Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/EL53DVRItAFnykPhMK7Wvw_OseQ.roa
File: EL53DVRItAFnykPhMK7Wvw_OseQ.roa (raw, json)
Hash identifier: 4g3I5X6r6ax7uj4lNMlvuJVfTbeqKnX/DB5NclHgXOQ=
Subject key identifier: 10:BE:77:0D:54:48:B4:01:67:CA:43:E1:30:AE:D6:BF:0F:CE:B1:E4
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 019422FB34E365CD7FFB12F71619E83A19A2
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/EL53DVRItAFnykPhMK7Wvw_OseQ.roa
Signing time: Wed 01 Jan 2025 17:47:55 +0000
ROA not before: Wed 01 Jan 2025 17:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48452
IP address blocks: 94.26.0.0/22 maxlen: 22
94.26.0.0/24 maxlen: 24
94.26.1.0/24 maxlen: 24
94.26.3.0/24 maxlen: 24
94.26.32.0/21 maxlen: 21
94.26.32.0/24 maxlen: 24
94.26.33.0/24 maxlen: 24
94.26.34.0/24 maxlen: 24
94.26.35.0/24 maxlen: 24
94.26.36.0/24 maxlen: 24
94.26.37.0/24 maxlen: 24
94.26.39.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.43.0/24 maxlen: 24
94.26.48.0/20 maxlen: 20
94.26.48.0/24 maxlen: 24
94.26.49.0/24 maxlen: 24
94.26.50.0/24 maxlen: 24
94.26.51.0/24 maxlen: 24
94.26.52.0/24 maxlen: 24
94.26.53.0/24 maxlen: 24
94.26.54.0/24 maxlen: 24
94.26.55.0/24 maxlen: 24
94.26.56.0/24 maxlen: 24
94.26.57.0/24 maxlen: 24
94.26.58.0/24 maxlen: 24
94.26.59.0/24 maxlen: 24
94.26.60.0/24 maxlen: 24
94.26.61.0/24 maxlen: 24
94.26.62.0/24 maxlen: 24
94.26.63.0/24 maxlen: 24
94.26.68.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
94.26.71.0/24 maxlen: 24
94.26.80.0/22 maxlen: 22
94.26.81.0/24 maxlen: 24
94.26.82.0/24 maxlen: 24
94.26.83.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
94.26.91.0/24 maxlen: 24
94.26.92.0/24 maxlen: 24
94.26.104.0/22 maxlen: 24
94.26.105.0/24 maxlen: 24
94.26.106.0/24 maxlen: 24
94.26.107.0/24 maxlen: 24
2a00:6f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:34:e3:65:cd:7f:fb:12:f7:16:19:e8:3a:19:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 17:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10be770d5448b40167ca43e130aed6bf0fceb1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:04:2c:d6:a1:0e:44:67:1e:41:ea:0a:f6:
0a:80:cc:c9:a6:fa:07:65:1d:0f:5f:93:ef:29:49:
08:85:38:d5:7e:4c:a2:59:2a:4d:5c:4a:39:09:fd:
c1:33:7c:40:7b:34:90:c4:21:2f:c5:82:26:04:45:
e9:58:39:64:83:4a:f6:c2:c4:32:ee:06:18:0f:b5:
a4:91:88:6b:c6:c7:51:e5:a1:35:63:03:2b:c3:a3:
f7:a4:44:f1:56:ed:43:38:52:15:9a:e6:f4:52:93:
7d:8b:f7:d9:be:e0:ce:14:c3:bb:27:f4:96:43:ac:
27:7e:f0:4e:52:ee:83:aa:65:11:13:c2:8f:7f:77:
75:fa:65:d3:df:cb:8c:95:23:66:5b:0a:c5:2d:73:
d2:07:59:1f:8d:e5:42:97:76:ef:01:6d:b5:83:df:
36:74:5b:94:c3:49:1e:d6:cd:27:48:35:c5:44:0d:
b6:c5:69:c6:d7:c8:8e:99:c0:07:3f:a8:d2:72:4c:
a2:18:b1:cb:d8:97:de:e9:5f:a9:a1:8b:36:c4:fe:
3f:c6:d9:f9:2c:0e:d6:84:68:f7:d9:c4:48:5e:60:
8e:28:11:88:27:59:b4:88:63:c4:f1:6e:e8:b2:93:
7e:75:e9:ae:17:69:c0:0c:e3:98:6d:64:2e:13:1f:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:77:0D:54:48:B4:01:67:CA:43:E1:30:AE:D6:BF:0F:CE:B1:E4
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/EL53DVRItAFnykPhMK7Wvw_OseQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.0.0/22
94.26.32.0/21
94.26.41.0-94.26.43.255
94.26.48.0/20
94.26.68.0/22
94.26.80.0/22
94.26.88.0/24
94.26.91.0-94.26.92.255
94.26.104.0/22
IPv6:
2a00:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
8d:49:ee:c3:46:fd:c0:f0:09:4b:ef:55:37:83:b1:7a:0e:13:
37:68:d4:55:0e:0b:af:9c:52:44:8c:0d:89:2a:5e:83:51:1c:
aa:41:52:a7:72:80:6e:1f:f3:96:d3:27:d1:94:48:cc:87:39:
b8:1f:d3:2a:1d:0f:6e:5e:91:21:2b:d6:24:58:4d:4c:22:f1:
67:b6:72:4c:80:71:77:ed:a5:a2:86:5a:ca:9b:60:5f:21:ce:
59:2d:c0:02:8a:21:d4:2c:1c:12:e5:ce:03:dc:a9:d0:30:33:
de:87:15:7d:ac:5f:28:21:47:fa:5a:bd:45:b2:12:46:17:51:
40:0f:12:4a:6e:2a:17:bb:9e:73:fb:05:cd:94:cb:67:2e:11:
00:e2:42:cc:5e:0f:07:3e:cf:d9:f2:90:41:22:37:18:7c:ae:
1c:b7:3b:81:5c:7d:ff:c6:99:6f:38:4c:ff:8d:0f:1d:7f:6f:
c4:0f:57:eb:c0:76:9f:0c:a4:72:e5:3c:4b:3c:fb:16:44:cf:
05:0e:05:20:22:23:e3:d5:9a:f3:72:8e:7b:dd:ac:b6:87:bf:
dd:65:5c:c8:e3:a2:d7:8f:40:09:c0:d6:91:1e:43:a6:89:23:
ff:7f:6c:a1:14:98:7b:57:e5:00:eb:0c:67:44:b7:58:5f:90:
bc:18:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:44 2025 by rpki-client