Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/61XltquQxeJBMIPUQFNpJdqoF_Q.roa
File: 61XltquQxeJBMIPUQFNpJdqoF_Q.roa (raw, json)
Hash identifier: NDwhrYZ5GVi2NfTzcAfbcTh/pZbPw4y0aiN6qdiKbho=
Subject key identifier: EB:55:E5:B6:AB:90:C5:E2:41:30:83:D4:40:53:69:25:DA:A8:17:F4
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018AEA50D3A6A92851C3D969FBB4ADB542F4
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/61XltquQxeJBMIPUQFNpJdqoF_Q.roa
Signing time: Sun 01 Oct 2023 08:18:00 +0000
ROA not before: Sun 01 Oct 2023 08:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 94.26.110.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:50:d3:a6:a9:28:51:c3:d9:69:fb:b4:ad:b5:42:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Oct 1 08:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb55e5b6ab90c5e2413083d440536925daa817f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:a5:b0:8b:0c:45:7e:a3:bf:91:18:58:70:
41:ae:f2:a2:66:10:48:e0:30:9d:37:a8:89:7f:65:
41:8b:30:da:fa:71:c8:00:6f:58:ad:8d:1a:a3:b7:
8a:7b:fe:1f:9a:97:ce:c0:a8:c2:45:e8:e7:64:32:
9f:01:e4:ea:12:82:8f:41:16:2a:d2:3d:2b:e1:ba:
75:87:6d:4d:36:7b:3b:21:82:35:95:8f:8d:74:d7:
50:0c:a4:22:8e:84:c1:4f:9a:3b:57:04:9c:64:b4:
b2:b9:f1:d9:70:d8:eb:07:ca:96:28:4e:45:95:2a:
00:f3:92:09:d4:77:4d:9a:05:7f:e5:25:ac:cd:21:
3f:2c:f2:49:b0:29:4b:fa:e3:1f:98:62:2d:19:52:
ef:3e:42:68:cd:ef:81:a7:a4:55:08:84:91:dc:ed:
1c:82:c3:9d:84:90:b5:c4:16:d2:95:46:74:37:49:
47:8f:de:3e:90:b6:0c:1e:e4:98:da:f5:38:95:d5:
1b:e8:55:57:9d:a3:b5:b1:73:c7:cd:a2:eb:7b:d2:
a0:b8:25:63:ba:92:10:58:9d:bf:15:de:f3:6f:eb:
81:56:51:d3:5d:ba:02:de:bc:1a:dc:47:ee:12:50:
5f:fe:62:73:58:6a:52:a0:5b:fb:4d:21:ad:88:42:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:E5:B6:AB:90:C5:E2:41:30:83:D4:40:53:69:25:DA:A8:17:F4
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/61XltquQxeJBMIPUQFNpJdqoF_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:72:66:d3:e8:30:aa:3b:cc:6e:be:e2:51:22:f4:22:ba:c4:
cb:9f:ad:20:b4:9e:45:a2:9d:de:cc:95:b9:72:98:18:a2:26:
c6:ec:29:62:22:f2:9d:16:b9:10:ce:4f:e6:8a:de:c3:9a:f4:
c7:af:ce:95:d6:84:11:0d:00:04:9d:f7:40:1a:5f:ed:21:a5:
46:e9:53:6b:c1:26:08:71:6a:07:1c:38:25:32:99:8a:16:a4:
36:73:2b:1f:61:fe:06:b9:1c:b4:d2:32:e1:e3:bf:7e:ad:2e:
45:78:6c:75:e1:1f:e3:47:5d:8e:be:c5:6a:24:bd:93:6a:e9:
b9:fd:4c:99:bc:11:fa:4a:66:69:ad:3a:14:5e:16:82:a0:e2:
0d:8f:60:89:8e:d0:91:cd:55:e5:ff:33:68:7f:c3:b0:a4:5f:
7a:3a:1e:cc:e5:5d:10:32:97:4f:ae:e0:42:34:54:e1:e0:32:
28:ce:49:88:2f:bd:89:6e:6a:a3:73:21:12:51:8b:9f:d0:07:
88:7b:ee:fb:5a:a4:44:46:73:c1:e9:d2:c1:fe:91:df:3e:c3:
48:7b:ac:4c:cc:98:c3:85:99:f9:df:62:34:af:49:8a:b5:5f:
19:99:10:82:51:8e:76:dc:0a:11:88:dc:fe:8a:e9:82:4e:ab:
a3:2a:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:48:50 2025 by rpki-client