Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zKqL0B7ReUygonk8u8nbVuh3UaY.roa
File: zKqL0B7ReUygonk8u8nbVuh3UaY.roa (raw, json)
Hash identifier: 4nqjC3bFdwwmiziwijHl+i2Kyenqw5lmqITFBEnkbcs=
Subject key identifier: CC:AA:8B:D0:1E:D1:79:4C:A0:A2:79:3C:BB:C9:DB:56:E8:77:51:A6
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195AD2889FE915BD7BDBD37060C81A887F3
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zKqL0B7ReUygonk8u8nbVuh3UaY.roa
Signing time: Wed 19 Mar 2025 06:47:49 +0000
ROA not before: Wed 19 Mar 2025 06:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 86.110.48.0/24 maxlen: 24
86.110.50.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:28:89:fe:91:5b:d7:bd:bd:37:06:0c:81:a8:87:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 19 06:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccaa8bd01ed1794ca0a2793cbbc9db56e87751a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:d7:5f:04:c4:a5:eb:4f:88:c7:a8:66:66:
fb:94:04:2c:36:a7:db:5e:8e:7a:7f:82:2e:2a:85:
17:6b:40:07:af:19:74:36:ad:62:47:64:86:c7:b3:
0c:3a:cb:73:63:78:6a:e4:0f:d6:31:93:3a:08:50:
93:35:9b:c1:73:f3:e2:2b:98:f1:1f:9d:ba:16:1a:
41:eb:64:ca:cc:09:7d:a0:1a:64:a0:12:c2:e2:88:
9b:87:47:bd:40:d3:8e:a1:14:ba:64:52:de:8d:d9:
2f:bd:88:75:a2:f8:3b:cb:0f:e6:9a:e8:ea:ad:a5:
11:c8:f7:f7:ee:26:f9:4e:54:66:e3:39:aa:3b:e2:
84:37:e7:99:11:89:e8:85:2b:83:62:19:c0:cb:c5:
1d:93:f9:f6:de:4d:00:64:4c:12:29:b3:f1:eb:d8:
55:6f:18:29:a6:0d:3f:6d:84:c9:75:ba:d0:e6:3e:
26:09:b6:67:48:86:07:71:76:3c:fa:08:48:a4:c0:
33:ca:74:ed:5a:bf:49:7f:a7:5c:4d:57:c6:6c:38:
9d:10:87:c8:a1:d0:c9:3c:59:1b:f7:39:d3:a9:5e:
41:81:c8:9a:fb:12:54:63:c4:e4:41:bd:e7:cc:2f:
bf:15:1e:25:df:11:d8:a6:47:7d:25:a3:d1:03:a0:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:8B:D0:1E:D1:79:4C:A0:A2:79:3C:BB:C9:DB:56:E8:77:51:A6
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zKqL0B7ReUygonk8u8nbVuh3UaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.48.0/24
86.110.50.0/24
86.110.59.0/24
86.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
61:62:4c:0e:b9:f0:6b:ba:57:a2:ab:78:96:f2:eb:6d:75:36:
1b:db:27:83:e4:c7:2b:d0:7b:3d:62:51:d2:dd:ba:44:d0:ed:
16:f3:02:1e:b8:66:0b:5e:e0:6f:40:ba:68:f2:a9:49:77:10:
e8:73:11:6b:c9:97:c6:4c:d8:f4:1c:97:7e:15:34:31:2d:6d:
a5:a3:64:7c:8b:1a:d0:f1:43:25:d4:4f:f3:71:83:cb:12:c4:
23:47:a1:8e:af:8d:66:64:f1:02:90:70:b9:cb:2d:68:8c:37:
2e:d9:b0:61:78:34:bb:9e:06:ea:6b:99:4a:6c:91:d4:60:1f:
49:33:5e:29:c8:e6:72:df:5e:4a:59:4b:c2:c8:e4:78:87:1c:
54:83:dd:c8:53:13:38:58:31:3b:d6:b1:21:7b:ec:b5:45:c9:
5e:ce:c4:90:2d:68:64:64:c0:c0:4a:b3:67:9b:f6:c7:41:ac:
32:4f:fd:81:35:d9:54:aa:25:70:f2:f6:1a:4b:3b:0b:7b:28:
3d:8b:44:06:d1:5b:99:cd:d8:12:f3:9b:36:32:2c:c8:55:3f:
b0:7d:e5:94:bb:35:42:f3:89:1f:87:f4:fb:a1:91:83:7f:6f:
7f:6d:fd:98:2c:34:05:52:43:7a:69:d1:62:73:f8:ab:78:d0:
73:d8:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:48 2025 by rpki-client