Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/zJd6WWZ4brBIe0JrYZeakxQbLtM.roa
File: zJd6WWZ4brBIe0JrYZeakxQbLtM.roa (raw, json)
Hash identifier: Q8GxGxL22LZPPMOngJy3BLr1Ny00RLfBfZZWJDX85nA=
Subject key identifier: CC:97:7A:59:66:78:6E:B0:48:7B:42:6B:61:97:9A:93:14:1B:2E:D3
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0186A4D2E249332BFA6CF4AB6D7226B28709
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/zJd6WWZ4brBIe0JrYZeakxQbLtM.roa
Signing time: Fri 03 Mar 2023 00:15:29 +0000
ROA not before: Fri 03 Mar 2023 00:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a4:d2:e2:49:33:2b:fa:6c:f4:ab:6d:72:26:b2:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Mar 3 00:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc977a5966786eb0487b426b61979a93141b2ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:63:55:79:0d:a4:da:fc:ad:cd:b3:93:ad:
40:74:9f:3f:31:b2:0c:47:89:71:2f:e4:7e:35:60:
2a:29:e2:f1:ce:11:53:c5:11:78:08:2f:21:d1:9c:
6a:58:60:17:a2:61:25:ae:fc:d6:21:82:2b:3d:6d:
b7:36:04:ee:38:99:ec:6a:0a:4d:22:86:7d:6a:7f:
27:56:e6:12:09:6b:59:82:00:52:99:ef:ff:2e:a3:
17:8d:e3:f1:d7:6c:33:7b:b4:54:17:ca:4a:9b:4f:
4a:1b:35:af:5b:50:34:e0:fc:b0:17:1f:fa:9c:06:
37:0a:d5:c2:89:f2:71:43:c4:ae:4d:c7:ec:37:fb:
c2:7b:0c:9c:8f:46:58:54:96:c1:d5:27:c2:20:b0:
2e:7b:a6:fe:86:5b:4c:6c:cf:e0:5b:18:70:99:27:
dd:c0:c6:4c:92:9f:78:b5:f8:4f:77:d8:8c:b3:85:
98:52:91:48:a3:55:2c:66:bc:71:23:e3:b5:50:c5:
4c:82:36:7d:33:86:cd:13:62:c1:f1:68:f1:5c:a4:
d2:ab:0c:a3:8a:d1:75:55:4d:c0:d9:da:d1:bd:da:
98:ab:a2:c6:1d:a1:3e:29:86:33:2b:21:77:38:c7:
f7:f9:25:1a:b1:a8:61:66:8e:fa:dd:6e:98:8d:e4:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:7A:59:66:78:6E:B0:48:7B:42:6B:61:97:9A:93:14:1B:2E:D3
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/zJd6WWZ4brBIe0JrYZeakxQbLtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
94.26.24.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
52:05:33:ef:71:35:56:d5:7a:f1:fb:30:f5:a3:55:ff:5c:cd:
1b:31:e7:c9:c5:cf:88:1f:1e:65:f8:98:71:ed:f3:da:ea:49:
6c:ae:e6:46:66:87:1d:8f:f0:b6:4d:1c:6d:1b:36:02:bb:86:
da:e2:07:b6:1d:b2:98:bc:82:e8:c1:b6:17:b8:6e:1a:c0:b4:
06:28:51:c7:f0:a1:e8:3c:5f:78:e9:cb:36:9d:5d:cc:a5:31:
7f:c1:ec:b8:96:9b:10:31:41:ad:f6:e0:f6:19:cb:7f:20:b2:
ed:25:a6:b9:87:73:8e:fd:8d:f9:73:28:f6:13:87:be:e3:29:
e8:7a:6c:ba:60:42:8f:6e:46:99:aa:21:99:c7:50:f2:e7:7c:
89:b8:c7:ec:7b:a5:ef:84:c8:21:0f:41:71:fa:42:a8:f4:30:
10:8d:1e:bf:92:6e:82:4e:2d:93:5b:33:48:26:7e:f0:8f:76:
01:c5:c9:10:88:ee:eb:d1:67:08:72:7b:4b:ee:0b:90:d1:a9:
33:40:75:51:0e:b2:c2:7c:6f:59:63:4a:f6:7a:a9:4e:9c:2c:
24:97:2e:76:80:62:97:9d:39:f8:f3:12:06:af:64:95:34:ea:
8c:78:57:ce:fc:11:ae:02:a8:20:1a:72:16:4f:c4:41:a0:7d:
12:b9:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:46:53 2025 by rpki-client