Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/76NSlEpWLJpMYh3gGoaDy3RQ-54.roa
File: 76NSlEpWLJpMYh3gGoaDy3RQ-54.roa (raw, json)
Hash identifier: 15/wMm2hfWUUfFs7P5x4Dbm3vx5L3u2bwwAL2rwtyA4=
Subject key identifier: EF:A3:52:94:4A:56:2C:9A:4C:62:1D:E0:1A:86:83:CB:74:50:FB:9E
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195D2CB8C1DA5AB0D4173CA16684746F59E
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/76NSlEpWLJpMYh3gGoaDy3RQ-54.roa
Signing time: Wed 26 Mar 2025 14:11:49 +0000
ROA not before: Wed 26 Mar 2025 14:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:cb:8c:1d:a5:ab:0d:41:73:ca:16:68:47:46:f5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 26 14:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa352944a562c9a4c621de01a8683cb7450fb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:e9:14:b8:a0:9a:d2:ea:d8:b1:49:b0:a5:
a2:ed:23:f4:44:18:3f:cb:eb:3d:76:d1:a8:d3:c9:
80:a4:0d:d1:8b:52:10:91:fc:08:c8:f7:79:ae:e6:
b4:47:1c:f8:4c:9b:71:63:ca:a0:58:bc:30:d6:92:
05:ae:72:67:30:58:46:93:58:7c:f3:7f:9c:72:a3:
d2:dd:2f:23:cc:94:91:ff:64:00:16:ee:d4:67:8e:
de:48:36:40:fa:47:ee:98:aa:69:0f:68:45:bd:10:
e1:b5:d4:6a:58:13:0b:ab:36:77:0c:49:15:0f:6b:
f1:10:56:42:a8:30:cb:78:3d:33:7c:5e:1e:f3:57:
b4:2b:af:24:21:3c:a0:72:2b:0a:fc:1d:46:84:4e:
71:6a:8a:31:06:43:2e:d6:7e:82:07:a4:e5:db:a4:
2e:9d:9d:8d:ec:2c:8d:45:2b:4d:cc:a0:b7:aa:60:
96:8b:a5:a5:81:09:a2:78:77:39:35:87:4e:44:97:
97:16:bf:1e:03:d6:6a:12:79:5e:80:5d:fe:66:14:
ac:7f:2d:3d:8e:bb:36:1c:79:9d:c8:8a:07:22:41:
6b:b7:00:b5:58:7f:9b:60:b3:e1:29:fd:a2:1f:18:
1d:bb:08:f4:af:80:46:16:ff:d5:a7:3c:b4:b2:79:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:52:94:4A:56:2C:9A:4C:62:1D:E0:1A:86:83:CB:74:50:FB:9E
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/76NSlEpWLJpMYh3gGoaDy3RQ-54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.42.0/24
86.110.49.0/24
86.110.53.0-86.110.54.255
Signature Algorithm: sha256WithRSAEncryption
06:07:91:82:56:aa:09:f3:85:fb:d5:b1:82:df:52:9a:c1:7e:
f4:3d:45:30:5f:1e:8d:68:09:a6:6b:10:f4:c7:80:d0:57:e3:
97:15:4f:82:ad:7a:3a:31:50:e7:2c:ee:2d:4d:2d:d3:3d:a8:
77:67:34:65:5c:a5:2f:d4:4c:90:9e:40:8e:c7:0d:01:d0:60:
10:0b:a4:87:3a:d3:eb:25:94:7b:41:06:9e:65:6f:99:47:6c:
aa:7a:17:c7:2f:c3:f4:25:2a:d3:79:f0:0b:9e:16:ab:a9:3d:
9f:fc:75:a1:76:b7:d7:4c:4a:f7:91:c5:0f:d7:8d:23:d5:8d:
b7:a0:94:f0:e0:af:82:ce:67:6d:30:5e:82:aa:8e:3a:30:b1:
d2:2a:c5:0c:7c:1f:59:57:ef:1e:09:17:0e:d5:2d:c8:af:4e:
8b:61:82:6f:c9:cf:c5:53:47:7d:d1:59:87:a0:68:87:c1:b8:
66:6a:74:b2:d3:1a:4f:13:da:a8:99:60:4f:07:ba:ab:4f:e0:
ee:34:cd:25:16:8b:98:7a:f6:72:5f:ca:26:0e:d6:74:4f:b2:
63:31:a2:ce:39:18:53:e9:62:bb:6b:a6:45:44:db:92:4b:c7:
e7:9f:4d:51:3f:96:a7:36:f8:48:3d:df:14:f1:c3:08:d5:cb:
4f:62:3e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:50 2025 by rpki-client