Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/byB3F3FqsK8t0uXegtnPAV54Qhs.roa
File: byB3F3FqsK8t0uXegtnPAV54Qhs.roa (raw, json)
Hash identifier: AccIkEp6QWgzNMIzykV23Dx6eb5pSeMfcuYL14OmdYY=
Subject key identifier: 6F:20:77:17:71:6A:B0:AF:2D:D2:E5:DE:82:D9:CF:01:5E:78:42:1B
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F2B6AD6082AF412C08D585CC04F2
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/byB3F3FqsK8t0uXegtnPAV54Qhs.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 86.110.54.0/24 maxlen: 24
86.110.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f2:b6:ad:60:82:af:41:2c:08:d5:85:cc:04:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f207717716ab0af2dd2e5de82d9cf015e78421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:c2:bc:b6:06:2e:4a:1e:bf:e8:35:48:75:
5f:99:7e:43:8d:9c:0a:63:c0:3d:b1:56:2a:73:42:
30:d7:eb:ae:db:90:5d:ff:ae:d2:99:e4:8f:6d:6b:
1c:8f:80:95:4f:7a:06:fd:fe:7d:16:7b:2c:ab:23:
4a:67:09:2c:dc:9a:14:8b:c6:4b:dd:9a:6c:ab:5e:
19:10:5e:66:54:e1:2a:69:a4:56:68:d7:3e:0a:ac:
f3:28:a6:4b:de:34:47:f1:1e:81:e4:2a:ac:be:0d:
c4:72:58:5b:a5:5b:18:6c:48:d3:69:6f:b0:6c:34:
8f:ff:bb:2f:2e:5d:75:1c:0e:be:7c:05:64:ab:e7:
b2:fd:29:8f:21:75:2a:28:dc:f8:ed:eb:5d:ce:3b:
ba:33:7b:6f:35:ac:f8:55:1b:2d:c4:3f:0d:77:65:
ef:bd:19:81:64:ca:fa:cb:e0:91:e4:6d:c5:f5:2b:
6b:e1:18:7c:8e:ae:50:7d:b3:c9:78:9a:09:da:f7:
3d:b2:93:2f:e1:09:aa:87:f1:7a:37:a9:d1:41:81:
fc:0a:80:da:e1:6d:0f:00:9c:c7:3c:0f:af:a9:b2:
c5:bc:d4:60:9f:3c:5f:05:2d:7f:05:f9:5a:8c:26:
51:65:e7:f3:c5:25:c4:32:3d:cb:c7:9b:73:72:5f:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:20:77:17:71:6A:B0:AF:2D:D2:E5:DE:82:D9:CF:01:5E:78:42:1B
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/byB3F3FqsK8t0uXegtnPAV54Qhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.54.0/24
86.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3c:91:e5:5c:b9:7b:9b:66:6e:55:fa:d4:29:91:60:a2:bb:
cf:73:98:7a:1a:3d:de:e1:55:eb:81:da:6d:60:6b:58:22:1c:
cb:bb:c8:6a:53:1b:8f:dd:2b:78:65:4d:a4:25:92:c8:e1:08:
89:e1:5f:35:da:34:8e:c0:c3:3d:17:1b:2b:90:db:a8:71:fd:
2e:1c:91:84:70:3b:99:87:e4:89:e2:7c:dd:6b:42:e0:4a:85:
c8:b5:e6:a5:bf:9e:aa:8e:78:fc:28:06:25:74:89:90:7b:3a:
ae:95:a3:11:1d:de:86:c2:22:cd:85:6d:fc:a8:d3:b3:18:48:
71:16:1d:7e:3e:38:e2:38:58:72:e4:08:c6:86:27:be:0c:02:
7c:59:2a:89:ed:91:05:57:16:2e:9d:18:1e:b3:ce:09:23:f4:
8d:67:1b:98:1d:a6:80:70:11:17:83:cc:ea:e3:0f:d6:ce:ab:
8c:42:06:9a:c5:59:71:bf:bd:17:1c:7f:f2:c3:59:35:52:62:
0c:49:ae:58:8b:74:bb:a9:40:85:91:84:e0:ea:5f:24:d1:6b:
5b:a6:41:54:8f:6d:a7:fa:ab:5c:12:c5:1b:cd:67:e6:73:07:
be:dc:c0:fc:e4:b2:f5:c4:fd:d0:f7:f5:10:3f:c9:8a:77:ea:
23:3b:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:22:44 2025 by rpki-client