Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/wezzDoLmoG44JNaFHHcOefdwrnE.roa
File: wezzDoLmoG44JNaFHHcOefdwrnE.roa (raw, json)
Hash identifier: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=
Subject key identifier: C1:EC:F3:0E:82:E6:A0:6E:38:24:D6:85:1C:77:0E:79:F7:70:AE:71
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 019425FC0CDF2C373BBB3A964039728C54AC
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/wezzDoLmoG44JNaFHHcOefdwrnE.roa
Signing time: Thu 02 Jan 2025 07:47:42 +0000
ROA not before: Thu 02 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.80.0/22 maxlen: 22
185.131.80.0/23 maxlen: 23
185.131.80.0/24 maxlen: 24
185.131.81.0/24 maxlen: 24
185.131.82.0/23 maxlen: 23
185.131.82.0/24 maxlen: 24
185.131.83.0/24 maxlen: 24
2a06:97c0::/29 maxlen: 29
2a06:97c0::/30 maxlen: 30
2a06:97c4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0c:df:2c:37:3b:bb:3a:96:40:39:72:8c:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Jan 2 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1ecf30e82e6a06e3824d6851c770e79f770ae71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:b1:84:c5:be:ce:22:40:d4:b9:79:32:d7:
58:b1:38:2c:15:03:3d:72:5f:34:58:f4:1e:40:99:
ef:7c:0b:ae:54:51:85:43:ba:e0:ff:51:35:3f:ef:
d5:21:68:55:74:7d:6c:d4:62:86:fd:81:df:9e:d8:
ca:f0:5e:c4:1f:c2:08:4b:e4:2d:5c:35:9a:63:39:
11:66:3e:eb:fd:e2:00:ff:f1:f6:86:5f:e3:6a:97:
c5:76:bb:69:4b:7e:cc:e5:6c:5b:97:6c:d8:cb:d8:
8e:90:4a:9b:a5:45:2b:8e:c1:03:41:56:7a:fe:ea:
ce:0e:68:13:65:be:c2:93:38:03:e7:a3:52:57:94:
47:8b:7d:3a:ec:59:bf:c5:f2:12:45:8b:53:67:2e:
7c:06:2b:4b:ba:ad:af:53:80:17:33:82:a6:15:16:
07:f6:cc:bf:13:5f:1a:cc:7a:0b:29:00:b0:f5:4b:
bb:4a:2e:30:2a:67:e9:01:bf:0f:59:53:32:27:cf:
ab:38:78:a7:b6:fb:23:32:89:a8:64:51:93:00:08:
0b:8f:8a:1b:a5:4e:a3:39:2d:e4:56:03:09:0b:4f:
9f:bc:7e:3e:bb:19:e2:21:db:a8:6f:e6:b1:52:86:
62:57:ee:a4:23:7a:95:91:ba:08:0f:77:57:02:6f:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:F3:0E:82:E6:A0:6E:38:24:D6:85:1C:77:0E:79:F7:70:AE:71
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/wezzDoLmoG44JNaFHHcOefdwrnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
IPv6:
2a06:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:9d:ef:21:45:c1:17:72:5e:fc:dd:41:4b:38:1a:6d:e7:29:
88:d6:92:01:62:e6:f0:f7:93:cf:8c:c0:d1:ad:b9:ca:e4:c4:
7e:61:27:f2:66:0e:a8:de:44:34:62:a6:0b:62:e7:89:6f:8e:
4c:0d:a9:36:51:86:79:c5:fc:fa:07:97:c2:5d:3e:79:c6:6f:
db:2d:ce:cb:23:e0:fb:f8:ba:e4:37:13:b5:01:b2:b5:d5:bb:
6e:5c:dc:ca:1d:2f:31:fa:55:e6:23:91:77:ed:29:c4:8d:25:
5d:c5:69:e7:86:da:7c:6b:bb:07:b5:36:b7:10:4f:08:e6:29:
09:5c:b7:84:77:01:12:bb:6e:92:72:fe:07:75:8a:e2:ad:a2:
f9:57:28:51:f6:77:ea:f7:2a:1f:fb:51:2d:bf:75:4c:d2:37:
1a:e3:11:88:41:90:84:ba:eb:4e:7e:c5:08:77:e2:f9:80:82:
37:62:22:c8:93:f6:b3:d7:86:8a:f8:e2:6f:14:06:17:79:70:
80:33:2f:bf:b6:8b:9a:1f:c5:7c:91:4f:8c:a3:f6:b9:20:92:
aa:5b:dd:9e:5e:ac:5b:17:b3:70:1f:29:0d:dd:11:cc:52:9a:
ce:fd:0b:63:f6:5b:9d:c5:67:26:8e:85:d8:b4:31:7e:5d:7e:
08:57:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:51:24 2025 by rpki-client