Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/RXXjmoL-CAoaPtkTkT9F38u6oTw.roa
File: RXXjmoL-CAoaPtkTkT9F38u6oTw.roa (raw, json)
Hash identifier: lKJ4JFqgXXyRWdA5QJA/gFr0XUMdh99e0yBvh/+tDwU=
Subject key identifier: 45:75:E3:9A:82:FE:08:0A:1A:3E:D9:13:91:3F:45:DF:CB:BA:A1:3C
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01865CC0FE715FE8E20F0A0ED03B0E2089E4
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/RXXjmoL-CAoaPtkTkT9F38u6oTw.roa
Signing time: Fri 17 Feb 2023 00:23:17 +0000
ROA not before: Fri 17 Feb 2023 00:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:c0:fe:71:5f:e8:e2:0f:0a:0e:d0:3b:0e:20:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Feb 17 00:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4575e39a82fe080a1a3ed913913f45dfcbbaa13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:13:dc:20:c9:d1:55:8d:e2:64:cc:b7:79:
ce:28:9a:12:16:38:c5:7f:5a:43:2e:09:48:3f:5f:
f8:87:e5:e3:91:ae:4e:f0:8e:e5:fc:2f:fd:00:c1:
50:2f:69:35:06:68:73:97:ba:ac:fe:87:cd:de:15:
36:6b:24:1f:46:95:b8:a1:b5:6e:67:03:62:2b:47:
ea:ad:56:12:41:35:47:88:92:61:28:7b:15:bf:3b:
90:ce:32:cd:8f:86:48:8d:aa:46:e1:f6:ac:96:3d:
bf:82:6c:2b:4c:cb:e2:bb:23:b4:41:43:65:7d:60:
14:7f:30:1b:52:23:01:00:8a:4a:f4:36:f8:74:20:
4f:d1:33:ff:3c:6f:a3:8a:b2:cf:d9:5c:11:94:78:
e0:bc:b8:f5:b1:b3:37:91:58:09:78:37:ce:ed:e4:
75:b3:ac:3c:75:eb:2f:45:cc:c1:eb:4d:36:2b:38:
87:2b:51:56:f1:04:7e:0d:6b:b5:56:92:eb:b8:93:
6a:b5:84:39:54:a1:f5:a3:ae:5e:cb:37:b7:20:58:
73:f3:77:71:4f:2c:97:c0:4b:0d:c3:42:d2:64:e7:
e3:f9:33:cb:a1:3e:62:f5:cd:a3:8c:dd:f5:46:1b:
d3:d7:fd:e3:82:03:68:c1:07:a5:b4:e9:68:4b:70:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:E3:9A:82:FE:08:0A:1A:3E:D9:13:91:3F:45:DF:CB:BA:A1:3C
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/RXXjmoL-CAoaPtkTkT9F38u6oTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
94.26.24.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:49:c4:b3:41:db:c8:53:dc:fe:d6:d4:97:40:72:19:55:ca:
bc:0e:a9:33:25:e8:b3:3d:e6:fc:88:a1:35:52:88:6d:2a:b6:
72:5f:93:43:bf:ae:9d:42:80:16:09:ca:67:4f:a6:8f:2b:36:
c1:01:2e:3c:53:c8:8b:06:3e:7f:33:1d:87:1a:5d:32:43:c1:
96:4c:06:38:ce:b7:cc:80:91:ae:8c:ed:89:d6:4b:7b:73:2d:
11:9b:c8:2d:b1:5c:d0:ae:2a:9f:7a:88:58:93:06:e5:1b:3f:
55:58:fc:d8:b5:5c:2f:58:5d:62:f6:50:88:07:93:d8:b0:4b:
c5:ae:db:2c:16:70:7e:6e:b3:23:88:96:c2:d8:5b:9a:89:84:
52:7e:ed:39:26:88:6c:33:3e:a6:16:fa:50:98:1a:8c:bc:c8:
3b:0d:1a:fd:c6:ac:ee:50:3a:08:70:05:28:8f:90:1c:fb:3e:
3d:a5:af:e8:b5:dc:18:e6:dc:bc:04:0c:52:6a:31:b3:5b:ac:
a8:de:5d:d8:a2:4f:a2:2a:b4:ed:81:32:6d:81:c9:6c:80:41:
67:ef:11:98:40:87:e0:48:e9:c4:21:3b:b3:62:82:0d:75:68:
e8:fa:ec:c7:fa:8a:6f:03:64:43:b7:3b:e3:54:86:db:3d:d8:
72:dc:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:54:07 2025 by rpki-client