Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zq6b-LQ9vtaNCe0cnnixmvQC768.roa
File: zq6b-LQ9vtaNCe0cnnixmvQC768.roa (raw, json)
Hash identifier: RhyTqbhInpt6pR5pCrC2XS8THwqBKMHTLDzg2cSgTEE=
Subject key identifier: CE:AE:9B:F8:B4:3D:BE:D6:8D:09:ED:1C:9E:78:B1:9A:F4:02:EF:AF
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0193BB54E216973ADCEA57A73671256345D7
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zq6b-LQ9vtaNCe0cnnixmvQC768.roa
Signing time: Thu 12 Dec 2024 14:45:22 +0000
ROA not before: Thu 12 Dec 2024 14:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 86.110.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:54:e2:16:97:3a:dc:ea:57:a7:36:71:25:63:45:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Dec 12 14:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceae9bf8b43dbed68d09ed1c9e78b19af402efaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:f0:78:d2:78:64:cb:69:e3:cd:8c:26:56:
40:21:1a:96:2d:c7:55:ce:26:e3:cd:ab:a5:98:c2:
a7:60:13:c6:00:e8:61:c2:3b:5b:16:f2:82:ba:f6:
45:75:db:a5:7d:56:61:3f:a2:c2:31:ba:c0:2a:77:
e2:83:b8:2a:20:37:0c:1f:e0:a6:22:a3:9c:ed:ba:
e3:9d:f9:2a:03:90:a4:24:45:82:58:05:36:01:44:
1f:e2:d0:6b:b9:54:75:78:b0:0d:dc:11:c4:71:f6:
94:03:54:8e:dd:7b:4b:ce:ed:2c:d3:e3:6c:09:04:
ed:02:27:a5:50:15:e2:03:2a:cc:54:2d:27:b3:57:
ed:7b:ba:8f:8a:dc:06:2e:73:3a:b4:09:0d:68:f3:
85:df:e8:db:00:8f:86:dd:d4:20:a7:d5:db:10:f1:
33:13:d2:43:e3:90:77:cb:8f:a5:40:af:6e:e9:5b:
c1:7a:0a:d7:27:43:74:83:01:2c:5a:35:8d:ee:a6:
56:8d:a4:0b:57:80:63:e1:2e:cc:f9:af:89:a3:b4:
44:2e:14:79:20:c3:b7:fa:a3:93:2f:b3:56:a5:e2:
ef:e8:5f:eb:1d:67:6d:8e:39:47:b5:0b:00:69:c3:
92:c4:dd:dd:6a:4f:15:08:37:85:26:46:e8:fd:8d:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:9B:F8:B4:3D:BE:D6:8D:09:ED:1C:9E:78:B1:9A:F4:02:EF:AF
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/zq6b-LQ9vtaNCe0cnnixmvQC768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.57.0/24
Signature Algorithm: sha256WithRSAEncryption
64:11:15:c4:6e:bc:b0:22:cf:ac:9c:6c:df:e7:c2:13:98:eb:
09:57:c5:ce:ff:47:64:07:5d:d0:f8:0d:2a:59:21:5d:2a:9a:
be:ed:86:f6:bf:f1:49:f0:6e:fb:0d:23:06:93:1a:db:b1:5a:
41:0a:91:46:a5:89:40:07:e8:56:93:4b:d1:9c:42:d6:5d:19:
2f:6b:6c:04:23:82:ec:08:a3:f7:2b:8a:b2:1c:fe:91:82:53:
9d:c6:64:d9:2f:01:27:c9:02:11:fb:62:ff:2f:c4:e9:e7:2f:
f4:d8:53:8f:65:34:8e:5a:41:74:02:d8:ef:1a:26:7a:d7:64:
a5:8e:69:45:91:11:c6:cd:54:4f:53:f2:f7:17:78:b9:91:f2:
85:56:db:d2:8b:dc:c8:d1:b9:06:ab:02:44:16:04:3d:0a:0e:
4c:fb:bb:29:c2:05:f0:74:41:42:7c:5d:16:26:53:0c:1c:a8:
1c:f7:a8:b2:9f:0e:3e:bd:c6:83:ab:bd:58:f7:5b:af:d5:10:
eb:d7:f5:4b:3b:be:92:9f:e9:91:11:39:0a:a0:77:d8:fa:5f:
3d:b4:3c:a8:00:80:51:86:b0:62:6b:48:51:71:44:35:34:65:
e9:9c:df:fd:e0:3e:e4:c4:d0:84:e6:19:08:01:54:b3:5e:f6:
6b:ff:d7:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO7VOIWlzrc6lenNnElY0XXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjQxMjEyMTQ0NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWFlOWJmOGI0M2RiZWQ2OGQwOWVkMWM5ZTc4YjE5YWY0MDJlZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhbweNJ4ZMtp482MJlZAIRqWLcdV
zibjzaulmMKnYBPGAOhhwjtbFvKCuvZFddulfVZhP6LCMbrAKnfig7gqIDcMH+Cm
IqOc7brjnfkqA5CkJEWCWAU2AUQf4tBruVR1eLAN3BHEcfaUA1SO3XtLzu0s0+Ns
CQTtAielUBXiAyrMVC0ns1fte7qPitwGLnM6tAkNaPOF3+jbAI+G3dQgp9XbEPEz
E9JD45B3y4+lQK9u6VvBegrXJ0N0gwEsWjWN7qZWjaQLV4Bj4S7M+a+Jo7RELhR5
IMO3+qOTL7NWpeLv6F/rHWdtjjlHtQsAacOSxN3dak8VCDeFJkbo/Y1gXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6um/i0Pb7WjQntHJ54sZr0Au+vMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvenE2Yi1MUTl2dGFOQ2UwY25uaXhtdlFDNzY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm45MA0G
CSqGSIb3DQEBCwUAA4IBAQBkERXEbrywIs+snGzf58ITmOsJV8XO/0dkB13Q+A0q
WSFdKpq+7Yb2v/FJ8G77DSMGkxrbsVpBCpFGpYlAB+hWk0vRnELWXRkva2wEI4Ls
CKP3K4qyHP6RglOdxmTZLwEnyQIR+2L/L8Tp5y/02FOPZTSOWkF0AtjvGiZ612Sl
jmlFkRHGzVRPU/L3F3i5kfKFVtvSi9zI0bkGqwJEFgQ9Cg5M+7spwgXwdEFCfF0W
JlMMHKgc96iynw4+vcaDq71Y91uv1RDr1/VLO76Sn+mRETkKoHfY+l89tDyoAIBR
hrBia0hRcUQ1NGXpnN/94D7kxNCE5hkIAVSzXvZr/9dJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:53 2025 by rpki-client