Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/1aGlGWaEvcBIQ1mUs1fewZb8rPU.roa
File: 1aGlGWaEvcBIQ1mUs1fewZb8rPU.roa (raw, json)
Hash identifier: CaVxW/GXQL41lugIZw2C6OuL8Tg9qLRiLwAvl083TtE=
Subject key identifier: D5:A1:A5:19:66:84:BD:C0:48:43:59:94:B3:57:DE:C1:96:FC:AC:F5
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0186BDAA85104C4E10A6DE2C1A5A67C615B0
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/1aGlGWaEvcBIQ1mUs1fewZb8rPU.roa
Signing time: Tue 07 Mar 2023 20:01:54 +0000
ROA not before: Tue 07 Mar 2023 20:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 88.135.96.0/20 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:aa:85:10:4c:4e:10:a6:de:2c:1a:5a:67:c6:15:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Mar 7 20:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5a1a5196684bdc048435994b357dec196fcacf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:97:19:ff:dc:0f:df:bc:a2:15:f3:c3:54:
ea:a1:4a:02:15:fc:2c:07:3d:8f:e2:f0:61:29:58:
e4:64:c7:60:e1:21:fa:a9:a3:b0:a3:80:2f:67:5f:
aa:ec:b1:37:9a:d3:8d:77:9a:3b:28:06:8b:ce:36:
06:79:28:2f:4e:bc:cc:a1:b5:23:f9:34:0e:3e:5a:
d4:a9:7a:4a:0b:96:13:5e:52:1a:d7:bd:2e:01:01:
34:67:d8:ac:3a:cc:0c:2e:2a:f0:0f:4e:a4:87:43:
db:19:80:2c:8f:a2:20:fb:6b:35:82:58:77:7b:ab:
85:c9:36:d2:c3:18:24:3c:d6:53:cc:1e:56:3b:30:
14:91:63:66:aa:4f:28:f3:b5:a9:fd:09:dd:8c:5a:
8c:41:ee:64:4f:b7:88:00:9e:dc:b1:01:03:23:df:
f1:6f:d4:59:bc:cd:df:46:a1:bc:e3:8e:ad:c1:76:
aa:d1:04:0f:2f:82:f2:22:1a:ee:67:97:2d:db:83:
1f:ae:bd:6d:5f:34:31:57:81:84:b6:87:df:0c:96:
36:9a:e2:64:a4:4c:80:c0:14:25:f4:d7:a5:6d:74:
47:ca:6d:d7:e2:5e:22:98:31:cc:bf:da:99:82:72:
ea:3b:48:3e:c5:2e:81:87:2e:fe:e0:09:e9:49:00:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A1:A5:19:66:84:BD:C0:48:43:59:94:B3:57:DE:C1:96:FC:AC:F5
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/1aGlGWaEvcBIQ1mUs1fewZb8rPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
88.135.96.0/20
94.26.24.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
09:1f:1d:e5:8a:3a:29:47:9d:6b:89:a1:22:0d:a3:96:10:27:
a0:52:9f:98:67:9d:a7:76:83:b2:68:ab:76:ff:4a:b8:94:d2:
f0:21:1a:9d:c7:6d:18:43:b8:d5:02:84:16:a3:dc:d0:4b:0e:
cc:b4:db:49:0c:30:6f:67:9e:60:94:6c:a0:a2:cf:2b:f8:1a:
ae:0b:c5:45:66:17:86:67:a1:8b:d0:d0:7d:38:b6:76:3b:6f:
38:f7:5c:3a:31:5d:14:0f:a1:0d:f8:5c:d7:9d:0d:49:1c:2d:
40:d5:56:e0:49:7c:4a:59:19:d4:a6:11:7c:37:10:d8:31:ef:
45:a6:3d:26:f1:7b:cc:b6:5b:c0:e9:55:70:d6:cc:0e:65:d5:
6d:02:0c:02:63:71:eb:7d:fa:52:d8:ea:64:37:02:1b:24:42:
3a:a1:5c:a1:c3:ea:13:8e:0a:18:08:fb:fc:9e:de:62:b6:8c:
a2:cf:08:78:c5:e1:0c:15:f1:52:30:24:45:f7:82:fc:a0:9e:
ae:60:7b:3e:58:3e:9b:6c:ee:63:8f:e9:20:52:84:1e:d6:04:
fc:2b:73:5e:bf:39:48:78:e5:2b:6c:18:e3:ae:00:b4:36:49:
58:1b:fd:f6:d0:44:1b:97:99:9a:e7:d2:ec:35:0a:b2:4e:c5:
c7:c9:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:49:08 2025 by rpki-client