Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/mTOTn6xbfDVzbAEOZSlOf02Gmso.roa
File: mTOTn6xbfDVzbAEOZSlOf02Gmso.roa (raw, json)
Hash identifier: w7dLY983INfrPczn5+OQy8tGgqoq2Wl4iZAGdiE46Zk=
Subject key identifier: 99:33:93:9F:AC:5B:7C:35:73:6C:01:0E:65:29:4E:7F:4D:86:9A:CA
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018CC56EC76FF6CB3BC7A184B46BF3BDE37A
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/mTOTn6xbfDVzbAEOZSlOf02Gmso.roa
Signing time: Mon 01 Jan 2024 14:30:20 +0000
ROA not before: Mon 01 Jan 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 94.26.110.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c7:6f:f6:cb:3b:c7:a1:84:b4:6b:f3:bd:e3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9933939fac5b7c35736c010e65294e7f4d869aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:fb:cb:5a:72:a1:25:b6:a5:56:4c:44:e6:
4d:e0:ca:99:1b:f4:82:c2:fe:67:fb:bc:84:e7:b7:
96:18:f1:ce:14:65:3a:68:fe:c2:9f:79:33:45:e5:
48:10:c3:cb:da:4e:79:c9:22:f1:bd:09:4d:cf:19:
db:1e:7e:34:73:61:71:c8:d5:26:2f:1d:21:b5:75:
16:e5:96:49:ee:a1:a6:29:59:7b:e0:c3:b1:e2:5a:
57:fc:cc:86:a4:a2:f2:c5:24:a7:e1:14:d0:57:37:
f0:29:e3:25:ca:59:88:d9:1a:f5:0c:70:7e:d4:0d:
d9:21:6c:0e:c3:b6:2e:3d:c2:c3:f0:eb:06:14:55:
c3:5d:83:e3:9b:1e:58:8d:c8:74:ae:e0:6b:68:ca:
ea:27:92:e2:20:d1:45:36:6e:b1:eb:ac:ca:6e:73:
2d:e0:12:1a:e4:bd:6c:c7:fa:cb:f4:7f:5a:4f:fc:
c7:17:f4:16:64:7b:10:03:49:38:59:a0:59:69:9b:
6a:d0:b9:08:40:93:71:97:15:0b:66:d3:21:dc:44:
82:f1:81:29:be:14:de:d4:31:8d:0e:88:4f:39:1b:
15:5b:b9:1d:e4:18:be:3a:09:9c:ac:8e:cb:f7:96:
af:5a:b7:ba:44:19:6e:b6:3a:a1:67:59:c7:fa:26:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:33:93:9F:AC:5B:7C:35:73:6C:01:0E:65:29:4E:7F:4D:86:9A:CA
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/mTOTn6xbfDVzbAEOZSlOf02Gmso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:d2:4d:aa:3e:8b:07:88:46:40:28:0f:42:b6:38:b0:05:30:
25:27:43:bb:34:85:5c:81:0d:c1:87:10:4a:4c:b1:ec:55:0b:
db:48:0b:ad:22:7a:a4:7e:06:3b:d9:16:98:df:87:22:70:87:
6a:7d:c1:3b:9d:ea:62:39:4e:99:e3:ac:52:87:fa:2f:cb:a4:
fb:a9:23:18:7b:e9:25:47:ff:89:6a:dd:21:0e:0c:f9:80:54:
0d:9f:84:04:30:97:e2:44:cf:9e:3a:49:02:54:cf:22:3c:05:
d0:51:1f:cb:35:92:4c:4a:da:70:32:48:e2:98:f0:4c:43:83:
d5:01:2c:22:e0:a0:fe:91:5c:88:e7:f4:b1:65:f4:d1:28:50:
13:bf:18:4f:6e:e8:b4:42:aa:36:e4:2b:db:c5:bc:ac:b0:2a:
f5:3b:63:35:fc:b3:1c:fb:16:66:3b:35:5f:55:92:12:23:f5:
64:39:66:e3:12:2f:fc:1c:ef:39:8d:8c:59:61:32:a9:d8:4b:
ee:0d:1c:77:be:ac:b9:d4:56:ca:68:44:82:c3:d3:63:9c:ce:
08:f1:2c:0f:09:f2:6f:7e:1d:ff:8f:2d:af:d3:a7:75:2b:fa:
09:19:0f:90:2c:3c:67:55:35:14:b0:79:9c:04:b3:2c:59:d3:
ec:04:92:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbsdv9ss7x6GEtGvzveN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjQwMTAxMTQzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTMzOTM5ZmFjNWI3YzM1NzM2YzAxMGU2NTI5NGU3ZjRkODY5YWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSz7y1pyoSW2pVZMROZN4MqZG/SC
wv5n+7yE57eWGPHOFGU6aP7Cn3kzReVIEMPL2k55ySLxvQlNzxnbHn40c2FxyNUm
Lx0htXUW5ZZJ7qGmKVl74MOx4lpX/MyGpKLyxSSn4RTQVzfwKeMlylmI2Rr1DHB+
1A3ZIWwOw7YuPcLD8OsGFFXDXYPjmx5Yjch0ruBraMrqJ5LiINFFNm6x66zKbnMt
4BIa5L1sx/rL9H9aT/zHF/QWZHsQA0k4WaBZaZtq0LkIQJNxlxULZtMh3ESC8YEp
vhTe1DGNDohPORsVW7kd5Bi+OgmcrI7L95avWre6RBlutjqhZ1nH+iZKcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJkzk5+sW3w1c2wBDmUpTn9NhprKMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvbVRPVG42eGJmRFZ6YkFFT1pTbE9mMDJHbXNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXhpAAwQB
XhpuMA0GCSqGSIb3DQEBCwUAA4IBAQCq0k2qPosHiEZAKA9CtjiwBTAlJ0O7NIVc
gQ3BhxBKTLHsVQvbSAutInqkfgY72RaY34cicIdqfcE7nepiOU6Z46xSh/ovy6T7
qSMYe+klR/+Jat0hDgz5gFQNn4QEMJfiRM+eOkkCVM8iPAXQUR/LNZJMStpwMkji
mPBMQ4PVASwi4KD+kVyI5/SxZfTRKFATvxhPbui0Qqo25CvbxbyssCr1O2M1/LMc
+xZmOzVfVZISI/VkOWbjEi/8HO85jYxZYTKp2EvuDRx3vqy51FbKaESCw9NjnM4I
8SwPCfJvfh3/jy2v06d1K/oJGQ+QLDxnVTUUsHmcBLMsWdPsBJJu
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:45:09 2025 by rpki-client