Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/o_TvTJxNHguy06yNcfqfp6DtTfk.roa
File: o_TvTJxNHguy06yNcfqfp6DtTfk.roa (raw, json)
Hash identifier: PdKucL4hwuvx0vR2WAuOpq43Ebiav1K7y+uqjNvO90s=
Subject key identifier: A3:F4:EF:4C:9C:4D:1E:0B:B2:D3:AC:8D:71:FA:9F:A7:A0:ED:4D:F9
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0189B025FE9CE67A8C652D026BC922D74E84
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/o_TvTJxNHguy06yNcfqfp6DtTfk.roa
Signing time: Tue 01 Aug 2023 08:10:27 +0000
ROA not before: Tue 01 Aug 2023 08:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:25:fe:9c:e6:7a:8c:65:2d:02:6b:c9:22:d7:4e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 1 08:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f4ef4c9c4d1e0bb2d3ac8d71fa9fa7a0ed4df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:0f:12:ad:2d:77:ef:7d:cb:28:fb:66:8a:
cf:30:45:3e:bd:f1:a1:2b:cc:64:3a:51:a7:3e:d1:
93:c2:d3:7d:53:98:bd:e4:83:f1:14:32:65:a3:3d:
60:e0:fa:79:47:e9:b0:27:22:7d:0d:6c:da:4b:e0:
29:40:fc:3b:dd:9a:d0:3f:65:10:0f:b0:b3:0d:b2:
f9:4c:49:69:85:49:09:c5:38:7f:de:61:66:fe:49:
e7:79:0e:7c:1d:2b:5b:81:b7:a3:3a:68:2b:e4:9f:
57:71:06:b3:8b:c3:db:32:b8:cc:76:89:9e:d9:ba:
8f:53:83:de:cd:c1:ec:d6:cd:e7:32:83:ad:fa:90:
6a:67:51:7d:53:99:5b:73:73:06:f0:52:4a:48:7f:
a7:e6:1e:d0:05:2c:1f:94:63:1a:7d:17:5c:ae:43:
dd:68:ae:be:a7:17:0d:b3:1c:28:8b:34:9a:91:77:
93:c3:50:e8:10:75:60:b0:bd:15:a3:3e:84:2d:dc:
a8:6e:bb:34:e2:34:3b:2f:d8:a1:bc:74:92:ee:ae:
35:7d:a4:14:e6:62:be:b6:21:52:45:60:31:b4:95:
f9:6d:bd:bb:7b:25:6b:a1:1e:ce:e3:3f:28:a2:49:
3f:6d:33:c1:97:75:b2:cc:46:ff:18:1f:28:2a:4e:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F4:EF:4C:9C:4D:1E:0B:B2:D3:AC:8D:71:FA:9F:A7:A0:ED:4D:F9
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/o_TvTJxNHguy06yNcfqfp6DtTfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:39:f0:15:c0:6e:f0:19:ac:5a:27:81:b3:6b:42:9e:d0:ca:
11:af:d8:3e:70:cc:58:e5:b7:bb:6c:87:c0:a1:12:9b:cf:61:
9a:31:52:75:87:2d:b7:cc:a0:92:6d:08:6b:e3:9f:72:26:8c:
2a:7d:0f:db:65:80:3c:53:20:a7:62:1a:10:fa:19:1a:e6:a3:
e9:b5:a3:17:39:d2:70:da:c1:d6:c8:3d:fd:93:47:91:4d:8c:
cb:53:98:ad:17:e8:e3:b4:6f:91:c4:33:5a:af:87:2e:48:88:
ec:54:f0:5a:47:02:d9:82:ae:ec:71:4a:e7:62:f4:a8:67:89:
03:e1:cb:cd:3e:d1:2d:d2:e0:48:fb:8a:48:dc:e8:c8:b6:2d:
a8:af:1a:47:18:0a:f4:09:f6:a6:59:ca:ec:e2:e7:d4:c3:34:
2c:a7:2f:b2:60:3a:64:62:0d:c4:ae:67:10:d3:b4:84:b0:af:
f1:29:77:cb:96:e9:be:73:e4:05:dc:f4:5f:48:cc:78:ab:80:
ca:a1:7b:1a:7f:5a:7d:a7:b8:b9:64:e4:fb:49:9b:3a:2c:8d:
92:b9:bd:f3:10:10:c4:ca:5b:74:e5:ee:3c:38:9a:3b:4e:01:
92:06:fc:80:da:b2:3d:4c:f1:b9:2f:6e:97:78:95:af:18:d3:
8b:52:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:41:05 2025 by rpki-client