:24:ab:
47:9b:cd:a0:cb:1d:cc:4a:49:f5:77:74:fe:46:3f:
45:a0:3b:2a:6f:38:f5:db:b0:d5:a8:94:db:9e:66:
ee:29:77:69:16:cb:a8:b6:84:1a:ed:c7:06:e3:e8:
31:6d:4f:b4:64:84:b5:e4:77:ea:0b:bf:58:74:7f:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:66:BE:57:07:2F:6E:3F:D5:5A:60:C5:34:8B:C0:34:38:22:21
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/0u9mvlcHL24_1VpgxTSLwDQ4IiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.240.0/21
46.231.104.0/21
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:1d:a8:6c:ba:e2:5b:cc:15:45:e8:94:c9:22:f0:32:df:53:
a9:6e:96:75:73:cf:85:83:ce:19:5f:80:9b:30:a2:21:0c:e0:
3a:c7:b6:8c:a9:90:86:6f:8d:31:03:0e:08:5d:b6:6c:b5:20:
84:b8:29:4b:96:51:4d:05:e4:f9:4b:28:59:af:04:82:c6:fa:
26:18:5f:dd:43:e4:f9:09:85:02:e1:b9:e7:3e:3c:e1:36:04:
79:0e:4a:ac:8b:5b:67:0a:4d:3e:ab:99:1f:60:dc:29:d6:7f:
eb:67:12:a9:f1:80:c1:58:9f:7d:9e:09:37:0b:09:63:08:f4:
c5:de:2b:44:c5:36:f9:7f:e4:06:c3:6a:ed:12:ca:42:d7:8e:
76:c3:e9:71:aa:63:28:cb:3b:b3:16:71:36:17:16:50:5d:1a:
bf:c3:7a:24:44:ea:1f:50:2a:69:8d:a1:0f:2c:76:f1:75:93:
cb:22:4d:52:ac:2b:7b:6c:1f:0f:7a:0b:90:3e:a3:74:f9:ec:
1c:d4:db:c7:3d:f3:09:2f:9c:4d:8c:64:6b:bf:e6:53:ab:6c:
5c:48:4f:7d:96:a9:53:18:d7:9a:f1:a4:56:2f:16:80:68:7d:
9e:a2:bd:6c:ba:f7:2d:35:79:e0:83:ad:a5:5a:4e:17:a9:8f:
49:9d:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:55:35 2025 by rpki-client