Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/J7HT21OTXVz9kVm2R78Me_Yk-do.roa
File: J7HT21OTXVz9kVm2R78Me_Yk-do.roa (raw, json)
Hash identifier: RA/9gmPpW9DZg4VnGPPdlxXBEkSiawl+jt6GQ2+kNrQ=
Subject key identifier: 27:B1:D3:DB:53:93:5D:5C:FD:91:59:B6:47:BF:0C:7B:F6:24:F9:DA
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0194DAE71C7AE68E98E77931D2AF65A33E91
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/J7HT21OTXVz9kVm2R78Me_Yk-do.roa
Signing time: Thu 06 Feb 2025 10:56:06 +0000
ROA not before: Thu 06 Feb 2025 10:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 86.110.53.0/24 maxlen: 24
86.110.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:e7:1c:7a:e6:8e:98:e7:79:31:d2:af:65:a3:3e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Feb 6 10:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b1d3db53935d5cfd9159b647bf0c7bf624f9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:fd:00:f6:13:7a:07:88:5a:98:cc:c7:0d:
5a:99:ff:4b:64:50:54:05:33:9c:94:f7:fc:d7:c9:
4e:38:41:ff:8d:01:df:b7:97:bc:5b:08:71:07:1b:
88:cd:b3:5c:34:4b:62:b5:c2:d6:76:e0:c9:ed:19:
0c:21:f2:e7:74:09:b2:9b:06:d9:80:e7:98:b8:3f:
dc:ea:4d:e1:97:eb:a4:83:15:cb:be:48:98:2e:49:
f5:e2:ce:dc:41:0f:44:05:7b:49:0c:93:df:5e:3d:
47:8b:76:d7:5b:b6:0b:32:05:48:73:d6:b0:f2:53:
8f:5e:78:27:38:84:e4:a3:ba:7f:34:cb:a4:1d:f9:
cd:d3:0e:79:1a:43:ba:86:32:98:71:9f:01:3d:ed:
19:69:a2:d5:59:e0:b2:fb:8d:57:1a:5a:ef:e5:28:
0a:34:b0:44:76:96:aa:15:be:db:fb:d6:79:75:04:
ea:25:76:84:63:ef:01:5b:a3:09:21:ab:10:04:20:
8e:9f:f1:76:8a:b9:97:e2:72:55:32:ae:ef:c0:04:
1b:c7:6c:88:a7:81:31:30:1f:d6:18:30:39:bc:c0:
ff:4d:72:c5:5f:2c:55:14:15:a2:c8:37:e2:30:0c:
da:3e:d3:f5:c9:45:fa:d2:97:81:7b:1e:20:b4:5d:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B1:D3:DB:53:93:5D:5C:FD:91:59:B6:47:BF:0C:7B:F6:24:F9:DA
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/J7HT21OTXVz9kVm2R78Me_Yk-do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.53.0/24
86.110.56.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ec:72:ea:ef:c3:1e:30:f4:fc:97:a9:12:e8:4d:6f:4f:ac:
75:37:05:eb:32:73:43:46:df:c0:f5:48:56:40:2c:96:d5:94:
4d:38:38:e2:72:43:0c:44:91:8b:cf:b2:f2:c6:7a:49:60:60:
f0:bb:9e:30:e1:2d:32:14:e3:e7:10:f9:15:15:25:58:e7:f9:
5c:75:43:4b:c0:57:fb:82:f3:5b:8c:65:6d:45:f2:d6:ca:e7:
16:45:03:76:d0:3b:30:12:4a:8d:1a:f3:ee:85:75:74:1e:42:
5c:c8:80:23:6b:e8:f1:78:85:f8:de:2b:ff:8e:ca:09:5a:3a:
34:aa:f0:4b:57:b2:9e:aa:2d:2c:7b:fe:07:3a:e5:d2:6c:15:
da:1d:ea:e1:5a:71:7f:b0:60:7a:42:02:65:1d:1d:46:71:a2:
14:18:ed:8a:72:d8:e0:2c:27:4d:e5:b5:d2:40:e6:be:cf:84:
61:5a:94:a5:b4:66:8d:70:89:e4:f0:c3:9e:ec:b3:d7:c5:54:
0e:f4:17:9a:6b:9b:50:d8:e0:c2:f3:b6:30:34:e7:a0:96:52:
8c:a6:09:9f:45:6e:bd:c9:c5:42:5b:d6:eb:78:a8:9e:84:b6:
bd:11:f5:dc:b5:3a:85:63:ce:5c:b2:3c:a1:93:28:98:67:88:
5a:09:50:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTa5xx65o6Y53kx0q9loz6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwMjA2MTA1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2IxZDNkYjUzOTM1ZDVjZmQ5MTU5YjY0N2JmMGM3YmY2MjRmOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/D9APYTegeIWpjMxw1amf9LZFBU
BTOclPf818lOOEH/jQHft5e8WwhxBxuIzbNcNEtitcLWduDJ7RkMIfLndAmymwbZ
gOeYuD/c6k3hl+ukgxXLvkiYLkn14s7cQQ9EBXtJDJPfXj1Hi3bXW7YLMgVIc9aw
8lOPXngnOITko7p/NMukHfnN0w55GkO6hjKYcZ8BPe0ZaaLVWeCy+41XGlrv5SgK
NLBEdpaqFb7b+9Z5dQTqJXaEY+8BW6MJIasQBCCOn/F2irmX4nJVMq7vwAQbx2yI
p4ExMB/WGDA5vMD/TXLFXyxVFBWiyDfiMAzaPtP1yUX60peBex4gtF32SQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCex09tTk11c/ZFZtke/DHv2JPnaMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvSjdIVDIxT1RYVno5a1ZtMlI3OE1lX1lrLWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm41AwQA
Vm44MA0GCSqGSIb3DQEBCwUAA4IBAQBW7HLq78MeMPT8l6kS6E1vT6x1NwXrMnND
Rt/A9UhWQCyW1ZRNODjickMMRJGLz7LyxnpJYGDwu54w4S0yFOPnEPkVFSVY5/lc
dUNLwFf7gvNbjGVtRfLWyucWRQN20DswEkqNGvPuhXV0HkJcyIAja+jxeIX43iv/
jsoJWjo0qvBLV7Keqi0se/4HOuXSbBXaHerhWnF/sGB6QgJlHR1GcaIUGO2Kctjg
LCdN5bXSQOa+z4RhWpSltGaNcInk8MOe7LPXxVQO9Beaa5tQ2ODC87YwNOegllKM
pgmfRW69ycVCW9breKiehLa9EfXctTqFY85csjyhkyiYZ4haCVAY
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:50 2025 by rpki-client