Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/HLP4ovdeejvSpKkq6D_BLL3EIDM.roa
File: HLP4ovdeejvSpKkq6D_BLL3EIDM.roa (raw, json)
Hash identifier: GJx2Un6YiRRPuwxbGCgkRv12LDVQhU2+5UwjZRIbDmM=
Subject key identifier: 1C:B3:F8:A2:F7:5E:7A:3B:D2:A4:A9:2A:E8:3F:C1:2C:BD:C4:20:33
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195C24A638580AE8E81683AAB742C714410
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/HLP4ovdeejvSpKkq6D_BLL3EIDM.roa
Signing time: Sun 23 Mar 2025 09:16:49 +0000
ROA not before: Sun 23 Mar 2025 09:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c2:4a:63:85:80:ae:8e:81:68:3a:ab:74:2c:71:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 23 09:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cb3f8a2f75e7a3bd2a4a92ae83fc12cbdc42033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:2f:6e:ff:b5:17:6c:f0:56:22:b0:3a:ac:
87:db:6f:5f:bd:5d:5c:eb:1c:0e:33:35:e5:63:28:
21:12:ce:4a:5d:c2:ab:bb:7f:52:c7:69:fe:ea:ad:
bf:b2:39:67:68:df:cf:fd:54:53:57:f8:22:2e:00:
4a:e0:24:d3:e1:a6:d9:8e:a9:63:e2:02:d6:dc:5c:
47:23:04:ee:8c:54:0d:bc:f5:cd:b2:a4:86:b1:5d:
42:43:b8:b6:16:e2:16:99:a7:92:db:c7:65:b8:5e:
cd:2a:7a:fc:57:47:49:20:ab:9e:24:76:51:c8:ec:
d4:b3:62:14:29:df:85:53:81:4c:d9:d6:47:7f:e6:
e1:40:94:02:43:87:b4:7e:52:67:1c:96:13:5c:10:
d4:47:11:7c:78:5c:d9:2d:de:8f:90:05:d6:9e:c6:
07:ee:77:b1:6a:3d:b6:23:37:97:9a:12:3f:08:6c:
37:3f:b6:91:2b:6d:5e:05:e3:1c:ce:f6:aa:23:56:
5b:08:6d:40:c9:5e:32:88:9a:b1:b3:03:fe:d0:b9:
7d:05:83:57:ae:94:66:3d:71:a7:1d:d7:21:e0:16:
0f:ed:dc:a0:80:29:70:5c:ce:52:9e:aa:e0:03:42:
38:75:d8:f8:f1:c2:de:b7:5a:84:3f:92:76:84:24:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B3:F8:A2:F7:5E:7A:3B:D2:A4:A9:2A:E8:3F:C1:2C:BD:C4:20:33
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/HLP4ovdeejvSpKkq6D_BLL3EIDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.42.0/24
86.110.49.0/24
86.110.51.0/24
86.110.53.0-86.110.54.255
Signature Algorithm: sha256WithRSAEncryption
4e:2f:02:18:cf:e8:06:a8:6d:b7:30:d6:17:36:65:a1:e8:53:
40:d9:ff:b6:31:16:21:08:97:9f:89:1f:67:89:e3:4b:8d:9d:
df:35:8c:2d:9f:8b:e5:ba:ea:61:03:d0:98:9a:eb:f3:43:a1:
55:fa:8f:94:df:50:16:54:a0:29:05:99:b3:b3:df:5b:81:08:
81:3d:21:90:57:41:73:95:4d:ce:ff:2d:79:4c:3f:44:4e:24:
d7:98:b6:12:52:f6:f9:d0:7e:b4:de:0c:10:2d:ea:4d:bf:d7:
a7:b2:f4:9b:77:a0:c3:78:58:15:4d:06:d7:78:3f:ac:a1:57:
33:ca:2b:6b:1a:a9:9b:f3:a0:bb:63:51:e7:79:52:57:8f:1c:
9e:e0:f4:56:a0:af:95:a3:a3:25:04:4d:b4:2e:b2:7b:c4:f3:
73:02:c7:e9:24:ef:68:4a:0e:40:1a:bc:db:92:0d:28:96:20:
21:c6:62:42:25:b8:5f:6a:59:ea:2d:c6:dc:79:df:5f:42:46:
9f:90:ad:70:c5:05:37:a0:1a:e0:55:b8:68:02:04:b4:7d:16:
5d:fe:e4:75:be:b7:32:27:27:c9:71:b2:25:d4:2a:37:93:33:
14:58:4f:30:ed:2c:0c:8d:d7:e9:be:22:5f:32:db:27:95:e9:
21:42:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:04 2025 by rpki-client