Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/46Z7waoyHHEbsxxpvd3eWc3FesM.roa
File: 46Z7waoyHHEbsxxpvd3eWc3FesM.roa (raw, json)
Hash identifier: RGAVqkABD1kUGcHWFc3ExxqIEMWKWCZccVOCiAVauPA=
Subject key identifier: E3:A6:7B:C1:AA:32:1C:71:1B:B3:1C:69:BD:DD:DE:59:CD:C5:7A:C3
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F4FD4129B062CE9422582F6B307D
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/46Z7waoyHHEbsxxpvd3eWc3FesM.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202635
IP address blocks: 86.110.32.0/24 maxlen: 24
86.110.35.0/24 maxlen: 24
86.110.38.0/24 maxlen: 24
86.110.39.0/24 maxlen: 24
86.110.43.0/24 maxlen: 24
86.110.45.0/24 maxlen: 24
185.158.176.0/22 maxlen: 24
185.193.60.0/22 maxlen: 24
185.244.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f4:fd:41:29:b0:62:ce:94:22:58:2f:6b:30:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3a67bc1aa321c711bb31c69bdddde59cdc57ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:9a:c7:12:ed:47:6a:18:10:d8:f3:1c:b9:
8f:13:94:78:fd:72:4f:f3:7e:c1:65:5d:2d:46:83:
90:6c:ad:b1:a6:ae:ce:d3:23:74:fd:26:00:b4:77:
1f:8b:8b:9c:0c:9c:94:d1:46:7b:91:38:23:d2:0d:
21:7f:e7:35:1d:68:77:45:de:d2:26:d7:6b:8f:86:
85:a7:a6:86:24:53:17:a8:11:47:ac:28:69:35:aa:
b5:ad:57:66:e4:0d:47:28:91:8b:1a:8a:ca:92:4c:
b9:57:a7:85:65:9a:47:23:5e:ad:1b:8a:35:2c:c2:
1b:02:64:54:df:2a:4f:9e:2a:15:97:44:03:72:be:
98:e9:1f:c2:44:62:94:93:c2:e2:9c:f6:4f:87:48:
48:3e:49:54:ad:ef:02:7d:3b:eb:ee:7c:55:1c:0d:
36:a4:38:68:85:f2:2f:78:e0:9f:44:3c:30:78:4a:
24:20:43:de:45:b4:e0:df:04:d4:c9:4b:dc:a9:78:
95:ea:90:01:df:ad:f2:87:63:6a:1a:96:de:9b:6f:
25:e6:c2:d3:a3:6a:47:75:da:e3:4f:fd:66:a2:9b:
73:3d:94:8e:6e:50:ed:e9:89:61:2d:e9:e0:03:45:
f6:65:8a:82:9d:e4:dd:df:fe:83:17:bf:a0:f2:2c:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:7B:C1:AA:32:1C:71:1B:B3:1C:69:BD:DD:DE:59:CD:C5:7A:C3
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/46Z7waoyHHEbsxxpvd3eWc3FesM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.32.0/24
86.110.35.0/24
86.110.38.0/23
86.110.43.0/24
86.110.45.0/24
185.158.176.0/22
185.193.60.0/22
185.244.100.0/22
Signature Algorithm: sha256WithRSAEncryption
af:2e:d3:ab:d6:74:c2:a6:d0:b5:30:04:9a:25:98:f0:8b:de:
52:98:2b:3a:60:ee:ba:95:1b:9c:ef:d4:d0:6b:4f:b2:3f:67:
71:13:a8:68:bd:2e:bb:10:85:f4:6b:6e:2d:4f:22:ad:f3:93:
54:3c:88:0e:8a:09:ce:12:eb:14:84:e0:da:64:5e:14:e3:16:
89:ed:bb:96:75:27:b9:35:46:41:02:14:8e:09:ec:48:f8:00:
45:f0:a8:19:b4:26:40:d6:b8:8d:c6:3f:2a:a9:e6:c6:99:c5:
80:e1:64:36:70:21:b2:08:3a:d4:40:6f:66:af:bd:ba:fc:ed:
16:8a:4e:f6:56:d2:4d:20:0a:09:9a:93:e5:76:7b:75:4e:fd:
ca:0f:7d:8f:35:0d:65:c8:ae:c3:d9:17:fc:c1:d6:65:c2:1a:
c8:7d:30:79:41:44:e0:05:d8:8a:c0:d1:aa:5b:00:2c:db:65:
1e:7c:22:b1:59:72:9a:43:8e:d9:f2:d7:e6:80:b4:b9:36:83:
4b:e7:ed:9d:cb:5a:f4:df:64:bf:aa:ed:d2:15:8e:2b:1c:7b:
5c:4f:02:22:0c:5e:78:e9:e9:d9:68:7f:9e:ca:3f:c8:98:66:
33:fd:b4:d8:5b:a4:58:0c:67:2a:76:4b:e2:6f:14:aa:d0:5e:
1a:12:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:15 2025 by rpki-client