Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/w0mkvHJvYqYRrCAmMeF00rT71aI.roa
File: w0mkvHJvYqYRrCAmMeF00rT71aI.roa (raw, json)
Hash identifier: vybW5werY0jIAH0spzm8HQMguj0KFaqMGDIgtuMJbyo=
Subject key identifier: C3:49:A4:BC:72:6F:62:A6:11:AC:20:26:31:E1:74:D2:B4:FB:D5:A2
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195D2CB8C638AB10AF741F1BE105C4C3B2A
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/w0mkvHJvYqYRrCAmMeF00rT71aI.roa
Signing time: Wed 26 Mar 2025 14:11:49 +0000
ROA not before: Wed 26 Mar 2025 14:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 86.110.48.0/24 maxlen: 24
86.110.50.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:cb:8c:63:8a:b1:0a:f7:41:f1:be:10:5c:4c:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 26 14:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c349a4bc726f62a611ac202631e174d2b4fbd5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:9c:12:37:09:62:b6:25:43:a9:af:93:4e:
39:f9:ff:00:f3:19:80:14:e9:f7:f4:1e:5e:7c:38:
07:d0:66:ff:b3:2d:c0:2a:7b:fb:bd:2a:30:eb:4d:
d0:6a:0d:2e:66:6e:34:d7:57:68:84:ed:c1:a7:b2:
58:69:f7:0f:1c:14:3c:74:a1:c0:85:12:c0:3d:89:
13:fd:69:cc:f7:fa:4f:c6:2b:ed:45:e2:ad:8a:86:
f2:6c:c2:65:ff:2e:b1:a2:b3:17:66:d8:94:38:92:
8e:89:4b:a0:77:b4:85:94:9c:d3:92:d6:d1:c4:e1:
1e:6f:49:57:21:c1:f8:e9:8a:4d:97:7e:46:1e:94:
6c:36:74:9c:03:5d:45:6f:ef:83:64:74:b7:a2:02:
87:57:2f:74:91:82:3e:92:1a:1d:5e:d9:ee:60:e9:
f8:d1:de:c8:4c:9b:b5:36:92:3f:11:f6:94:f2:21:
c2:cc:4b:82:f1:4b:ea:6a:c4:b0:12:0c:c0:75:e7:
91:43:94:ff:50:20:cf:ba:07:29:6e:b8:63:14:ef:
f4:0e:da:a2:47:2b:8d:ea:ae:79:40:51:d7:53:ef:
ce:41:6b:1e:1a:48:5a:c4:1c:d9:54:48:d0:c3:2f:
d1:67:8b:1c:a4:c6:06:68:c0:ed:a9:85:bc:40:23:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:A4:BC:72:6F:62:A6:11:AC:20:26:31:E1:74:D2:B4:FB:D5:A2
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/w0mkvHJvYqYRrCAmMeF00rT71aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.48.0/24
86.110.50.0/23
86.110.59.0/24
86.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ab:d6:87:29:93:7e:79:8a:e7:76:02:d0:88:27:e0:06:01:
26:be:75:95:93:a3:2c:bc:10:55:c2:d4:f4:3d:f1:a5:e8:23:
93:5c:74:04:50:59:db:88:bd:83:87:9b:f3:43:bc:59:2f:f8:
cc:d9:e6:9d:a1:66:9e:d2:77:4f:8a:a1:f0:2a:74:c8:bc:42:
52:80:26:48:48:55:47:e0:a6:b0:77:69:fe:d6:04:31:c3:56:
f9:6b:f4:a7:e0:f2:2b:19:f9:7a:e5:93:0c:11:93:fc:95:2d:
9a:2b:5d:35:8c:b4:da:fc:12:cf:54:fd:e6:0c:67:fb:0e:4d:
22:cd:2c:9d:6c:3a:49:ef:ae:6f:2d:72:89:27:62:e1:1e:d1:
b9:00:65:d2:c0:61:10:cc:be:cb:cb:6e:3a:e9:0e:1d:3b:07:
55:84:10:fd:76:b3:81:59:20:2f:1b:15:0b:84:e7:76:9f:56:
45:a0:24:a8:6f:d8:1e:52:76:a0:3d:f5:4f:5a:c9:c3:27:87:
ff:4c:c0:41:5c:a2:a7:21:40:c3:a5:5a:2d:11:e3:23:67:66:
33:21:5d:95:49:06:a4:1b:5d:71:14:3b:da:74:8b:95:76:2c:
a3:c2:50:e9:ab:59:86:69:0c:22:fc:66:5e:f2:32:b8:13:06:
28:a6:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:05 2025 by rpki-client