Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/FzUBpaz-C-RxalVbWOkDzpE2yCM.roa
File: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (raw, json)
Hash identifier: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=
Subject key identifier: 17:35:01:A5:AC:FE:0B:E4:71:6A:55:5B:58:E9:03:CE:91:36:C8:23
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019425222C700FF551D1F5488B83A41E6994
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/FzUBpaz-C-RxalVbWOkDzpE2yCM.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.176.0/20 maxlen: 20
88.223.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:70:0f:f5:51:d1:f5:48:8b:83:a4:1e:69:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=173501a5acfe0be4716a555b58e903ce9136c823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:39:6f:e4:f1:f2:3a:49:20:a8:6e:20:32:
35:22:9d:86:ca:a8:d2:56:c5:90:31:dd:ca:d6:71:
6a:9a:0f:3d:bc:2c:04:ab:01:bf:78:5e:9b:d3:83:
99:79:d4:33:e7:33:ca:e3:9a:50:03:6d:69:56:94:
76:22:12:f4:b8:a8:fe:52:34:b5:2f:7e:95:0a:86:
0a:c4:41:cf:64:60:78:0c:fc:89:f5:9d:03:38:70:
d4:5d:56:eb:3d:da:4c:58:9b:3d:73:3e:2e:5b:72:
32:e0:4c:c7:57:b7:a2:79:c8:22:ab:5f:79:d8:95:
40:53:db:a4:03:33:52:35:43:74:6c:73:a1:ec:2d:
8a:63:0f:68:a0:c5:10:8d:57:e5:72:6e:a1:d3:a4:
df:ae:55:54:c1:c8:d7:c0:ec:63:b0:09:77:c2:18:
e3:6a:dd:3e:17:fd:20:94:a4:e5:03:b0:fc:4d:f2:
8f:80:25:4c:d8:ed:88:ae:96:4d:59:42:13:dc:39:
4c:21:67:52:03:e7:96:7c:24:84:7b:75:bb:c4:4a:
54:c4:96:33:2d:2d:15:dd:15:39:c5:11:ec:4e:0e:
51:27:92:4b:0f:67:61:c2:33:d7:4a:73:5c:7a:2b:
35:c6:48:60:c7:3b:3f:3d:a8:a7:e8:15:ae:35:55:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:01:A5:AC:FE:0B:E4:71:6A:55:5B:58:E9:03:CE:91:36:C8:23
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/FzUBpaz-C-RxalVbWOkDzpE2yCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.176.0/20
88.223.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:90:54:69:23:81:c9:c3:5c:8e:05:c1:7a:47:96:a4:64:d6:
95:41:99:9d:44:ce:8a:2a:e9:a1:30:33:5d:ec:0d:2b:4d:80:
b3:cb:66:35:59:b8:ce:9e:da:ac:c1:78:88:f4:19:11:9a:3f:
bf:cc:31:96:18:82:ad:04:79:35:bb:37:ee:ce:5f:05:f5:48:
4a:60:fe:00:05:31:e4:88:47:26:e2:03:2e:18:6c:69:f9:e1:
1a:ed:55:2d:ed:1b:3c:36:26:e9:cc:38:34:68:71:4b:bb:0d:
56:d4:c6:41:c3:42:1b:c5:e7:91:8a:b9:44:97:fb:2d:ec:03:
2e:36:75:7a:ca:61:f2:ef:64:cc:46:60:91:d6:ea:be:de:0d:
17:81:b9:63:53:1e:97:7d:25:bf:fd:9a:82:c7:73:fe:57:69:
20:62:f9:98:8b:4c:2a:8d:c6:40:79:ac:f3:f8:80:c3:cd:29:
f8:57:a1:a4:db:66:37:8c:31:a1:d0:a0:8f:1d:e1:c4:c7:e8:
1f:3e:60:0f:37:fe:21:b2:86:71:a9:ec:d8:05:40:b2:6e:e7:
2b:64:ca:ff:20:21:6a:21:35:78:3e:3c:91:36:5c:6e:54:b3:
3f:9f:50:69:3a:c0:8a:ed:5a:ec:a8:2f:11:c8:6c:f1:97:17:
fb:12:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:32 2025 by rpki-client