Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dwbrpKdHneYwi6Da8KbDgkX0CFk.roa
File: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (raw, json)
Hash identifier: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=
Subject key identifier: 77:06:EB:A4:A7:47:9D:E6:30:8B:A0:DA:F0:A6:C3:82:45:F4:08:59
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0194F917EFCD47A88B3BD4C3F54815DE7E0D
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dwbrpKdHneYwi6Da8KbDgkX0CFk.roa
Signing time: Wed 12 Feb 2025 07:38:02 +0000
ROA not before: Wed 12 Feb 2025 07:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 86.110.40.0/24 maxlen: 24
86.110.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:17:ef:cd:47:a8:8b:3b:d4:c3:f5:48:15:de:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Feb 12 07:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7706eba4a7479de6308ba0daf0a6c38245f40859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:67:93:74:ca:4a:07:73:6e:2c:d5:5f:6f:
ef:8b:06:58:6d:0d:80:9c:8b:fd:87:4a:88:b7:f1:
22:63:46:c2:5f:cd:91:5a:5d:f8:1f:11:46:46:da:
9f:6d:e1:eb:53:25:9a:b6:0b:94:cf:82:22:6f:ca:
ad:cb:ee:74:a1:fb:89:3f:15:93:49:fc:94:56:1a:
22:ac:cc:42:0f:6e:84:88:86:62:cd:25:d1:0b:44:
88:f6:52:cf:50:69:30:0e:d1:7c:78:81:be:a9:7a:
ef:18:4d:7a:f5:79:4c:2c:7e:7a:c6:2e:37:0f:2c:
15:5c:96:a6:59:81:3d:72:b4:b9:e5:aa:01:71:c3:
91:a1:62:23:4b:9f:dc:ad:75:dc:95:5e:88:d1:4a:
fc:45:01:40:c7:8b:46:79:9f:6b:c9:c5:45:ef:ea:
93:6e:38:19:11:ee:fd:da:30:19:9c:b0:25:e4:8a:
58:91:36:0c:16:c5:60:23:ab:ae:ce:c4:00:66:a8:
fb:fd:ad:67:39:d4:9d:0b:7c:92:8c:5a:36:25:40:
db:a1:59:b0:f5:29:7e:4d:55:0d:7f:98:0e:3f:12:
02:33:a4:c9:05:6c:60:f4:d2:3e:15:af:cf:2b:50:
f4:e1:3d:f1:cf:8c:8d:18:91:0c:59:30:b3:17:e1:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:06:EB:A4:A7:47:9D:E6:30:8B:A0:DA:F0:A6:C3:82:45:F4:08:59
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dwbrpKdHneYwi6Da8KbDgkX0CFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ff:d6:f7:bc:84:e6:b3:84:2d:ee:2c:76:dc:11:bd:a8:97:
88:cf:0a:62:39:4f:77:1d:7c:cc:fd:a6:c1:35:f7:fd:1c:51:
6c:0c:c2:7f:de:3e:8d:67:a0:1d:2e:8f:68:47:79:78:ff:f0:
04:10:41:12:91:ce:f8:3d:ea:fe:d1:97:6b:58:87:af:4e:7d:
0f:80:83:43:7b:5e:2d:96:18:29:24:ad:98:35:9d:56:fc:58:
7a:47:58:5f:d0:83:c8:d8:59:3e:27:ce:ab:cd:b1:78:fc:3d:
c5:bd:b0:91:f0:e1:ba:1f:ec:7c:07:35:0a:db:c2:6e:60:7e:
d0:c1:20:d1:99:a0:6a:3c:da:d2:a1:d4:51:ec:87:39:96:07:
a8:a0:d6:0a:ea:c7:b6:1d:00:18:4a:22:ac:e1:fc:ec:7a:e6:
34:a9:13:7a:28:50:87:d3:f0:22:f8:3a:57:dc:a1:97:ca:70:
ef:66:24:dd:05:f9:38:3b:4a:a3:d1:78:cc:79:4b:f5:f7:07:
57:89:5d:0d:42:bd:e5:db:f9:14:f7:9b:0d:79:f1:7f:5a:38:
db:08:b2:0e:68:2f:5c:8f:42:7a:59:8a:f1:de:22:01:1e:af:
4c:13:ce:d2:31:56:1a:53:83:88:75:5c:c1:65:f5:10:cb:8a:
50:05:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:27 2025 by rpki-client