Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/uJDjPj7paZZ9gXB70CmFn_w2rZU.roa
File: uJDjPj7paZZ9gXB70CmFn_w2rZU.roa (raw, json)
Hash identifier: bgp08/DwMPQoFP/EdAMySemQEE/jcCmFQvZAWVc73e4=
Subject key identifier: B8:90:E3:3E:3E:E9:69:96:7D:81:70:7B:D0:29:85:9F:FC:36:AD:95
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019393AE3EB66A518896E444F106BB59C6CF
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/uJDjPj7paZZ9gXB70CmFn_w2rZU.roa
Signing time: Wed 04 Dec 2024 21:58:10 +0000
ROA not before: Wed 04 Dec 2024 21:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54852
IP address blocks: 86.110.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:ae:3e:b6:6a:51:88:96:e4:44:f1:06:bb:59:c6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Dec 4 21:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b890e33e3ee969967d81707bd029859ffc36ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:94:ae:94:15:a3:a3:8b:85:c5:fe:fb:ad:
f2:5d:01:be:dc:ff:e6:30:f7:99:78:8e:cc:8f:e0:
32:a3:b4:de:c5:c2:3c:9e:e9:47:86:c9:b2:55:2e:
b8:f1:04:e6:de:66:dc:78:62:c3:84:0a:5e:81:28:
c6:ef:86:64:f8:39:8c:84:b6:26:f4:22:f6:da:ff:
f4:90:f5:64:df:7a:43:cb:1d:e2:0b:5c:bd:b0:73:
61:de:81:b8:b4:13:66:f4:a7:58:aa:92:12:36:0e:
44:86:9a:19:e2:6f:e2:09:3d:76:fe:4e:21:d0:ee:
c5:83:3b:2e:0e:ae:50:fa:be:ca:b1:d9:ec:e5:18:
9f:d1:94:de:ed:90:93:be:47:6c:3a:ec:6c:ff:63:
16:76:d5:82:d9:d1:dd:c7:63:ac:ad:a7:a5:8c:4d:
f0:a5:b3:69:45:91:37:3a:92:46:dc:57:e1:f1:72:
04:00:6e:d3:94:79:89:5e:b7:32:76:73:46:c1:3c:
f8:8f:ed:5c:be:ae:91:3c:16:d4:ad:eb:80:83:8e:
c4:9b:da:4b:a5:ab:95:f1:c0:00:68:b1:7d:1f:26:
6c:2c:71:ab:f3:70:9c:f5:d6:88:9e:11:18:2f:bc:
3a:aa:c6:d7:a2:c8:2f:0e:34:c6:57:17:1c:bd:62:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:E3:3E:3E:E9:69:96:7D:81:70:7B:D0:29:85:9F:FC:36:AD:95
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/uJDjPj7paZZ9gXB70CmFn_w2rZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3d:6e:b8:8f:a1:e6:53:bb:12:b1:47:7b:5a:a0:44:00:63:
ea:22:8e:49:02:51:4c:a9:5b:69:45:d3:05:17:ee:cd:8e:c1:
26:dc:c9:3d:38:f0:1f:d7:cb:ef:24:ec:35:71:3b:b8:f6:33:
f6:7a:78:0d:9a:7b:28:d0:d9:e1:87:cf:b9:28:82:9e:2f:0f:
de:f9:36:61:f5:df:4e:4d:94:cf:f9:e9:5a:ea:88:ee:7d:7d:
dd:8a:5b:e2:b1:85:12:36:a2:88:7c:6f:76:7d:71:10:98:28:
9c:ef:65:cf:7d:68:f0:5f:f0:dd:06:e1:b3:ca:95:c0:5c:79:
c9:0d:83:a7:7c:2d:30:31:70:ea:f3:4e:f0:d1:42:9e:d5:4c:
81:d3:58:81:f9:85:dd:5d:a3:ab:5e:a2:5d:62:ca:a2:9b:cd:
f4:da:7d:ae:6a:19:04:40:b3:e4:60:be:8e:e5:5f:67:a3:33:
f9:47:70:8d:99:e2:06:95:5f:a9:e9:89:da:f7:0b:cf:08:01:
7a:f5:c7:32:4e:b7:02:d1:f4:97:b9:75:4c:7b:87:65:bb:f7:
29:49:50:66:de:7c:72:22:95:c6:22:03:9f:ea:ea:d4:59:be:
37:f7:ed:09:d5:46:50:bf:ec:af:94:56:96:9d:24:a3:cc:5e:
8f:e5:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:44 2025 by rpki-client