Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/x8uBxrCtkAoQjNYd1sD3iTUlOmc.roa
File: x8uBxrCtkAoQjNYd1sD3iTUlOmc.roa (raw, json)
Hash identifier: puFaa+kgbbOhMGejuzUy6W7tYvsv2s4f/iQfpSIYTms=
Subject key identifier: C7:CB:81:C6:B0:AD:90:0A:10:8C:D6:1D:D6:C0:F7:89:35:25:3A:67
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01957E2663DFB34EE18B81ECFEDEE6054AB9
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/x8uBxrCtkAoQjNYd1sD3iTUlOmc.roa
Signing time: Mon 10 Mar 2025 03:43:19 +0000
ROA not before: Mon 10 Mar 2025 03:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:26:63:df:b3:4e:e1:8b:81:ec:fe:de:e6:05:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 10 03:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7cb81c6b0ad900a108cd61dd6c0f78935253a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:af:72:f1:3a:3b:7e:b7:91:b7:8d:85:59:
4b:d5:78:56:43:5b:80:1e:82:02:63:41:8f:0f:8e:
18:68:71:8c:c9:21:92:c8:b1:da:52:ab:6e:ab:63:
52:d5:52:5c:1a:ed:cb:df:e3:e9:c3:2b:16:f0:ca:
88:c1:42:a4:3b:65:50:c7:40:54:9b:7a:72:ed:c9:
c7:12:44:d5:46:bb:72:a9:5a:5e:57:64:36:e0:2c:
cc:00:88:0e:0a:f3:d7:ed:80:cd:63:ed:b5:44:f5:
94:f5:fd:02:25:3f:ad:83:a6:79:1b:b0:fe:68:4f:
26:d2:c3:07:3d:4b:01:de:be:b3:fc:82:de:5a:64:
d8:11:0e:58:26:ab:15:dc:68:14:01:dd:16:e9:fb:
9d:b6:f8:42:d4:3b:c1:23:d6:c9:e1:fa:36:34:3c:
8e:07:af:8b:c5:e7:53:f9:56:b0:5c:9f:34:3f:48:
23:34:f6:64:a1:ef:43:f9:38:6f:c9:5a:e3:9f:a1:
8d:92:09:6e:24:77:30:8a:c2:ef:3b:63:e4:df:bf:
ef:ae:2a:f1:70:a0:fe:39:e1:f5:15:fe:40:c2:54:
0a:4b:2c:0d:92:2c:08:ed:2b:d3:31:35:2b:b2:7f:
6f:79:ec:2c:06:25:b9:ab:4a:2e:a7:33:f8:af:d0:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CB:81:C6:B0:AD:90:0A:10:8C:D6:1D:D6:C0:F7:89:35:25:3A:67
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/x8uBxrCtkAoQjNYd1sD3iTUlOmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.42.0/24
86.110.49.0/24
86.110.51.0/24
86.110.53.0-86.110.54.255
86.110.58.0/23
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:42:7f:44:6a:cf:ef:10:e0:42:f3:bb:dc:47:09:aa:da:eb:
6c:27:b5:00:1f:07:a2:b2:e0:54:ec:97:76:ed:f6:d4:f9:18:
eb:e7:2b:1d:24:70:84:7d:3c:66:15:41:1a:15:8c:95:a2:e0:
c4:59:16:14:34:60:6f:dc:ae:09:ab:a2:73:38:1f:5f:37:81:
4d:45:e8:a8:c1:10:47:04:39:3d:d7:b5:03:b8:75:f1:ba:61:
f2:6d:66:59:85:14:a6:8a:97:4f:29:7b:75:a0:83:b6:27:60:
48:6d:4a:c8:f6:fd:70:cc:06:0b:7a:ae:2f:c6:fd:98:63:7a:
4d:ad:c2:16:0a:a8:80:68:fb:cf:8a:0d:d9:41:e8:28:56:dc:
5a:db:5a:15:f1:f9:49:05:c2:bf:4f:eb:b2:18:db:a7:3d:ce:
c2:3e:75:7e:6e:4b:ba:6d:55:2f:58:51:12:7a:dc:c1:24:42:
ba:dd:cf:25:96:15:60:43:64:e2:78:41:3d:ee:e0:17:9f:20:
1a:41:8d:d7:b9:f4:2b:2f:bb:00:d3:18:0f:2f:e7:5a:2a:57:
cb:2a:23:ac:44:3f:eb:fc:e2:82:c8:e1:63:48:57:a4:32:e8:
d1:35:df:8b:ef:51:55:9e:f6:92:f7:05:68:81:2e:96:f2:c2:
42:d1:eb:3e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZV+JmPfs07hi4Hs/t7mBUq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwMzEwMDM0MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2NiODFjNmIwYWQ5MDBhMTA4Y2Q2MWRkNmMwZjc4OTM1MjUzYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B+vcvE6O363kbeNhVlL1XhWQ1uA
HoICY0GPD44YaHGMySGSyLHaUqtuq2NS1VJcGu3L3+PpwysW8MqIwUKkO2VQx0BU
m3py7cnHEkTVRrtyqVpeV2Q24CzMAIgOCvPX7YDNY+21RPWU9f0CJT+tg6Z5G7D+
aE8m0sMHPUsB3r6z/ILeWmTYEQ5YJqsV3GgUAd0W6fudtvhC1DvBI9bJ4fo2NDyO
B6+LxedT+VawXJ80P0gjNPZkoe9D+ThvyVrjn6GNkgluJHcwisLvO2Pk37/vrirx
cKD+OeH1Ff5AwlQKSywNkiwI7SvTMTUrsn9veewsBiW5q0oupzP4r9AQuwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFMfLgcawrZAKEIzWHdbA94k1JTpnMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEveDh1QnhyQ3RrQW9Rak5ZZDFzRDNpVFVsT21jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAVm4hAwQA
Vm4kAwQAVm4qAwQAVm4xAwQAVm4zMAwDBABWbjUDBABWbjYDBAFWbjoDBABWbj8w
DQYJKoZIhvcNAQELBQADggEBAH1Cf0Rqz+8Q4ELzu9xHCara62wntQAfB6Ky4FTs
l3bt9tT5GOvnKx0kcIR9PGYVQRoVjJWi4MRZFhQ0YG/crgmronM4H183gU1F6KjB
EEcEOT3XtQO4dfG6YfJtZlmFFKaKl08pe3Wgg7YnYEhtSsj2/XDMBgt6ri/G/Zhj
ek2twhYKqIBo+8+KDdlB6ChW3FrbWhXx+UkFwr9P67IY26c9zsI+dX5uS7ptVS9Y
URJ63MEkQrrdzyWWFWBDZOJ4QT3u4BefIBpBjde59CsvuwDTGA8v51oqV8sqI6xE
P+v84oLI4WNIV6Qy6NE134vvUVWe9pL3BWiBLpbywkLR6z4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:05:02 2025 by rpki-client