Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/i2TJdQGImmH1AMZjZdJoQSVBpxM.roa
File: i2TJdQGImmH1AMZjZdJoQSVBpxM.roa (raw, json)
Hash identifier: cScVN1mGiS6LZ9amvk6TVArmjdjELE2HkeCKGcd2dXc=
Subject key identifier: 8B:64:C9:75:01:88:9A:61:F5:00:C6:63:65:D2:68:41:25:41:A7:13
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 02B186F1
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/i2TJdQGImmH1AMZjZdJoQSVBpxM.roa
Signing time: Wed 05 Jan 2022 22:16:13 +0000
ROA not before: Wed 05 Jan 2022 22:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 94.26.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45188849 (0x2b186f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 5 22:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b64c97501889a61f500c66365d268412541a713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:dd:bf:6c:be:b0:6f:b3:0b:da:7c:9e:ea:
27:22:45:f2:77:b4:51:c0:a8:74:11:84:5d:4e:eb:
2d:cf:13:8f:e0:bf:e9:b1:1e:e2:2d:eb:ca:d9:ed:
70:53:5c:1e:04:40:78:2c:b9:37:c9:bd:d8:51:54:
87:a5:8d:20:1e:02:d3:55:e6:e9:8a:af:43:b2:c2:
d6:84:7a:7b:04:98:12:5f:84:1b:e8:56:f3:07:05:
6a:1c:2e:c1:81:69:af:b5:f1:d9:52:5d:3f:71:a4:
fc:cd:ee:1c:93:b2:60:d3:b0:a2:fd:33:b5:10:d1:
34:fd:e1:ea:d9:65:c3:81:57:31:91:bd:42:54:c4:
8f:61:63:20:1f:bc:10:4d:65:8a:ec:63:7d:9e:72:
a7:81:fc:71:31:ab:a4:85:9e:67:bf:a0:f4:f5:58:
e9:99:0e:ba:50:24:6b:5b:cf:fc:c4:5d:c9:6d:fd:
f7:76:26:3a:a6:7e:91:6c:56:b0:cc:d4:92:c7:69:
a3:12:ce:13:96:c4:ef:37:af:8b:29:99:7e:19:8c:
45:b9:37:70:11:49:89:82:f9:bf:a0:cb:56:29:2f:
43:d1:12:27:3d:e9:dd:a0:24:1c:e5:43:5d:60:63:
76:40:75:51:b0:1a:b4:a2:94:a8:2c:bc:4d:89:32:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:C9:75:01:88:9A:61:F5:00:C6:63:65:D2:68:41:25:41:A7:13
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/i2TJdQGImmH1AMZjZdJoQSVBpxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.24.0/23
Signature Algorithm: sha256WithRSAEncryption
67:25:47:ce:f9:41:4a:c5:9d:ad:79:63:73:f7:ce:b1:e3:8e:
00:07:60:84:e5:8b:b0:73:d2:27:e3:14:7f:3c:15:fd:b7:0f:
75:a8:c8:66:8c:02:91:05:11:f5:76:73:fb:6e:e6:ff:2d:0d:
02:17:e5:28:1c:9f:c3:af:ff:6f:85:b3:d9:ab:b3:a8:74:be:
9d:7c:69:8b:93:8a:61:28:77:53:e0:e8:90:15:ba:29:67:d2:
41:f4:3b:9c:17:c4:fe:09:de:85:aa:99:aa:cb:d8:ec:18:8f:
91:f7:60:3f:0e:31:75:9d:b0:d9:5b:b4:4d:12:45:74:be:40:
c6:e9:c2:46:37:51:c2:a8:71:49:c4:67:2a:51:38:95:38:49:
6b:e1:88:7f:57:23:10:6c:fc:3f:a7:82:6c:76:50:fa:97:7c:
46:e9:8f:ab:15:cb:0e:f4:19:7f:a0:03:e4:b7:60:1f:84:1f:
44:ce:8f:4b:0d:87:b3:10:a3:be:54:63:47:a1:a7:33:a6:48:
02:9f:c6:88:60:d3:74:a4:4e:b8:8a:2c:36:5f:48:22:88:f2:
a5:20:93:80:5c:24:97:29:dd:c4:11:8e:03:8c:a1:c6:4c:1a:
19:7c:d0:6d:fe:fd:61:32:88:4c:fc:fc:2d:92:57:32:11:43:
11:84:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:00:59 2025 by rpki-client