Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/b7b4xwsWw4xN1mZVc5TB-TIfB9M.roa
File: b7b4xwsWw4xN1mZVc5TB-TIfB9M.roa (raw, json)
Hash identifier: nkfFQUEtRm4a7XG5FNu2o2vc3VshtimAsgYcy196siY=
Subject key identifier: 6F:B6:F8:C7:0B:16:C3:8C:4D:D6:66:55:73:94:C1:F9:32:1F:07:D3
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01947FAA2DBE83AAE76D135F78877670DCA3
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/b7b4xwsWw4xN1mZVc5TB-TIfB9M.roa
Signing time: Sun 19 Jan 2025 17:44:06 +0000
ROA not before: Sun 19 Jan 2025 17:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 86.110.36.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
86.110.56.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7f:aa:2d:be:83:aa:e7:6d:13:5f:78:87:76:70:dc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 19 17:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fb6f8c70b16c38c4dd666557394c1f9321f07d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:27:44:27:be:b2:7c:57:4d:b3:5c:ff:bd:
3e:39:f2:8b:6c:74:65:03:5c:11:2f:ce:7e:ad:d6:
24:d9:a3:d1:8e:55:79:0c:57:b2:eb:73:11:32:75:
0a:2d:13:45:cd:12:72:01:fa:bc:f2:c6:4c:d7:17:
df:d0:0d:ef:1d:8f:c0:ac:9f:8d:ef:bc:7b:71:f6:
45:9b:d5:4c:7b:2c:29:fa:0d:f2:4e:a3:80:08:05:
39:73:56:e9:a2:cd:c8:ce:5c:a6:34:18:97:e1:1b:
07:70:30:17:bb:60:2f:09:da:94:be:4f:7b:db:9f:
5c:56:00:53:63:ef:4f:ea:39:01:7e:55:6d:9f:1e:
7f:38:b9:dd:9f:e8:a2:47:5f:1e:0d:04:ef:74:3b:
4b:10:66:f7:c1:60:c5:cc:c2:2a:6c:17:bb:2f:b3:
47:63:95:fb:6e:33:23:86:b1:00:ae:56:8d:f1:60:
d2:3c:70:0a:70:d2:c8:58:62:4f:3e:71:04:f4:56:
fe:7d:3d:19:b3:88:f3:de:80:59:17:45:86:64:26:
17:9d:a8:c2:b8:79:ff:36:ae:e3:dc:c3:8d:a9:a0:
53:c7:a0:14:b7:08:c8:fa:6e:5c:5f:c2:c3:09:db:
de:56:f9:85:f5:2f:d8:a4:34:eb:24:f8:eb:95:7c:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:F8:C7:0B:16:C3:8C:4D:D6:66:55:73:94:C1:F9:32:1F:07:D3
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/b7b4xwsWw4xN1mZVc5TB-TIfB9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.36.0/24
86.110.53.0/24
86.110.56.0/24
86.110.58.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8d:09:18:56:d3:5e:7f:ae:81:91:d0:ba:8a:0d:f5:6f:f4:
5b:a8:67:f8:07:38:91:74:0e:30:ae:a9:56:63:80:62:14:e4:
00:b9:7b:2c:18:32:da:9d:38:e8:bc:36:0c:60:8d:ac:f4:66:
2a:c3:e6:8d:ec:ac:ab:1f:6d:48:45:cc:4a:bc:68:66:29:82:
ed:77:9c:f2:cc:b8:3a:65:a5:86:62:ae:1d:e7:12:b2:38:22:
02:97:b8:3b:38:c6:b8:58:28:a1:a9:c6:49:e5:cf:95:a0:eb:
ea:2c:9b:5a:0d:a4:c9:12:52:8a:3c:9a:a1:b3:14:e9:b7:e2:
01:1e:b2:d0:5b:00:56:6c:dd:e1:9d:7a:ca:cb:4f:06:ef:14:
8c:a4:43:7c:89:59:c7:e5:22:77:c5:4c:81:4e:72:c2:17:5e:
08:6f:b1:8b:df:db:d0:5e:cb:c0:44:de:da:1a:43:8c:d0:1f:
44:49:bb:99:d1:82:87:dd:6c:e8:76:52:2f:d9:2c:ac:e2:09:
f9:c9:f1:38:d2:55:3d:62:00:93:fa:7c:1c:bc:00:00:0c:bd:
ff:e4:6c:c5:05:44:39:6e:04:82:78:c7:7c:2b:de:a3:ab:5a:
1f:38:8c:7b:55:2e:90:86:fe:0d:f9:4f:09:7b:89:98:9f:fe:
fc:74:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:04 2025 by rpki-client