Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/IaBCVfTJC4y9iR-pfXX1GZxTAlg.roa
File: IaBCVfTJC4y9iR-pfXX1GZxTAlg.roa (raw, json)
Hash identifier: anue5O2ac9tJ1L7ZiQWkNTxcd2vj9e/sTuUHUFAr6mk=
Subject key identifier: 21:A0:42:55:F4:C9:0B:8C:BD:89:1F:A9:7D:75:F5:19:9C:53:02:58
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01867F8D187E0F6925688742F17074BD1819
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/IaBCVfTJC4y9iR-pfXX1GZxTAlg.roa
Signing time: Thu 23 Feb 2023 18:33:18 +0000
ROA not before: Thu 23 Feb 2023 18:33:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:8d:18:7e:0f:69:25:68:87:42:f1:70:74:bd:18:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Feb 23 18:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21a04255f4c90b8cbd891fa97d75f5199c530258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:a5:03:bd:9c:c7:c6:7d:4c:e1:5d:50:16:
9c:59:d2:8b:1e:7f:84:aa:41:6b:84:ac:bc:a3:ab:
92:68:b4:7b:79:49:c9:5c:d3:32:63:50:3d:86:72:
75:7b:63:ef:86:01:29:71:1a:63:bd:72:2d:2b:f4:
f1:8f:07:4f:5e:73:d3:7d:32:a9:ed:4b:f7:9c:d1:
f6:de:b1:31:da:55:51:ad:48:3d:19:5d:db:4b:51:
77:2e:47:47:16:bf:25:32:da:ee:0d:e3:87:f1:a2:
9d:3c:4e:0c:14:4a:c6:3c:39:74:a1:7b:d3:4a:d2:
ec:e3:28:9d:af:28:3b:0a:65:c1:7d:f2:4f:4f:10:
48:7c:8f:02:43:a4:15:cf:96:d2:36:8e:52:09:c7:
12:4b:61:4f:92:2f:45:c9:3e:41:02:93:a1:4c:94:
49:67:10:6e:6e:44:48:38:ac:af:32:4c:ee:2d:36:
8c:b1:db:1b:e0:b3:d7:ce:94:ce:83:1c:cf:d4:ef:
3b:76:e8:d8:bc:84:11:38:e0:37:d7:f0:04:a1:25:
3d:8b:4d:b2:a9:9d:24:5d:4c:44:80:f9:b8:94:98:
42:b0:43:50:c8:67:ce:39:d1:59:71:b8:b2:24:d9:
e8:c7:b5:3c:4d:42:cc:06:d0:c9:f0:d2:f5:02:66:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:42:55:F4:C9:0B:8C:BD:89:1F:A9:7D:75:F5:19:9C:53:02:58
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/IaBCVfTJC4y9iR-pfXX1GZxTAlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.24.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
96:08:4d:74:a9:0b:40:01:f5:16:92:d6:f8:60:8c:2a:8a:90:
40:f4:35:58:5a:2c:60:bb:46:b8:07:52:15:43:8b:30:32:a3:
87:88:d6:2e:8e:c2:30:9d:37:44:81:c2:ff:18:96:b9:67:d4:
de:8f:5d:5c:74:7e:e2:c4:f3:b0:50:0e:12:57:8a:09:bb:ea:
10:57:2a:4b:3f:bf:d3:d5:da:30:45:e9:0f:1c:0f:32:34:a7:
e3:33:aa:f3:2f:cc:9d:52:14:15:f6:d9:89:50:ae:be:d1:cf:
8a:a1:7f:b6:81:20:57:e6:49:f5:93:2d:1e:d9:7f:2a:2b:53:
b7:e5:2e:b0:5a:25:7f:7b:eb:80:94:07:5e:a1:10:c8:d3:e0:
e3:d4:89:a5:e8:82:49:0a:f1:88:7b:42:b3:06:e1:8a:ac:08:
a9:49:0d:68:b3:40:55:2b:47:e8:fc:f7:14:ba:4b:86:93:84:
31:56:48:12:50:34:35:be:f4:29:70:87:88:72:73:22:b6:b9:
68:b6:be:a6:76:73:a8:2c:b5:cf:42:a1:3f:27:9a:69:b7:dd:
b9:89:a3:f9:52:16:a9:f4:62:6f:6c:c1:ee:3a:11:6f:cf:f8:
c9:11:05:76:f3:5a:a6:c3:bc:1b:5e:38:3e:ba:77:16:67:66:
60:b6:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:55:47 2025 by rpki-client