Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/BLTYebzmrN30yor9rRpjYEj4Tcc.roa
File: BLTYebzmrN30yor9rRpjYEj4Tcc.roa (raw, json)
Hash identifier: Es006u7JuLeDE405xRYmbyvSlc/iZSPQmFG/VW7aIoE=
Subject key identifier: 04:B4:D8:79:BC:E6:AC:DD:F4:CA:8A:FD:AD:1A:63:60:48:F8:4D:C7
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0194FEF1BC0538E63E3F9E15DDE0E16A0A87
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/BLTYebzmrN30yor9rRpjYEj4Tcc.roa
Signing time: Thu 13 Feb 2025 10:54:02 +0000
ROA not before: Thu 13 Feb 2025 10:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:f1:bc:05:38:e6:3e:3f:9e:15:dd:e0:e1:6a:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Feb 13 10:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04b4d879bce6acddf4ca8afdad1a636048f84dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:2c:24:73:86:89:31:f5:e7:20:f3:4d:0f:
c1:55:f9:85:3a:25:95:eb:44:1e:b1:0c:3f:65:70:
30:a9:a6:61:84:76:8e:33:2c:fc:e3:c2:9e:6b:26:
52:19:0f:4f:d1:48:e9:95:45:b4:5a:26:bf:cd:c0:
36:3f:3e:64:2a:2b:9d:eb:24:77:c9:45:a8:28:c5:
f6:e4:53:10:69:b7:39:39:7b:e0:4c:8f:55:8a:dc:
c7:dc:4f:26:c7:4f:33:45:29:37:dd:08:76:f2:ac:
3b:b9:9b:78:19:0f:d0:b3:98:c1:d5:c8:58:23:2f:
b1:21:f1:4e:61:99:8f:13:11:42:08:ce:f2:5f:3b:
c0:cf:f2:b0:a7:78:0e:42:74:5c:d4:bb:b1:fd:88:
68:14:14:be:c6:c9:29:fd:ac:2e:10:b4:2b:55:52:
50:4a:f3:52:d0:f4:b8:66:68:20:0f:ab:7f:f3:7f:
d1:66:72:4f:b5:9a:6a:ad:aa:87:c6:87:f1:9f:11:
4d:18:78:a9:3c:23:8e:7b:67:c6:90:fc:55:46:3e:
53:74:99:ec:a8:23:f5:80:ae:1f:b5:99:1a:d6:7e:
21:4b:7f:1c:5b:c9:e7:f9:d0:34:1a:c1:8b:86:b5:
4c:b3:8d:31:23:4c:d1:f0:83:16:d3:83:6e:37:61:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:D8:79:BC:E6:AC:DD:F4:CA:8A:FD:AD:1A:63:60:48:F8:4D:C7
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/BLTYebzmrN30yor9rRpjYEj4Tcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.54.0/24
86.110.58.0/23
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2f:ec:df:66:3c:5b:f6:75:0f:18:22:cc:cc:1a:2a:50:90:
e9:0a:07:fc:f7:cd:6a:8d:15:20:0f:b2:f1:81:1e:70:e1:57:
3d:0b:7f:85:6c:cc:9f:c4:14:f2:d5:49:d7:3f:70:d5:11:c3:
74:93:ea:78:7b:76:4e:d6:ec:d4:de:bf:cb:56:f2:ad:98:ae:
14:77:92:84:a5:67:30:b5:41:9f:11:e4:14:63:e9:4b:e4:09:
9e:ed:b5:7b:50:d0:fa:34:ab:a9:84:41:f2:c9:86:24:ac:55:
9a:1d:7e:af:97:8e:89:6e:ae:e2:e3:f4:c4:56:6b:1f:89:e2:
9f:80:36:62:60:02:ed:95:39:16:95:c6:4d:b8:b6:24:61:5e:
ca:b6:32:3e:26:14:0f:df:bd:37:8b:b3:93:37:76:39:d4:4e:
a8:b7:d4:45:c4:3b:d9:36:61:60:47:c4:10:2d:24:d8:66:fe:
99:a4:59:f2:dd:ae:34:85:1a:5f:d6:62:fa:12:79:db:10:a4:
a0:85:c1:e1:df:f5:41:63:45:af:9c:7f:3c:42:ed:2d:9b:f7:
85:d9:bd:30:36:9d:d5:2b:9b:e5:1d:fc:63:78:bc:e7:32:3c:
8f:0e:e8:b0:17:95:fb:15:77:63:a3:f5:21:0f:1d:f5:fa:d7:
59:0b:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:29:58 2025 by rpki-client