Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8H2wDPc52tGnpWjLgHs_NV-Ia8k.roa
File: 8H2wDPc52tGnpWjLgHs_NV-Ia8k.roa (raw, json)
Hash identifier: Hw+wwFItOgtFtYKJvxaIrYaI4FljUAuM04HzznRH+LA=
Subject key identifier: F0:7D:B0:0C:F7:39:DA:D1:A7:A5:68:CB:80:7B:3F:35:5F:88:6B:C9
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195E92EC0AACAC33083EDE6AD827DF71BE0
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8H2wDPc52tGnpWjLgHs_NV-Ia8k.roa
Signing time: Sun 30 Mar 2025 22:31:50 +0000
ROA not before: Sun 30 Mar 2025 22:31:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 86.110.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e9:2e:c0:aa:ca:c3:30:83:ed:e6:ad:82:7d:f7:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 30 22:31:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f07db00cf739dad1a7a568cb807b3f355f886bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:82:8d:cd:93:87:83:2d:ad:a4:7a:f0:fa:
f7:8d:bf:e7:ae:17:6f:4c:24:0c:21:48:4d:0e:99:
03:b1:ff:82:ed:6e:d6:44:1f:37:51:06:40:6d:2d:
74:8f:a4:d9:01:2b:4e:bb:88:03:e9:8a:1f:76:6a:
81:c3:0e:f2:c6:b8:2f:df:08:d3:0e:af:42:b2:60:
b5:84:73:33:b5:18:5d:ec:1c:9a:90:cb:c9:d6:40:
17:43:10:37:bf:dd:a0:a2:10:dc:35:1c:83:35:40:
ef:a2:11:95:42:23:e8:f0:f2:02:66:6d:43:6e:8a:
74:d2:d6:9c:eb:40:c4:86:6b:7b:d2:a6:a9:ad:b7:
5f:c9:03:d2:43:37:ac:05:3b:f4:f1:52:8e:30:f8:
42:04:bc:cb:bc:44:b3:7f:3b:88:bd:bd:56:23:12:
82:98:02:42:4d:37:81:ff:48:07:1d:6d:87:78:52:
fb:db:47:58:0f:85:d1:ec:b4:3e:4f:92:d9:fe:43:
01:47:73:e0:59:73:75:db:75:a0:0c:fc:ab:dd:4f:
5e:60:1f:b0:00:2a:01:e1:96:eb:aa:f5:be:1f:86:
8d:dc:85:f3:41:0a:9f:f0:7a:23:4d:fc:db:1e:ef:
56:70:52:b3:7a:e2:61:2f:ef:b2:2c:39:91:aa:42:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7D:B0:0C:F7:39:DA:D1:A7:A5:68:CB:80:7B:3F:35:5F:88:6B:C9
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8H2wDPc52tGnpWjLgHs_NV-Ia8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.49.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1c:39:58:f2:da:b0:da:76:f5:8d:18:28:17:55:73:a3:1c:
ea:83:9e:81:d9:29:c0:0c:8a:ed:f2:ab:63:ba:4b:87:5a:ca:
4f:c4:a1:17:61:a8:9d:e2:11:e2:e2:fb:43:72:c4:58:c5:ef:
1d:68:7a:8e:4e:d3:a8:4b:a5:d2:69:2c:24:9c:b3:94:81:7b:
05:65:69:8b:bc:f6:fc:fc:f6:d8:44:76:0c:22:1e:f9:87:08:
1e:39:d5:d5:7d:cd:89:a8:88:83:e1:34:f6:7e:2a:0f:38:8f:
fa:2e:c2:87:48:ec:fe:fd:cf:ab:37:ab:4a:d6:95:7f:e5:2c:
56:45:0f:e1:e5:ac:15:f1:69:a8:1f:40:41:a6:17:14:e8:c1:
db:7f:e8:99:aa:56:7d:0b:ba:0b:7c:fa:d8:7c:57:79:1b:e3:
cc:73:3b:fe:0f:98:f1:af:d8:3b:1d:e7:1e:14:db:53:76:88:
47:99:f0:eb:e2:27:ca:60:0e:23:eb:0a:3d:94:ec:b0:63:46:
49:06:f2:98:71:fd:22:df:aa:f9:7b:3c:85:9a:d9:65:8e:58:
e6:c7:8b:15:95:55:d2:16:6c:dd:95:fc:c4:ee:3c:9a:be:e3:
9e:90:b2:c3:88:c7:b7:b9:8f:84:4a:ca:4a:d5:63:3a:7a:22:
fa:39:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:49:40 2025 by rpki-client on console.sobornost.net