Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/7roFuIqOFryYr3Dxgbzhwe7XBDk.roa
File: 7roFuIqOFryYr3Dxgbzhwe7XBDk.roa (raw, json)
Hash identifier: cEzWy6S6t9xKF7g7qDNd/KU95lLyQL6z3OOLXWa/1gM=
Subject key identifier: EE:BA:05:B8:8A:8E:16:BC:98:AF:70:F1:81:BC:E1:C1:EE:D7:04:39
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019417854B5C7F099C82C33C075A87FE81B8
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/7roFuIqOFryYr3Dxgbzhwe7XBDk.roa
Signing time: Mon 30 Dec 2024 12:23:19 +0000
ROA not before: Mon 30 Dec 2024 12:23:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 86.110.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:85:4b:5c:7f:09:9c:82:c3:3c:07:5a:87:fe:81:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Dec 30 12:23:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeba05b88a8e16bc98af70f181bce1c1eed70439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:e2:a9:d1:06:56:f2:8e:bd:0c:37:75:0b:
87:8e:db:98:ca:2c:93:7f:7c:4c:4e:29:02:51:85:
91:b0:f3:2d:35:7f:22:2f:11:17:5b:ba:c2:65:bb:
bb:43:46:e0:ea:4c:26:02:cf:f8:38:92:34:a7:d3:
ec:e5:15:ff:f1:f9:a4:89:17:ff:9e:29:23:f6:5a:
cb:e9:4f:b3:af:d3:e7:5e:68:0e:62:72:32:0b:51:
47:b8:ab:6b:b9:dd:08:f3:0a:02:32:13:7d:3e:16:
31:15:51:5e:ac:f2:31:d3:a6:08:f6:97:54:e0:c3:
08:75:8e:3c:c5:df:33:8d:4a:64:2e:c5:ca:c0:9b:
fa:14:c4:08:59:e5:4b:93:9d:b2:6a:fa:51:41:e1:
e2:83:6c:03:65:1d:37:46:45:c9:28:d2:c2:e1:6f:
43:bd:b5:6a:5a:80:60:3b:7c:ee:e6:34:ca:c3:65:
c8:11:bd:55:71:df:a6:b2:2f:8d:82:7b:61:7c:15:
4f:bc:d6:df:6c:e5:23:b4:25:91:ed:3e:df:d3:0c:
30:10:d5:a7:2d:b5:41:83:37:ed:e4:e4:11:27:4f:
94:47:b9:2c:12:99:ed:c3:61:82:c7:28:f3:77:68:
23:9b:ed:af:99:2f:70:6e:d5:80:84:2d:7d:e1:50:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BA:05:B8:8A:8E:16:BC:98:AF:70:F1:81:BC:E1:C1:EE:D7:04:39
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/7roFuIqOFryYr3Dxgbzhwe7XBDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.52.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3e:62:e3:d5:ab:03:c4:5a:ad:a4:e5:14:d6:96:89:33:1b:
e8:bf:ae:24:cd:3c:a5:a7:0c:52:31:9a:d5:2d:16:9f:0e:fa:
ed:65:de:91:67:33:0c:f8:de:51:3f:b4:40:28:b6:19:79:2c:
4f:97:55:4e:f1:e0:94:ce:6a:d1:ef:e0:d0:71:13:b9:6b:c2:
dc:31:3f:2e:83:6d:22:d9:12:89:db:f6:5b:6f:81:c1:29:f0:
2e:14:39:fc:62:e7:11:9f:36:6c:40:0d:21:a1:e1:37:92:40:
8f:32:7a:a9:bb:6f:a5:30:21:f7:e9:27:5c:60:ee:16:99:5f:
5f:10:19:5b:b9:ca:3b:fd:46:08:48:20:f3:62:54:e7:50:9f:
35:82:49:b9:91:4a:f0:97:77:ea:46:ae:96:e4:6d:e7:1c:e8:
1f:54:48:5d:d2:97:48:ab:d3:0d:2b:74:c9:41:29:98:27:e2:
2e:a1:86:de:f9:f5:1f:87:62:c6:84:5a:d9:5b:46:98:60:b0:
d8:d9:01:15:ba:16:f2:21:b7:e5:15:3c:b1:a8:60:17:6a:68:
8a:a2:0a:0f:3b:5b:c7:fe:3e:0f:d4:55:3b:04:69:ec:22:ed:
a4:46:6a:cd:c3:b6:e4:fc:0c:3d:0d:6f:b4:30:2a:6c:90:52:
fc:0b:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:41 2025 by rpki-client