Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ybH7oWl57KVISIL92xUEQjYba7o.roa
File: ybH7oWl57KVISIL92xUEQjYba7o.roa (raw, json)
Hash identifier: AFQqhy70Hy/P9iRk2Pw7Jk6LXIwgQzdfZHwKE+cZiso=
Subject key identifier: C9:B1:FB:A1:69:79:EC:A5:48:48:82:FD:DB:15:04:42:36:1B:6B:BA
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F006820D6D0049C1F2C3880ADADF
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ybH7oWl57KVISIL92xUEQjYba7o.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.42.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:06:82:0d:6d:00:49:c1:f2:c3:88:0a:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9b1fba16979eca5484882fddb150442361b6bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:73:f8:4b:47:11:e6:3b:78:84:8f:ed:0c:
df:dc:54:93:db:d5:fb:6f:03:a0:f5:58:cb:09:a3:
fe:8d:3c:bc:6f:b0:3c:28:cf:bd:b7:1c:ea:84:9d:
be:f4:fe:d5:3b:c2:6e:e6:05:4c:7a:8e:8a:97:c9:
c3:ee:a2:47:d1:d5:18:18:7b:b1:3a:08:34:50:94:
22:8a:2c:f1:ee:c6:ab:e0:cf:18:ae:b5:72:0c:73:
66:81:2a:74:ef:91:bf:0f:03:03:69:f3:4d:85:cb:
aa:fc:57:2f:04:35:01:a1:9d:0d:0f:d4:ad:3b:b0:
dc:8e:09:16:b6:1c:4a:1f:b1:10:5b:9d:49:2d:c6:
4a:ae:4b:a2:13:7d:10:83:84:f8:9e:f5:9b:64:4f:
48:ac:76:88:d0:34:fc:f3:04:70:89:af:4f:cb:0d:
82:8b:21:8a:3d:f2:4e:91:7f:89:21:9d:54:b4:88:
b0:07:3d:00:3c:b0:30:34:45:49:a8:41:13:67:b7:
be:fb:18:fd:de:66:72:d4:91:69:32:e2:fd:78:95:
2a:1e:60:f7:d3:2c:0b:e4:ef:5f:95:73:36:7f:87:
4e:21:77:71:ea:8f:18:d1:23:e7:f0:ce:ce:c2:f9:
ad:4e:66:13:0f:57:90:e0:33:06:79:13:a8:ac:0a:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:FB:A1:69:79:EC:A5:48:48:82:FD:DB:15:04:42:36:1B:6B:BA
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ybH7oWl57KVISIL92xUEQjYba7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.42.0/24
86.110.59.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:3c:70:25:67:67:47:df:cf:5f:3a:c5:dd:8b:52:1a:66:37:
3e:d7:bd:8d:4f:c2:20:5a:55:bf:03:af:e9:3d:73:d5:64:fc:
7a:41:04:09:b6:31:a8:31:14:5d:d7:88:5f:06:32:20:78:6c:
6d:ee:b7:9e:7c:61:7f:86:eb:71:35:f3:73:81:44:35:6e:70:
f4:8e:3e:ef:80:5c:cb:f4:f0:bc:c8:c9:5c:f0:e1:dd:5d:e6:
d7:79:d1:58:43:09:32:62:4c:c3:e2:c2:01:fb:60:c7:71:12:
b7:c8:3c:6c:d0:6e:6a:b6:7c:b3:41:1b:80:ba:dd:31:20:35:
d9:c4:21:94:7f:94:74:c6:87:b0:37:db:2b:d9:fd:bd:35:e0:
39:41:23:1d:d9:e5:c9:6c:29:66:82:9c:34:95:95:36:82:77:
91:ca:f1:6a:30:96:6c:0e:62:69:46:75:a5:83:58:51:b0:50:
b2:fe:74:7f:56:1a:2a:5c:ce:7b:fa:1e:6e:10:7c:50:0f:29:
68:c5:dd:a6:83:29:0f:f1:67:c8:38:78:bd:20:c5:d1:f4:e6:
c0:13:d3:6f:58:7c:82:a6:27:6e:22:7f:b9:a9:4e:89:dc:15:
27:c8:c2:59:59:7e:43:48:2d:86:4f:2e:ea:40:d7:25:b0:a7:
fa:28:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:12 2025 by rpki-client