Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/O4_YFiC73PK34XZ288sYqEXLM-8.roa
File: O4_YFiC73PK34XZ288sYqEXLM-8.roa (raw, json)
Hash identifier: B7PKWZoaTJDvLZT59LK3cwkXd7sYG+3x1S43xrFivAo=
Subject key identifier: 3B:8F:D8:16:20:BB:DC:F2:B7:E1:76:76:F3:CB:18:A8:45:CB:33:EF
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01867F8D181566206EDF5C1FE2CA58CA0EFE
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/O4_YFiC73PK34XZ288sYqEXLM-8.roa
Signing time: Thu 23 Feb 2023 18:33:18 +0000
ROA not before: Thu 23 Feb 2023 18:33:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 46.231.104.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:8d:18:15:66:20:6e:df:5c:1f:e2:ca:58:ca:0e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Feb 23 18:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b8fd81620bbdcf2b7e17676f3cb18a845cb33ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:4e:84:b2:92:75:02:8b:db:bd:44:06:3b:
8e:d5:f6:ce:89:e3:95:23:d0:04:30:41:be:72:b2:
70:f0:4c:cc:2e:5f:cc:0f:69:4a:21:e8:46:64:0e:
c3:ea:a4:c2:84:30:f0:c3:b0:01:b7:41:e5:5e:40:
b9:f0:f8:2c:03:53:ff:7f:b8:e9:77:be:72:f0:91:
f3:47:fe:17:9b:87:44:80:a5:92:6e:04:58:0a:63:
ea:b0:82:0c:70:d4:a0:5a:42:45:df:ab:99:ad:28:
08:7d:59:47:8d:c1:7a:2d:bb:15:21:88:43:2c:dc:
e9:75:49:bb:e1:91:9d:11:64:ee:75:52:d2:44:db:
6c:04:fd:a6:83:08:c0:fb:97:1f:eb:55:bc:ab:35:
d8:07:c9:8e:eb:6f:a3:13:71:c8:9f:a2:b6:be:39:
e8:30:34:c5:fe:19:f6:ad:9c:5a:81:0c:5c:ea:9f:
82:81:29:90:ff:43:f7:0e:1a:4c:6f:54:19:9e:88:
13:85:1c:78:98:25:9f:87:21:3d:03:a1:ad:a5:23:
07:22:eb:e3:df:5f:1a:c1:ec:00:00:f6:0a:10:c8:
60:f7:82:b3:ba:6f:49:0a:e5:61:9a:0c:53:c4:5d:
17:f6:ea:9e:2c:fa:51:b9:0d:3a:2c:12:5c:ed:1f:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:D8:16:20:BB:DC:F2:B7:E1:76:76:F3:CB:18:A8:45:CB:33:EF
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/O4_YFiC73PK34XZ288sYqEXLM-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.240.0/21
46.231.104.0/21
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:7e:b0:67:15:63:17:59:42:bf:f7:4f:a9:4f:75:69:0d:d5:
b9:da:0f:b6:ec:83:61:b6:e1:36:92:99:3b:00:a7:bc:9d:0d:
a7:7f:d2:8a:d3:ba:c8:de:01:01:22:1e:2a:44:51:e2:f6:25:
ee:56:15:4b:95:7e:95:e9:c3:a5:c6:d1:d7:d3:ce:76:31:e0:
f7:fe:69:c0:b9:9d:e4:1a:70:1c:2c:63:55:3c:15:f4:89:12:
9c:98:1e:94:99:bb:d6:24:60:10:e7:98:48:a2:8f:b7:07:4c:
50:ea:76:cc:52:da:ea:42:41:4c:09:e7:3b:57:19:0b:ff:f9:
0a:b5:e4:60:41:84:e8:76:4b:bf:d1:c1:5d:d4:b8:36:c8:a1:
2c:16:a3:f1:71:35:ee:04:03:3d:49:af:dc:f1:61:1b:9f:4f:
51:1d:a7:f5:ba:1a:0a:41:a0:84:76:cf:18:d9:72:e7:3b:92:
80:49:a0:74:c6:c6:00:d1:61:ec:0e:75:62:3a:08:f8:32:85:
b5:33:5d:95:f7:99:df:7c:d6:d3:4e:11:86:5d:c0:56:8a:e9:
39:b0:a1:3b:eb:ff:02:7e:9f:a9:fe:45:d4:3e:ae:15:14:46:
5e:02:52:84:0b:a3:43:1c:8d:ba:87:86:6f:ce:b6:26:e7:d3:
0b:4f:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:53:51 2025 by rpki-client