Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/VYfMficcVvyPEUcYoaEei786CXo.roa
File: VYfMficcVvyPEUcYoaEei786CXo.roa (raw, json)
Hash identifier: /Xf18ZBT535HGJ+9Jk2ZqkFouI3MqrU7dDojXQJrgto=
Subject key identifier: 55:87:CC:7E:27:1C:56:FC:8F:11:47:18:A1:A1:1E:8B:BF:3A:09:7A
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F44D06F3BA4EC21A980536E6850F
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/VYfMficcVvyPEUcYoaEei786CXo.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 86.110.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f4:4d:06:f3:ba:4e:c2:1a:98:05:36:e6:85:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5587cc7e271c56fc8f114718a1a11e8bbf3a097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:8d:07:09:10:c9:9e:55:6d:4d:d6:75:86:
e0:b3:d8:c8:2f:44:ea:5f:48:48:14:ef:62:9a:bd:
32:5c:ec:00:fa:42:ac:a3:a2:bf:95:29:94:28:b2:
68:ce:a5:1b:ef:d3:09:77:3b:ae:03:e7:a3:cc:2e:
50:d6:4b:57:bf:44:0e:31:59:b5:06:9d:11:92:4c:
7b:15:cf:52:eb:29:88:ae:e5:7c:99:82:50:cf:c9:
1d:17:c2:f1:1c:eb:bd:98:93:c1:e1:cb:ae:3c:d5:
8f:1e:77:8b:38:2f:11:57:93:03:c8:be:9a:0f:68:
fc:33:b5:94:4c:c2:66:5a:fa:00:3e:ca:14:ab:f3:
63:b6:ac:5d:af:a4:80:2f:d8:ef:b9:e7:84:3a:b3:
cd:c7:6a:c9:56:59:a8:9c:93:89:d0:21:1e:bf:87:
90:cd:a3:d3:bf:33:a7:50:35:d8:6a:c1:ca:1e:d4:
8a:ef:37:24:ad:f7:af:51:42:15:be:12:96:f6:7c:
65:71:80:25:82:99:8e:4a:e7:51:e4:0d:3a:50:85:
ea:c1:b3:ac:a3:0a:61:25:75:8e:02:26:e0:7b:6c:
e3:97:94:3a:8c:31:51:6e:a7:02:27:40:89:ce:e7:
0d:9e:cb:57:7f:5a:77:28:96:ff:07:c1:8b:77:bc:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:CC:7E:27:1C:56:FC:8F:11:47:18:A1:A1:1E:8B:BF:3A:09:7A
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/VYfMficcVvyPEUcYoaEei786CXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f5:0e:00:70:ce:38:bf:86:5d:99:b9:20:28:42:8f:a3:96:
b3:2b:9b:52:f5:53:22:d9:94:06:3a:98:52:78:32:e0:41:ea:
4a:ae:e0:df:f0:90:6e:2d:ab:ef:51:d7:4e:0e:fa:bc:5b:fa:
4d:b4:21:07:75:f5:81:c8:09:d6:c4:40:a6:a0:08:8f:90:f0:
1c:cc:dc:a6:d1:dc:d2:08:cc:60:e8:c1:f1:d5:d1:25:d5:a3:
7e:4b:29:43:d0:8c:6f:9f:c7:d8:cb:c0:a8:c1:df:29:62:27:
fc:8b:de:74:22:10:3c:90:df:71:ae:6e:2c:b6:3c:37:88:0f:
a6:d7:d6:dd:41:af:3e:2e:31:18:22:4a:dd:e2:68:d4:2b:6c:
cc:96:97:6d:be:92:b7:d1:a9:6d:29:02:8c:1b:6c:be:8f:75:
63:26:0b:e9:db:34:0f:35:75:a0:1a:55:d1:55:e2:16:4b:9b:
95:d7:a5:f9:b3:74:7a:a1:1c:a8:e7:0c:73:91:a0:91:bf:0e:
a3:37:e2:63:d7:3d:c7:0c:60:f2:fd:f4:68:e9:53:76:70:72:
e5:77:de:1a:21:5c:a6:99:65:b1:a6:0d:ff:2f:98:78:67:43:
c9:be:0c:e9:5b:63:73:0e:30:4e:9a:c8:28:51:d2:25:f1:3d:
7e:7b:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:39:50 2025 by rpki-client