Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa
File: WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa (raw, json)
Hash identifier: 5pY3qGQoynaLtjRYUu9PW5osvIxNFNqy+79Pc3CkOzY=
Subject key identifier: 5B:36:D7:D9:37:71:19:B5:C8:FF:DA:BF:80:B5:A0:C3:21:A5:C4:C9
Certificate issuer: /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial: 019425FC4C9E2343988F4894923AD7EC5BB2
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa
Signing time: Thu 02 Jan 2025 07:47:59 +0000
ROA not before: Thu 02 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51114
IP address blocks: 178.250.80.0/21 maxlen: 24
2a03:b400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4c:9e:23:43:98:8f:48:94:92:3a:d7:ec:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Validity
Not Before: Jan 2 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b36d7d9377119b5c8ffdabf80b5a0c321a5c4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:a3:db:31:06:93:2f:99:ef:35:ff:4c:e7:
19:1a:b9:da:f5:0e:97:73:06:a3:f8:f8:47:07:86:
47:b6:37:55:82:53:60:8c:5c:dc:d8:41:31:9a:c1:
36:ae:4b:e8:e6:b4:11:bb:1c:6c:5b:8c:71:33:f1:
37:ed:43:eb:33:57:83:96:b2:6e:d8:c8:90:fd:bb:
5d:c9:de:83:93:b3:14:4e:ef:63:58:21:3a:ad:65:
e7:b0:d0:c4:ae:77:49:64:b7:20:b4:b4:db:4a:56:
f5:f2:16:cc:94:db:5a:6c:10:0d:20:14:7e:f0:6b:
4d:b8:de:80:34:03:f0:26:aa:af:09:5a:de:17:16:
85:32:a5:ed:84:9e:6f:af:6e:c8:80:9a:2d:11:bb:
7e:a2:f2:f2:cf:34:1e:13:e7:4f:46:29:82:ed:ec:
9f:66:d4:7b:00:78:78:13:08:1f:08:f8:4b:df:57:
2f:2a:b9:38:44:84:c4:49:0b:4a:f3:53:ae:71:8b:
9b:d4:b3:bf:bd:5a:3d:4a:6c:1b:8b:35:2b:b1:51:
3b:5b:f6:56:f2:98:4a:7c:11:2d:52:36:e7:76:93:
9e:6a:94:93:b1:49:fc:a7:ba:e9:d7:70:70:6d:8c:
45:50:23:bd:69:13:72:d9:46:62:e3:38:47:14:04:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:D7:D9:37:71:19:B5:C8:FF:DA:BF:80:B5:A0:C3:21:A5:C4:C9
X509v3 Authority Key Identifier:
keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.80.0/21
IPv6:
2a03:b400::/32
Signature Algorithm: sha256WithRSAEncryption
44:88:3a:11:55:0b:43:b2:f0:31:fd:2f:9a:0d:9f:f9:13:be:
f5:ed:cf:c8:53:2c:bc:d4:84:97:4d:cf:b2:97:8b:61:d5:10:
15:c6:b0:3b:92:1f:45:04:ab:1a:91:3e:3b:46:48:b1:82:cc:
09:3b:c5:05:69:80:d1:8a:11:6d:de:fa:6c:9e:8d:f1:d9:27:
c2:4b:94:e8:87:7a:d1:32:76:cc:61:66:47:d5:8e:b1:4b:26:
17:9b:3b:51:5a:4e:f8:f0:38:41:28:db:5a:09:b1:26:a7:28:
23:6e:a0:72:31:48:16:7a:ed:08:7d:42:db:48:b5:df:56:01:
a4:fa:bc:be:d9:fe:38:74:e7:99:b9:d2:48:ee:e4:d5:7e:14:
b3:20:53:e3:80:cf:12:0e:43:7e:60:0d:55:12:10:d0:28:cb:
e9:b1:17:01:72:88:09:3b:02:67:be:f7:df:e1:72:aa:ea:b2:
b9:75:b0:2d:69:50:ae:72:43:ce:51:eb:6e:90:93:71:0b:43:
e7:31:72:45:d7:1d:f6:b6:99:35:4d:63:c3:86:f4:a6:21:e9:
ab:32:ab:3b:3a:1d:43:48:7e:8f:90:2f:f1:f2:60:f6:d0:03:
e1:b7:fa:1d:9d:a0:fd:98:82:d0:6e:d9:f0:32:26:f7:3e:97:
d2:0d:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:01 2025 by rpki-client