Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/azVzt2JXnQwUAEmKpDgZix9oQ1A.roa
File: azVzt2JXnQwUAEmKpDgZix9oQ1A.roa (raw, json)
Hash identifier: 95TvfhwPanOHF+KV/PXqLCTF79WK1h15RFbvM+WKdfQ=
Subject key identifier: 6B:35:73:B7:62:57:9D:0C:14:00:49:8A:A4:38:19:8B:1F:68:43:50
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01960FA53EDA5F5BF4FE533E9C1B31163E1F
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/azVzt2JXnQwUAEmKpDgZix9oQ1A.roa
Signing time: Mon 07 Apr 2025 09:46:49 +0000
ROA not before: Mon 07 Apr 2025 09:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 86.110.48.0/24 maxlen: 24
86.110.50.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.55.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:a5:3e:da:5f:5b:f4:fe:53:3e:9c:1b:31:16:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 7 09:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b3573b762579d0c1400498aa438198b1f684350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:76:90:07:69:56:9d:06:c5:ad:59:d0:2c:
13:4a:da:b0:57:b4:91:0d:76:07:05:cd:b7:69:2d:
55:52:98:c8:02:00:1a:68:fb:92:c5:6d:68:df:97:
20:3c:33:b7:d1:ec:e2:31:40:9e:65:75:36:bd:76:
5a:55:5e:32:da:bb:a6:1e:3b:91:6d:0c:49:c5:52:
2b:df:07:13:c7:e3:9b:62:1b:b2:c6:9b:c9:6d:c3:
de:bd:00:83:7b:3c:7b:81:bd:3c:62:17:2d:cf:d8:
c1:58:41:96:e3:58:9f:49:eb:98:29:08:a6:31:8e:
76:0f:3f:03:27:ad:57:ac:9d:f2:ad:41:27:4d:32:
1d:f9:3f:30:9f:e7:ba:1e:de:ba:88:d0:88:05:9c:
f8:18:3e:43:9c:14:e0:be:62:11:f4:21:cb:1c:f5:
de:1a:75:aa:9b:6d:c4:51:fe:62:3a:6e:e6:8a:b0:
ef:e7:62:4e:2b:db:76:01:ee:c0:b9:11:a6:fb:ce:
27:65:aa:03:69:86:01:44:4b:9e:b0:3f:42:e1:07:
f9:88:c1:72:dd:6d:ab:fd:30:cb:d7:b9:1c:3e:4c:
4c:c3:f3:1d:1f:4b:3b:1b:b7:8d:d5:10:59:f4:d7:
fe:be:84:66:17:41:b7:5c:f3:3f:91:83:8b:93:e3:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:35:73:B7:62:57:9D:0C:14:00:49:8A:A4:38:19:8B:1F:68:43:50
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/azVzt2JXnQwUAEmKpDgZix9oQ1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.48.0/24
86.110.50.0/23
86.110.55.0/24
86.110.59.0/24
86.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:26:d7:eb:f3:7e:d1:4c:b4:aa:8d:4a:2e:92:a5:00:80:b7:
7f:60:20:23:4a:4b:6d:66:fd:49:58:56:dd:5c:f2:26:9b:71:
0c:34:a0:94:d2:82:10:64:bb:5a:ea:02:37:7c:1f:92:63:95:
82:cc:5c:3c:f8:68:ee:5b:d1:97:16:53:51:29:a6:fc:65:70:
e2:bb:7c:aa:d8:5b:14:b2:93:76:0f:cb:9f:bd:6b:65:9d:8d:
5e:75:72:73:02:85:a6:24:22:b3:25:c0:5a:7e:5a:91:5b:dc:
93:bd:7b:85:db:d1:96:dc:4a:2c:5c:91:4a:ee:47:de:68:7b:
64:89:8f:d7:d2:7e:bb:3c:27:59:a1:96:94:63:45:93:94:e8:
15:15:9f:d5:f0:f7:74:d5:b1:e1:d5:57:f2:9c:7b:35:91:56:
3d:19:14:53:e3:74:ec:3c:64:b6:fd:95:1d:79:88:2f:6a:b3:
ab:65:4b:da:03:b8:a8:52:e3:45:05:fb:32:4b:b8:02:a6:84:
33:b2:7d:6e:58:bc:4b:79:8a:85:6e:fd:d1:fe:9f:55:be:bb:
c8:9c:90:cb:71:57:2a:64:bd:f3:3f:f4:07:2b:39:c3:1c:59:
33:65:f0:cd:c1:75:65:ac:d5:38:ec:10:12:a8:bb:2d:0b:ee:
de:7b:08:e8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZYPpT7aX1v0/lM+nBsxFj4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwNDA3MDk0NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjM1NzNiNzYyNTc5ZDBjMTQwMDQ5OGFhNDM4MTk4YjFmNjg0MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTJ2kAdpVp0Gxa1Z0CwTStqwV7SR
DXYHBc23aS1VUpjIAgAaaPuSxW1o35cgPDO30eziMUCeZXU2vXZaVV4y2rumHjuR
bQxJxVIr3wcTx+ObYhuyxpvJbcPevQCDezx7gb08Yhctz9jBWEGW41ifSeuYKQim
MY52Dz8DJ61XrJ3yrUEnTTId+T8wn+e6Ht66iNCIBZz4GD5DnBTgvmIR9CHLHPXe
GnWqm23EUf5iOm7mirDv52JOK9t2Ae7AuRGm+84nZaoDaYYBREuesD9C4Qf5iMFy
3W2r/TDL17kcPkxMw/MdH0s7G7eN1RBZ9Nf+voRmF0G3XPM/kYOLk+MfAQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGs1c7diV50MFABJiqQ4GYsfaENQMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvYXpWenQySlhuUXdVQUVtS3BEZ1ppeDlvUTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVm4wAwQB
Vm4yAwQAVm43AwQAVm47AwQAVm49MA0GCSqGSIb3DQEBCwUAA4IBAQCsJtfr837R
TLSqjUoukqUAgLd/YCAjSkttZv1JWFbdXPImm3EMNKCU0oIQZLta6gI3fB+SY5WC
zFw8+GjuW9GXFlNRKab8ZXDiu3yq2FsUspN2D8ufvWtlnY1edXJzAoWmJCKzJcBa
flqRW9yTvXuF29GW3EosXJFK7kfeaHtkiY/X0n67PCdZoZaUY0WTlOgVFZ/V8Pd0
1bHh1VfynHs1kVY9GRRT43TsPGS2/ZUdeYgvarOrZUvaA7ioUuNFBfsyS7gCpoQz
sn1uWLxLeYqFbv3R/p9VvrvInJDLcVcqZL3zP/QHKznDHFkzZfDNwXVlrNU47BAS
qLstC+7eewjo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net