Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/V3Ik9fLWTCSEo90603iRsGlzs2k.roa
File: V3Ik9fLWTCSEo90603iRsGlzs2k.roa (raw, json)
Hash identifier: faxb8PCWEgvn8lJilbJ+l8zuNPWnVNMv38DQVcM06rc=
Subject key identifier: 57:72:24:F5:F2:D6:4C:24:84:A3:DD:3A:D3:78:91:B0:69:73:B3:69
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0194FEF1BCB19A0D77BF4DE8F1439F32EAF4
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/V3Ik9fLWTCSEo90603iRsGlzs2k.roa
Signing time: Thu 13 Feb 2025 10:54:02 +0000
ROA not before: Thu 13 Feb 2025 10:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 86.110.44.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:f1:bc:b1:9a:0d:77:bf:4d:e8:f1:43:9f:32:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Feb 13 10:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=577224f5f2d64c2484a3dd3ad37891b06973b369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:3c:c4:12:05:c7:fb:21:37:c9:7b:79:26:
0b:18:25:f6:2f:7c:a9:c7:a6:c4:af:f7:44:66:50:
9b:f1:4b:5b:ce:39:b4:6d:fb:b7:9e:50:81:3d:3e:
67:a5:ad:e7:1a:56:7b:d5:1f:97:d9:99:30:69:fe:
f7:9f:4b:67:69:a9:1b:bf:8b:2b:f6:44:ef:c3:7d:
f8:2d:b7:05:18:71:df:dd:4f:10:04:4e:7b:c0:62:
5b:57:8c:f3:98:86:11:d7:79:b7:43:d4:b3:6d:ea:
3a:28:92:f8:87:af:17:5f:9a:f5:7c:6c:b7:58:91:
31:0b:f1:b6:88:35:dd:b4:50:8b:b3:37:e7:a2:9a:
f2:96:df:8c:70:db:8a:3b:16:49:c3:2f:47:e9:61:
78:36:a2:ef:d2:cb:4b:5b:f3:8d:18:b4:1d:67:46:
7d:33:90:31:ab:37:3b:34:95:2e:88:88:54:ba:40:
cb:45:9e:51:a1:e7:cb:7e:ad:0c:60:6b:8d:5c:a8:
53:c7:2e:a8:11:0e:8e:18:97:64:f4:04:23:a6:50:
04:5d:a3:b9:bc:90:2a:d6:11:7d:0b:73:05:11:fb:
a3:9a:b4:3c:8f:5f:b6:d0:10:ae:d7:d8:39:39:49:
10:60:db:b0:61:45:32:3a:61:d2:77:fa:86:54:29:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:72:24:F5:F2:D6:4C:24:84:A3:DD:3A:D3:78:91:B0:69:73:B3:69
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/V3Ik9fLWTCSEo90603iRsGlzs2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.44.0/24
86.110.46.0/24
Signature Algorithm: sha256WithRSAEncryption
21:fc:e0:0b:31:ff:fc:e5:89:68:73:40:b5:c5:4e:6f:1e:63:
41:b8:74:5b:12:d8:f7:0a:1f:32:20:11:77:b4:5c:c1:0b:0c:
23:6c:9d:92:a8:8e:f8:0d:6a:0f:81:d6:f7:b4:f0:2c:00:2d:
6c:38:e8:23:ed:01:35:21:13:80:fe:6d:c0:87:d4:e1:a7:43:
ce:d2:60:90:ba:a7:ae:58:88:02:0e:81:37:7f:9f:b7:3e:64:
c1:9b:71:b0:d5:fc:1a:e1:d5:7e:16:9e:d4:f6:d7:66:8c:46:
26:9a:48:a8:b3:37:2a:a0:13:6e:a0:c2:df:9e:71:75:3a:2c:
8f:8f:55:76:2d:1c:71:b0:62:7a:72:a1:23:fa:60:9b:13:62:
bf:80:9d:48:5a:43:d3:82:19:1c:b9:26:48:83:db:76:ed:da:
57:5c:41:f5:83:9c:f8:61:8f:13:1f:e3:5f:95:77:68:2f:6f:
7e:14:fc:7c:04:81:35:1c:0f:79:7b:dc:89:6f:e9:d4:54:9b:
68:42:2d:84:de:53:99:37:e6:d4:58:dc:a7:77:0a:2b:76:43:
72:ef:a1:49:d7:8c:d0:71:52:50:3b:0e:94:c5:57:30:b4:0a:
c1:8e:75:08:b1:c3:19:e2:c2:cd:b2:fe:fb:b3:d2:df:a8:cc:
5f:e8:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:05:25 2025 by rpki-client