Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/FcPpw1IibzSy4BenkulclpDum4U.roa
File: FcPpw1IibzSy4BenkulclpDum4U.roa (raw, json)
Hash identifier: HSUDUncC0CCpqaUKBhWSJTD0GmSsEAzCocsfF6H1tqA=
Subject key identifier: 15:C3:E9:C3:52:22:6F:34:B2:E0:17:A7:92:E9:5C:96:90:EE:9B:85
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 01941F8C20708C6B741008008353A629EFE1
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/FcPpw1IibzSy4BenkulclpDum4U.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48522
IP address blocks: 185.70.232.0/22 maxlen: 24
193.36.229.0/24 maxlen: 24
194.13.238.0/23 maxlen: 23
2a03:3620::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:70:8c:6b:74:10:08:00:83:53:a6:29:ef:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c3e9c352226f34b2e017a792e95c9690ee9b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:e3:26:61:1d:a5:bf:4a:40:fb:ed:0e:02:
e2:45:d2:63:58:98:3d:96:50:dc:e5:35:79:1c:2a:
3d:38:de:f8:e9:1c:55:3b:b4:74:9b:34:a7:f9:00:
a5:e4:44:6d:01:89:a8:86:c4:72:60:ba:b0:5c:45:
cb:4b:f0:c6:43:1a:71:4e:1e:b7:57:47:9a:7e:1e:
6f:1c:bf:8b:ec:11:69:8b:0c:0e:7b:8b:6c:61:9f:
08:b9:c0:fe:8d:db:87:be:dd:2a:3f:7c:4b:14:13:
86:2c:df:e8:49:32:52:d5:07:d4:f7:e8:75:b0:0a:
95:bb:8d:a5:12:55:53:08:3d:3e:42:3e:a5:43:50:
6f:ca:2c:00:55:90:44:12:12:11:83:6b:2b:11:8d:
ea:ae:88:4a:f9:a6:09:d2:ae:5e:f4:61:e3:fe:63:
da:79:05:d0:6c:65:83:5f:98:61:3c:f1:7e:c1:b4:
96:53:af:3c:d4:92:2b:bd:4c:89:cf:b1:76:2e:68:
ca:42:84:48:70:2b:6c:e0:ae:65:f7:c2:8f:96:d4:
d3:5d:5e:cf:be:00:8a:78:8c:6d:6c:69:9c:02:ac:
df:87:f1:fe:15:1a:60:cc:5c:63:46:9f:b9:be:fe:
7e:bf:11:66:d8:ea:df:92:de:e1:c8:34:1f:72:1f:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:E9:C3:52:22:6F:34:B2:E0:17:A7:92:E9:5C:96:90:EE:9B:85
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/FcPpw1IibzSy4BenkulclpDum4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.232.0/22
193.36.229.0/24
194.13.238.0/23
IPv6:
2a03:3620::/32
Signature Algorithm: sha256WithRSAEncryption
65:49:7a:40:78:e1:e0:e9:4b:34:25:1c:3a:17:12:fd:d8:55:
af:e6:db:ec:e6:9b:c1:d5:7c:1a:18:46:7c:a4:82:2d:5d:9e:
ca:3f:43:2a:3c:70:d4:6c:b7:df:db:9d:e1:f3:2b:51:42:0b:
ff:5b:98:24:85:98:e2:ae:53:ac:83:a9:dc:54:09:57:e5:54:
07:14:e0:84:19:7f:18:e3:a0:b3:ed:16:b1:cc:fd:40:a8:a5:
46:89:f9:26:fe:17:29:73:fe:d8:16:e1:46:50:74:e2:bb:c5:
bc:6b:0c:cc:10:31:e2:a3:42:04:5c:c0:45:8c:66:88:7a:db:
7b:ed:1f:ea:9c:14:1d:da:ba:b7:69:75:b0:49:87:69:b5:19:
cb:8d:af:de:9e:77:fb:75:67:08:53:c3:ff:80:4a:0d:c6:43:
a4:42:7c:46:80:2e:37:83:88:56:4b:9b:50:31:6a:fa:54:39:
c2:cf:17:84:b0:cc:d5:72:43:88:88:d2:a2:f3:c6:f9:83:8f:
cd:3e:b3:c8:3a:22:80:52:1e:5b:b2:98:05:59:94:96:f6:b2:
9f:84:a4:88:2b:a6:9f:ad:72:fa:7e:62:47:b9:91:10:6f:fb:
77:12:f2:87:c6:bf:98:86:b9:68:5f:e6:b5:27:34:ce:e0:6f:
95:79:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:57 2025 by rpki-client