Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/UGBZOZSWywjphqY06-K_M1ZGoT0.roa
File: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (raw, json)
Hash identifier: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=
Subject key identifier: 50:60:59:39:94:96:CB:08:E9:86:A6:34:EB:E2:BF:33:56:46:A1:3D
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 0194266B52CDED31736487BA65888C5B1705
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/UGBZOZSWywjphqY06-K_M1ZGoT0.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 217.77.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:52:cd:ed:31:73:64:87:ba:65:88:8c:5b:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506059399496cb08e986a634ebe2bf335646a13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:5a:74:a8:09:bf:2f:7d:36:1a:d4:4c:8e:
70:3e:cc:a6:8e:62:00:90:45:a1:4d:94:e2:58:f2:
f1:68:c5:7e:95:bd:a3:78:19:cc:5e:59:8c:92:b7:
13:97:af:0f:76:e6:6d:b8:ab:50:02:1e:df:6b:74:
09:e5:2a:34:67:fe:7c:88:85:e0:db:dc:fc:68:0c:
c0:07:6b:40:20:5c:89:cb:f1:ad:cd:c8:7f:31:b4:
e4:76:3e:92:40:e1:71:76:52:a6:20:16:58:e8:b9:
0e:24:57:ba:bc:eb:48:64:07:d3:18:a6:07:79:f4:
e8:24:2d:42:a1:ae:37:d9:21:61:04:38:68:80:28:
41:f8:67:88:2f:89:23:08:15:dc:90:95:84:2d:25:
a4:b1:cc:9e:2e:2a:13:2a:05:20:23:9d:88:d3:05:
7b:4c:aa:60:36:d5:8e:78:f3:7d:a0:97:43:4f:05:
80:20:17:fd:f1:a1:f1:6c:67:5c:00:3f:e4:ae:ac:
6b:b0:da:84:60:a9:60:c1:31:c3:3c:b0:4d:2e:d2:
14:49:20:34:b0:0d:ac:2c:bf:26:a0:d0:6c:30:27:
47:7b:3f:a1:78:ee:c1:c0:bc:f9:17:4a:f3:69:6f:
e2:c3:5c:12:83:48:b4:84:e3:2f:fb:35:ca:ba:13:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:59:39:94:96:CB:08:E9:86:A6:34:EB:E2:BF:33:56:46:A1:3D
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/UGBZOZSWywjphqY06-K_M1ZGoT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.77.24.0/21
Signature Algorithm: sha256WithRSAEncryption
85:1d:bc:49:ec:47:41:58:0c:17:60:f2:8f:ee:20:7f:9f:fa:
e1:db:7f:c4:be:46:a0:02:b4:e0:d5:a7:15:33:5f:f0:36:ab:
58:fb:f2:36:b1:a6:3a:df:e8:9d:39:92:66:2f:f7:49:f4:98:
eb:c9:60:ae:0b:c5:e0:ff:d7:ca:70:f9:73:47:a2:6a:79:42:
1f:55:08:8b:7a:82:63:0e:96:ec:f3:8b:94:cf:a3:7f:8b:e9:
3d:11:37:d2:22:c9:1f:6b:27:7c:3f:09:ed:ce:d2:54:33:bf:
9b:7c:fc:cc:8c:4f:a7:aa:59:a8:72:3f:11:c6:e5:6d:74:36:
5c:2a:2e:ec:88:1b:70:fc:cc:2e:54:20:6b:3c:17:6d:79:ab:
32:8b:b6:db:69:94:58:54:eb:b1:20:47:c7:30:25:7e:11:e1:
a0:c0:91:bf:d9:b5:5b:02:85:25:00:9e:67:1d:fc:a9:de:6e:
fe:a3:4e:1c:26:20:ef:8f:88:ec:2b:92:56:61:77:5d:b9:f3:
70:2e:f0:a8:61:cb:b8:b9:79:77:24:2c:37:78:17:e8:1a:15:
16:6c:14:62:87:16:41:bc:4f:1b:41:41:fe:3b:02:a6:26:be:
6d:2c:56:0a:da:62:2a:72:cb:96:d7:63:f7:58:fc:55:f9:92:
56:c3:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:08:20 2025 by rpki-client