Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FM2576U9_cO6KlGBeG-VwuXYLoE.roa
File: FM2576U9_cO6KlGBeG-VwuXYLoE.roa (raw, json)
Hash identifier: ABfseUXrmOLElVcMYHQHihGPr5p5Ib0P+JYnpJwSJdg=
Subject key identifier: 14:CD:B9:EF:A5:3D:FD:C3:BA:2A:51:81:78:6F:95:C2:E5:D8:2E:81
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA7731E22DBB29458566448FCB3540
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FM2576U9_cO6KlGBeG-VwuXYLoE.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200176
IP address blocks: 88.199.44.0/24 maxlen: 24
88.199.53.0/24 maxlen: 24
88.199.54.0/23 maxlen: 23
88.199.128.0/23 maxlen: 23
88.199.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:31:e2:2d:bb:29:45:85:66:44:8f:cb:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14cdb9efa53dfdc3ba2a5181786f95c2e5d82e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:99:a3:0b:fe:7f:76:68:91:f8:2a:33:56:
32:51:d0:5e:62:87:d7:53:3e:8c:a2:cc:cf:3f:ee:
30:dc:da:32:6a:8b:53:66:e5:c7:44:a6:b9:dd:f3:
a5:21:73:65:d8:a4:19:2d:41:d9:16:ae:ef:94:a7:
63:c3:27:3d:dd:30:0a:3a:4d:69:67:df:58:ed:61:
c0:91:20:3a:60:a3:d4:8b:76:d5:b9:e8:ec:0d:6d:
e6:2f:6d:25:6c:00:37:9c:cf:d9:f0:12:5d:3d:83:
7a:a7:f4:34:4a:06:71:23:5e:2a:96:1d:05:8f:41:
94:be:16:44:16:19:7d:04:e0:d7:f0:4c:94:87:5a:
48:ca:a2:cb:58:88:a2:bf:0f:76:1d:47:9b:6f:26:
8e:d7:40:e3:16:4b:f9:4d:ac:52:f1:f5:67:b1:38:
95:43:5e:9b:16:6e:5c:ef:99:59:8c:fa:eb:5c:7a:
10:ab:92:d6:60:b9:e8:d1:66:17:27:5f:1c:92:af:
28:56:e9:fe:27:f5:98:f9:18:d3:7b:cd:8f:c2:03:
77:8b:da:7d:8c:bf:51:7b:6b:7b:03:88:4f:fe:7a:
fa:be:d1:e0:20:58:42:35:a2:ea:dc:81:d5:3f:43:
2f:78:52:d0:d8:5a:12:79:56:d0:4c:7b:e5:5c:de:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:B9:EF:A5:3D:FD:C3:BA:2A:51:81:78:6F:95:C2:E5:D8:2E:81
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FM2576U9_cO6KlGBeG-VwuXYLoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.44.0/24
88.199.53.0-88.199.55.255
88.199.128.0-88.199.130.255
Signature Algorithm: sha256WithRSAEncryption
0c:b0:4c:41:52:20:c4:a3:8d:de:ed:c9:59:35:8e:50:b7:5e:
3c:4d:64:f1:cf:8f:0c:90:a8:1c:d6:0e:4e:d8:e4:47:e9:59:
85:31:13:51:96:a6:d0:52:1e:7f:3d:11:7e:54:57:18:fa:d4:
ff:03:c2:ed:09:5f:bc:74:9b:ef:19:6a:49:f5:33:bc:6f:29:
55:4b:12:85:0c:15:d0:3f:6d:b6:0c:37:5d:8d:fe:8c:71:e6:
67:6e:98:51:b6:53:25:b9:21:3e:65:49:11:03:47:97:4a:41:
cb:ca:15:fa:0b:9d:02:53:2c:6d:c7:16:e1:08:bd:0d:50:c0:
2c:95:95:54:37:0d:3a:15:cb:88:bf:73:f9:da:7e:37:23:8a:
c2:e6:2c:cd:8e:30:4e:fa:7d:7f:1d:b3:ae:25:f5:22:3a:9d:
1e:0c:51:00:a7:29:d9:b9:d1:d1:f1:c2:4e:b9:42:98:94:9b:
16:27:13:40:c0:ff:a4:e4:a9:6e:f3:cc:4c:0d:29:62:df:7a:
f1:59:82:e6:62:bf:ee:3e:bd:2e:c5:d8:00:da:f1:a7:55:e8:
a0:4d:eb:23:f6:44:09:c0:7a:84:21:68:d9:8f:28:8f:df:1e:
a8:bd:26:58:fa:fb:6c:1b:b4:38:9c:51:8c:be:4a:60:8b:f3:
f0:0d:c1:59
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQf+ncx4i27KUWFZkSPyzVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz
NmFiZmYwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGNkYjllZmE1M2RmZGMzYmEyYTUxODE3ODZmOTVjMmU1ZDgyZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3uZowv+f3ZokfgqM1YyUdBeYofX
Uz6MoszPP+4w3NoyaotTZuXHRKa53fOlIXNl2KQZLUHZFq7vlKdjwyc93TAKOk1p
Z99Y7WHAkSA6YKPUi3bVuejsDW3mL20lbAA3nM/Z8BJdPYN6p/Q0SgZxI14qlh0F
j0GUvhZEFhl9BODX8EyUh1pIyqLLWIiivw92HUebbyaO10DjFkv5TaxS8fVnsTiV
Q16bFm5c75lZjPrrXHoQq5LWYLno0WYXJ18ckq8oVun+J/WY+RjTe82PwgN3i9p9
jL9Re2t7A4hP/nr6vtHgIFhCNaLq3IHVP0MveFLQ2FoSeVbQTHvlXN4dZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBTNue+lPf3DuipRgXhvlcLl2C6BMB8GA1UdIwQY
MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt
YWZmOTJjMTZkOGUzLzEvRk0yNTc2VTlfY082S2xHQmVHLVZ3dVhZTG9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz
LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAWMcsMAwD
BABYxzUDBANYxzAwDAMEB1jHgAMEAFjHgjANBgkqhkiG9w0BAQsFAAOCAQEADLBM
QVIgxKON3u3JWTWOULdePE1k8c+PDJCoHNYOTtjkR+lZhTETUZam0FIefz0RflRX
GPrU/wPC7QlfvHSb7xlqSfUzvG8pVUsShQwV0D9ttgw3XY3+jHHmZ26YUbZTJbkh
PmVJEQNHl0pBy8oV+gudAlMsbccW4Qi9DVDALJWVVDcNOhXLiL9z+dp+NyOKwuYs
zY4wTvp9fx2zriX1IjqdHgxRAKcp2bnR0fHCTrlCmJSbFicTQMD/pOSpbvPMTA0p
Yt968VmC5mK/7j69LsXYANrxp1XooE3rI/ZECcB6hCFo2Y8oj98eqL0mWPr7bBu0
OJxRjL5KYIvz8A3BWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:54 2025 by rpki-client