Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MeG22iTv0tV2UTcpjidW4Z8BAIY.roa
File: MeG22iTv0tV2UTcpjidW4Z8BAIY.roa (raw, json)
Hash identifier: q3wlC1Uwj7SrSc2s6DAkKnTRmcMxJzhqjTDqS1dPGmA=
Subject key identifier: 31:E1:B6:DA:24:EF:D2:D5:76:51:37:29:8E:27:56:E1:9F:01:00:86
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195D35FDDE86DA17DE0CDB59DE495692D0E
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MeG22iTv0tV2UTcpjidW4Z8BAIY.roa
Signing time: Wed 26 Mar 2025 16:53:50 +0000
ROA not before: Wed 26 Mar 2025 16:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:5f:dd:e8:6d:a1:7d:e0:cd:b5:9d:e4:95:69:2d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 26 16:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e1b6da24efd2d5765137298e2756e19f010086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:b8:e6:85:c6:7a:f2:1e:7c:9a:c4:f4:d8:
1d:c2:fc:48:c6:78:35:03:fc:8c:c0:07:1c:65:70:
c8:bf:4e:bd:3c:6c:d7:c2:c4:ba:6a:ad:ab:ad:b4:
42:54:6f:53:ce:e8:68:33:01:66:78:d8:cf:76:2f:
9e:9e:32:30:96:c5:9c:15:11:e5:bf:48:1d:75:9e:
b8:32:83:66:1f:21:3d:b5:59:c4:a5:4f:69:02:a3:
a9:85:63:cb:5f:7f:f7:0a:a9:96:1b:9a:33:38:2b:
b2:63:06:54:1b:a9:a6:d0:a6:4e:48:27:98:6c:32:
05:99:bd:70:8a:18:db:3f:ab:35:f5:35:e8:69:d8:
10:83:9b:83:4a:a0:a8:dd:e8:19:bf:9d:84:8d:ce:
d2:12:87:4f:35:2a:27:52:11:2b:83:f3:fd:bb:d1:
80:00:3b:07:c8:9c:39:c9:10:19:b4:fc:02:99:ad:
2a:7d:a2:9f:53:bb:a9:64:62:ad:b8:bd:d8:4a:7a:
4c:4f:da:8a:8f:20:b2:1e:90:8a:09:47:44:99:aa:
52:d3:8d:8e:8e:fd:d3:ba:97:72:08:32:ae:77:56:
5b:7a:ea:dc:2c:9a:56:14:65:7f:b3:3f:bb:2a:a8:
d8:54:40:b6:b6:63:ee:51:c7:71:15:b1:aa:28:22:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E1:B6:DA:24:EF:D2:D5:76:51:37:29:8E:27:56:E1:9F:01:00:86
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MeG22iTv0tV2UTcpjidW4Z8BAIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.42.0/24
86.110.49.0/24
86.110.54.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a3:9d:28:02:b3:d8:8e:c3:5a:14:84:26:33:94:a0:51:8b:
81:2d:42:83:33:e6:42:80:01:a1:01:50:40:36:82:75:33:36:
80:e4:2d:05:c7:58:39:f6:0e:ae:db:a4:35:e3:a7:85:81:78:
c8:e6:4b:26:e6:1b:2a:b0:c4:93:94:ad:4e:93:f6:ee:be:18:
6e:70:90:f5:2b:0c:55:05:7e:6f:43:f8:31:f9:95:e8:3e:d7:
2d:aa:d5:ea:04:00:ab:d2:9b:03:19:64:00:b4:14:54:77:5d:
60:30:56:0c:0a:45:60:44:46:f0:51:ac:19:7c:db:51:b6:9c:
7e:77:44:4a:38:96:a5:fd:2d:13:e7:8e:1c:97:ad:a1:28:2b:
6b:16:af:1c:46:86:53:92:19:86:c6:bf:0d:13:f6:a2:c3:2f:
f6:f5:fd:0a:b6:af:2a:83:97:95:52:53:a7:97:d9:b4:0f:7e:
bc:fa:05:13:d3:17:6c:ec:d3:76:ec:a5:0a:b0:19:4c:c6:2a:
65:6e:05:88:70:c3:ef:d4:aa:6d:37:17:fb:af:2a:c7:0e:74:
35:e3:9d:0f:bc:05:26:af:11:33:6b:3b:d8:81:c0:fc:d3:5d:
f0:02:9c:ad:1c:28:9f:a0:50:d6:f7:e7:24:80:d8:92:19:53:
d5:72:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:53:10 2025 by rpki-client