Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/N2e1KwpBdyrR37kUp0a7fUH7zN8.roa
File: N2e1KwpBdyrR37kUp0a7fUH7zN8.roa (raw, json)
Hash identifier: JBgmHvoo9+VvXNhQsnYMPfpkAAYuKk4YvwJXglBCh0o=
Subject key identifier: 37:67:B5:2B:0A:41:77:2A:D1:DF:B9:14:A7:46:BB:7D:41:FB:CC:DF
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195040A5D096CBE641C40B437D053A5E73A
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/N2e1KwpBdyrR37kUp0a7fUH7zN8.roa
Signing time: Fri 14 Feb 2025 10:39:02 +0000
ROA not before: Fri 14 Feb 2025 10:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 86.110.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:0a:5d:09:6c:be:64:1c:40:b4:37:d0:53:a5:e7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Feb 14 10:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3767b52b0a41772ad1dfb914a746bb7d41fbccdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:18:6e:ea:0f:bd:b1:e3:3a:86:9d:13:9a:
e1:fe:14:27:a8:7b:f9:5a:1a:f1:02:a0:ca:69:1e:
76:fe:eb:4c:9d:b8:56:76:c7:9d:43:89:fd:71:12:
9d:e4:2d:e6:49:56:af:26:28:70:13:d9:91:3d:2f:
33:50:c2:63:0b:5b:85:ae:89:9b:42:f1:e5:c5:11:
42:0e:dc:12:ae:ab:a9:05:7d:34:90:84:f9:5d:77:
1a:60:e0:fc:41:03:80:1e:c7:b8:28:8c:96:98:33:
8b:33:e8:53:e6:30:7d:0f:e1:a3:67:25:c2:39:c6:
eb:3d:5e:10:28:8a:9d:94:ed:49:eb:ad:4c:63:6f:
ec:fc:45:96:e8:9d:95:91:f5:15:a0:bf:b7:be:6a:
6c:b6:90:17:9f:85:a3:30:6b:d5:63:f7:7a:74:4f:
ae:f0:c4:20:05:97:de:a8:e7:3a:8b:b0:d6:b8:24:
31:66:35:2e:1d:b4:5d:c3:cb:8b:5c:b7:43:ce:fc:
fd:e5:31:0d:12:89:0e:a7:27:cc:67:99:b7:c6:fc:
6a:77:b8:e1:6d:dd:0c:11:b7:1c:ed:a6:b1:d7:90:
19:4f:d1:ba:32:98:21:f1:75:46:32:f4:ae:61:41:
b9:8a:ad:51:65:a9:e3:42:1c:78:f4:25:a2:18:3f:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:B5:2B:0A:41:77:2A:D1:DF:B9:14:A7:46:BB:7D:41:FB:CC:DF
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/N2e1KwpBdyrR37kUp0a7fUH7zN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.56.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a2:c3:c0:00:4f:f0:cf:1d:8e:d8:fb:96:9d:b8:03:c4:6d:
42:51:eb:63:7e:42:7c:a2:68:4d:6b:62:8c:54:b6:6e:80:15:
85:34:8b:98:cf:50:fd:4b:82:b6:68:38:d5:66:ae:19:69:ae:
01:e1:58:a0:68:75:7f:16:b5:83:a7:7a:a2:e2:96:c6:0a:e4:
07:95:bb:02:48:c7:1a:82:a6:67:eb:d1:70:4c:29:74:cd:0e:
ee:41:2f:4a:50:43:a1:29:cd:df:67:4e:6d:1c:57:2e:b3:65:
5b:18:b1:d7:07:19:84:40:6e:74:1f:48:10:86:51:c4:59:d3:
13:f0:fb:8e:ad:a2:43:b8:b7:62:fc:75:75:84:fe:47:c1:23:
a7:6d:f1:2d:c9:d3:2e:0b:a3:dc:ab:fb:da:d8:21:73:c9:e6:
83:95:9d:e7:0d:6e:a5:83:c2:7d:0d:57:e7:3e:81:45:1d:7e:
11:8b:f7:8f:ff:30:57:f6:bc:22:6a:3a:0a:fd:d8:19:02:c3:
ea:3e:c1:85:b5:4a:de:18:87:be:a5:91:6c:ab:c8:e5:7d:b3:
2a:3c:be:60:13:d9:69:f7:3c:83:e3:6b:60:94:c6:e8:97:c6:
c3:f5:54:15:43:68:48:56:7a:76:77:65:d4:62:c9:f8:9a:21:
72:3f:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:09 2025 by rpki-client