Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/EXZdBvxkC6BWuQw7LF1L44zgJrQ.roa
File: EXZdBvxkC6BWuQw7LF1L44zgJrQ.roa (raw, json)
Hash identifier: w9aCmXGe7EhAqGQ9c8EQN7jMSWaf9qgh1JTbamcH/ig=
Subject key identifier: 11:76:5D:06:FC:64:0B:A0:56:B9:0C:3B:2C:5D:4B:E3:8C:E0:26:B4
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01974446C44202BE57373C01CE40AD5FD591
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/EXZdBvxkC6BWuQw7LF1L44zgJrQ.roa
Signing time: Fri 06 Jun 2025 08:06:17 +0000
ROA not before: Fri 06 Jun 2025 08:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48452
IP address blocks: 94.26.0.0/22 maxlen: 22
94.26.0.0/24 maxlen: 24
94.26.1.0/24 maxlen: 24
94.26.3.0/24 maxlen: 24
94.26.33.0/24 maxlen: 24
94.26.34.0/24 maxlen: 24
94.26.36.0/24 maxlen: 24
94.26.39.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.43.0/24 maxlen: 24
94.26.48.0/20 maxlen: 20
94.26.48.0/24 maxlen: 24
94.26.49.0/24 maxlen: 24
94.26.50.0/24 maxlen: 24
94.26.51.0/24 maxlen: 24
94.26.52.0/24 maxlen: 24
94.26.53.0/24 maxlen: 24
94.26.54.0/24 maxlen: 24
94.26.55.0/24 maxlen: 24
94.26.56.0/24 maxlen: 24
94.26.57.0/24 maxlen: 24
94.26.58.0/24 maxlen: 24
94.26.59.0/24 maxlen: 24
94.26.60.0/24 maxlen: 24
94.26.61.0/24 maxlen: 24
94.26.62.0/24 maxlen: 24
94.26.63.0/24 maxlen: 24
94.26.68.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
94.26.71.0/24 maxlen: 24
94.26.80.0/22 maxlen: 22
94.26.81.0/24 maxlen: 24
94.26.82.0/24 maxlen: 24
94.26.91.0/24 maxlen: 24
94.26.92.0/24 maxlen: 24
94.26.104.0/22 maxlen: 24
94.26.104.0/24 maxlen: 24
94.26.105.0/24 maxlen: 24
94.26.106.0/24 maxlen: 24
94.26.107.0/24 maxlen: 24
2a00:6f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:46:c4:42:02:be:57:37:3c:01:ce:40:ad:5f:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jun 6 08:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11765d06fc640ba056b90c3b2c5d4be38ce026b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:c2:47:b6:55:c6:cb:36:66:cc:6d:80:ed:
55:03:87:65:f8:34:44:f4:5a:0b:a9:92:51:bf:40:
db:b6:71:9b:b4:df:66:b3:af:be:33:dd:ec:28:58:
cf:24:b7:7d:87:98:1d:ca:65:9f:11:b0:18:70:00:
37:37:87:30:59:10:dc:a1:d8:f6:29:44:fb:0e:40:
cf:a1:33:a4:7c:35:1c:18:ad:74:21:ca:00:0d:9f:
9d:b9:86:fd:4e:35:e8:25:5a:9d:98:f1:b2:df:72:
8f:99:20:ba:d0:2a:e3:c3:71:0a:f5:9a:e6:bf:a8:
65:ec:7d:fc:4c:79:d5:33:92:ce:58:85:70:f0:7a:
8e:4d:89:e3:cb:3e:e6:b3:31:f4:d0:6e:7a:b9:30:
9b:ab:7f:ff:fb:e1:c1:e2:cd:d8:6c:1b:e4:4b:63:
41:8f:e0:3f:dd:75:9a:59:cc:53:54:50:42:ff:46:
3d:73:5a:0a:9f:b9:4b:4c:67:3e:3c:f9:cf:ea:4e:
38:e6:e4:65:1b:df:57:4b:eb:21:27:ba:36:bf:a6:
b9:31:ca:04:9a:a6:10:71:a6:19:98:b2:d6:ed:b7:
91:d1:62:9b:81:83:21:14:c0:87:5a:66:50:f4:a7:
45:2f:9d:cd:34:2d:12:7c:bf:16:ab:c5:61:f3:b8:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:5D:06:FC:64:0B:A0:56:B9:0C:3B:2C:5D:4B:E3:8C:E0:26:B4
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/EXZdBvxkC6BWuQw7LF1L44zgJrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.0.0/22
94.26.33.0-94.26.34.255
94.26.36.0/24
94.26.39.0/24
94.26.41.0-94.26.43.255
94.26.48.0/20
94.26.68.0/22
94.26.80.0/22
94.26.91.0-94.26.92.255
94.26.104.0/22
IPv6:
2a00:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:59:94:fc:8e:55:a4:47:82:b1:1c:0a:ad:9b:70:0d:b1:61:
64:45:30:31:83:49:18:bc:3d:cb:06:a1:bb:11:39:b8:4f:71:
8b:3b:f4:75:6c:25:8b:a1:99:64:1c:2f:5c:d3:6a:ef:1b:12:
e3:bb:2b:4a:29:f9:41:a5:fa:c7:47:a7:52:b4:8c:b1:49:d0:
70:02:0e:bf:f7:15:74:12:29:e1:b0:67:c7:af:64:c6:81:bd:
98:bc:d4:ac:94:b1:b6:d7:ec:4f:a5:5e:f0:64:7f:31:bd:2e:
36:06:04:d9:0c:cc:53:6e:bf:d8:62:b1:63:bb:ee:b0:9c:f6:
b4:9b:1b:19:f6:12:ff:94:03:7f:72:13:96:56:4f:a5:c9:11:
bf:c9:4f:d6:59:20:be:ea:17:4d:6a:b0:83:8f:2a:db:bc:fe:
09:7f:8d:47:27:3d:9b:79:5a:d9:c2:25:7d:fb:77:58:11:d7:
0c:fa:29:68:33:2f:67:5b:83:c2:4f:36:ef:3a:e8:e4:7a:7c:
4c:82:49:13:e6:f2:5e:11:82:73:dd:fb:97:95:6a:69:f2:7e:
29:65:3c:4a:1d:1d:f2:f4:fb:53:56:c9:04:2c:61:71:90:fb:
f9:e0:09:29:cb:63:b1:f6:bf:54:21:c2:cc:4c:6b:b5:63:7b:
97:50:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:57 2025 by rpki-client