Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nKotDxIUTZN-rOb_6KX6q69Rh4Y.roa
File: nKotDxIUTZN-rOb_6KX6q69Rh4Y.roa (raw, json)
Hash identifier: 7SpClXg3d621vHWDsj/wx6iHfBNJPmDPFhBZpV5gy6E=
Subject key identifier: 9C:AA:2D:0F:12:14:4D:93:7E:AC:E6:FF:E8:A5:FA:AB:AF:51:87:86
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019417854AECC32ECC7277C750A512C58C0E
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nKotDxIUTZN-rOb_6KX6q69Rh4Y.roa
Signing time: Mon 30 Dec 2024 12:23:18 +0000
ROA not before: Mon 30 Dec 2024 12:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 86.110.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:85:4a:ec:c3:2e:cc:72:77:c7:50:a5:12:c5:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Dec 30 12:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9caa2d0f12144d937eace6ffe8a5faabaf518786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:cd:f3:b3:76:fc:fd:8f:2a:ab:be:d4:b5:
89:ad:9e:b4:7b:3a:72:70:b3:03:b3:b0:d0:45:bb:
f5:3e:64:60:83:d0:e0:f4:b2:5d:fd:50:55:0a:fc:
57:6c:1f:af:7b:f0:9c:a6:cd:72:48:7e:6f:cc:9b:
b0:0a:9f:f8:1d:09:3b:44:9a:64:95:57:fa:83:7a:
6b:ef:30:5a:6f:c3:aa:dd:99:c6:9b:5d:fb:21:1d:
11:ca:f5:99:b1:92:66:4f:8b:08:0c:11:06:9e:f7:
7e:83:7c:1d:08:dc:c1:da:9b:77:02:d9:ad:6a:11:
65:5d:ce:8e:aa:a3:e6:a0:12:34:a9:f3:cd:46:b9:
d2:4e:98:c5:d8:0f:2e:75:7f:4d:71:9a:e8:45:40:
e2:7e:63:dc:a5:2e:65:c4:61:a3:4a:f9:40:d8:6f:
99:35:68:c6:8c:c3:ae:42:11:f5:91:22:d9:65:19:
70:f3:de:78:e3:89:d4:5e:4a:c5:25:33:58:3a:ca:
9e:24:9b:46:f9:97:4d:d4:54:d9:9e:e5:e9:dc:70:
ec:f6:e5:0c:ca:15:46:0b:3d:ad:57:88:fd:8e:dc:
9e:ba:e1:2c:59:cd:f2:13:b0:fe:57:83:a7:64:f4:
4b:84:1e:7f:7b:b6:44:e9:d3:c6:34:a3:2a:d1:6d:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:2D:0F:12:14:4D:93:7E:AC:E6:FF:E8:A5:FA:AB:AF:51:87:86
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nKotDxIUTZN-rOb_6KX6q69Rh4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.59.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c2:8f:ac:4d:cb:1b:29:1c:82:95:1a:12:e3:89:8e:01:cb:
ec:f0:49:63:a3:ba:bc:59:4b:7a:30:e7:e4:a1:0b:26:e9:8b:
5b:4c:34:1f:89:d0:84:fa:04:81:95:53:d8:b7:13:3c:d3:e7:
ab:bc:f3:de:7d:ac:77:f8:a3:16:2c:89:dc:77:c8:78:4c:d7:
6c:1a:bf:7d:f6:a4:d1:b8:fb:5d:39:e2:e5:32:43:a9:94:36:
3a:01:f8:13:2c:70:6a:d2:09:93:a7:9e:6e:90:83:a6:36:43:
95:11:b8:21:71:b8:fc:b8:61:f6:45:6b:c3:c2:af:aa:84:9b:
ca:6a:29:8e:1d:fc:6d:5e:d0:ee:23:fd:6f:17:a9:d9:3a:51:
41:39:06:c5:6e:25:68:86:91:bd:17:23:3f:9e:fc:60:ec:d4:
dd:74:bf:1f:ff:88:b2:8b:49:8c:53:2d:f1:8b:65:52:3b:13:
8c:0e:2d:b7:02:6d:30:54:11:8c:37:90:36:69:91:64:4e:c9:
8e:10:63:80:36:52:39:4b:a1:25:13:1d:58:69:54:f1:d3:e6:
eb:1b:fd:b9:35:7c:68:62:fa:53:43:13:bd:90:ff:39:0f:34:
d0:a5:f2:a5:4d:4d:0e:9d:b0:ce:25:cc:4f:47:d1:38:19:f9:
7f:93:3a:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQXhUrswy7McnfHUKUSxYwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjQxMjMwMTIyMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2FhMmQwZjEyMTQ0ZDkzN2VhY2U2ZmZlOGE1ZmFhYmFmNTE4Nzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbnN87N2/P2PKqu+1LWJrZ60ezpy
cLMDs7DQRbv1PmRgg9Dg9LJd/VBVCvxXbB+ve/Ccps1ySH5vzJuwCp/4HQk7RJpk
lVf6g3pr7zBab8Oq3ZnGm137IR0RyvWZsZJmT4sIDBEGnvd+g3wdCNzB2pt3Atmt
ahFlXc6OqqPmoBI0qfPNRrnSTpjF2A8udX9NcZroRUDifmPcpS5lxGGjSvlA2G+Z
NWjGjMOuQhH1kSLZZRlw895444nUXkrFJTNYOsqeJJtG+ZdN1FTZnuXp3HDs9uUM
yhVGCz2tV4j9jtyeuuEsWc3yE7D+V4OnZPRLhB5/e7ZE6dPGNKMq0W2bsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJyqLQ8SFE2Tfqzm/+il+quvUYeGMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvbktvdER4SVVUWk4tck9iXzZLWDZxNjlSaDRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm47MA0G
CSqGSIb3DQEBCwUAA4IBAQA4wo+sTcsbKRyClRoS44mOAcvs8Eljo7q8WUt6MOfk
oQsm6YtbTDQfidCE+gSBlVPYtxM80+ervPPefax3+KMWLIncd8h4TNdsGr999qTR
uPtdOeLlMkOplDY6AfgTLHBq0gmTp55ukIOmNkOVEbghcbj8uGH2RWvDwq+qhJvK
aimOHfxtXtDuI/1vF6nZOlFBOQbFbiVohpG9FyM/nvxg7NTddL8f/4iyi0mMUy3x
i2VSOxOMDi23Am0wVBGMN5A2aZFkTsmOEGOANlI5S6ElEx1YaVTx0+brG/25NXxo
YvpTQxO9kP85DzTQpfKlTU0OnbDOJcxPR9E4Gfl/kzro
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:42 2025 by rpki-client