Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/T1fclX1ujxyxZ8lS9k70yVPSCfQ.roa
File: T1fclX1ujxyxZ8lS9k70yVPSCfQ.roa (raw, json)
Hash identifier: kx0v76wgJYvcRjWSouXt4UL4tXW+zLwge1pyyXpDvcM=
Subject key identifier: 4F:57:DC:95:7D:6E:8F:1C:B1:67:C9:52:F6:4E:F4:C9:53:D2:09:F4
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018A4F9ED7F081F317B59A95F1D0C3AF4F3E
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/T1fclX1ujxyxZ8lS9k70yVPSCfQ.roa
Signing time: Fri 01 Sep 2023 07:22:04 +0000
ROA not before: Fri 01 Sep 2023 07:22:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 88.135.96.0/20 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:9e:d7:f0:81:f3:17:b5:9a:95:f1:d0:c3:af:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Sep 1 07:22:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f57dc957d6e8f1cb167c952f64ef4c953d209f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:25:d9:30:50:48:fa:0f:5c:50:30:8b:fb:
d7:5b:9f:bb:d2:07:96:a2:76:8e:9b:b3:06:2f:48:
84:6c:cc:07:7d:7c:fa:40:d6:3a:ff:f3:2c:da:15:
da:e8:bb:af:74:bc:bc:04:ec:50:ca:99:a4:9c:ec:
f7:db:3c:59:98:1d:20:8f:41:fc:4a:5f:d3:f4:2c:
01:14:e4:f4:a3:bd:22:e7:de:37:0f:7b:ef:b0:50:
5f:e9:a0:12:65:5a:fa:f2:5f:4b:9b:ab:28:c4:99:
26:4f:96:5a:bd:ca:f2:70:47:bf:96:22:30:c8:2e:
52:4c:25:df:c5:86:f0:a2:b5:b3:a7:0a:38:7a:bf:
89:9f:d7:a7:ec:4b:36:d6:26:9a:bd:c7:79:5f:6b:
45:86:e9:13:02:fa:95:5a:af:c5:50:5e:ec:1f:ef:
5f:78:78:21:86:5b:27:ae:c1:37:fc:e0:3a:d5:01:
4a:de:da:84:38:d4:93:95:89:c2:c4:39:d6:0c:25:
b9:3d:fd:51:8d:73:16:5c:3b:86:a0:d3:16:c6:15:
2d:d6:fd:c2:ac:63:1a:01:4d:f2:39:dc:e5:a5:fe:
87:d0:aa:b7:4c:5a:d2:d5:a0:99:be:73:f8:27:60:
7d:34:17:1a:bb:4b:25:38:cd:cd:55:14:2e:85:3e:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:DC:95:7D:6E:8F:1C:B1:67:C9:52:F6:4E:F4:C9:53:D2:09:F4
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/T1fclX1ujxyxZ8lS9k70yVPSCfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
82:e2:09:4a:b8:b5:1c:62:e3:89:bf:7c:b9:1a:d0:84:70:af:
a8:78:3e:b7:32:72:94:f2:e2:4b:53:94:5d:0a:da:c1:89:3e:
6d:4f:16:44:c0:87:be:12:df:a0:5c:17:41:3e:23:44:df:43:
b6:a9:37:41:96:d0:d4:de:bb:6d:a5:fc:b8:f6:13:4c:29:c2:
a5:85:da:d1:af:76:14:34:2e:dc:de:3e:b3:38:a2:89:58:cc:
2c:fa:57:96:48:6d:05:62:ee:fb:bc:18:91:b4:01:72:3a:44:
41:11:8c:9b:56:31:90:4d:35:eb:24:70:50:70:4f:72:20:47:
4a:80:8c:af:86:e6:69:36:44:2e:9d:8e:fc:c4:21:b6:5f:7d:
cd:9f:1d:eb:53:64:df:64:b5:9b:d2:7e:44:03:a3:63:82:a4:
23:88:69:cc:5c:02:99:06:24:75:8b:61:91:01:c1:4a:15:ec:
8e:2d:0a:2c:70:e0:5e:d9:b6:c4:ff:70:7f:02:1e:fb:7a:1f:
2f:94:5f:f6:bd:4f:3b:06:f8:4e:8e:e8:8a:de:9a:76:12:e8:
21:15:c4:43:47:88:79:68:8f:46:ac:f4:33:12:96:48:9d:f5:
68:97:86:d9:fb:d5:25:79:20:80:a1:ca:7e:65:d6:a7:9e:ea:
c4:2f:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:52:16 2025 by rpki-client