Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wetz4Acd1bvXKIw0IFEa3Tku2us.roa
File: wetz4Acd1bvXKIw0IFEa3Tku2us.roa (raw, json)
Hash identifier: jIOF2ZXxvaNxLYX3vf9U9rZ9v1QfPJU/tvXtAQtnoDI=
Subject key identifier: C1:EB:73:E0:07:1D:D5:BB:D7:28:8C:34:20:51:1A:DD:39:2E:DA:EB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0195D7372413851614CDA4506FF940267FA0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wetz4Acd1bvXKIw0IFEa3Tku2us.roa
Signing time: Thu 27 Mar 2025 10:47:49 +0000
ROA not before: Thu 27 Mar 2025 10:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203879
IP address blocks: 81.18.48.0/24 maxlen: 24
2a02:660:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:37:24:13:85:16:14:cd:a4:50:6f:f9:40:26:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 27 10:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1eb73e0071dd5bbd7288c3420511add392edaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:09:79:7b:34:82:06:85:a5:5e:2d:a7:0a:
75:47:10:d4:25:72:d4:7f:21:35:d7:22:ad:c4:3c:
35:08:32:17:86:a9:0d:1d:fc:7a:86:dd:d1:a4:d3:
65:4c:09:4a:56:24:15:c6:5c:a4:a0:0d:f6:f0:c8:
37:18:f3:17:ba:a3:de:3f:29:09:d0:fb:92:2f:d4:
4e:0a:e0:7b:50:cb:f7:ef:94:f5:36:27:e0:6f:4e:
d4:c7:34:47:48:72:c7:af:de:53:4d:25:ed:c2:6f:
1b:34:07:ec:fb:c6:2f:85:bc:29:a4:6d:d6:5f:d9:
68:83:3e:3e:a8:4e:88:d6:b4:ee:89:38:7f:03:4b:
dc:30:70:c3:be:91:33:3f:d2:52:8c:aa:be:0f:ac:
ec:ce:32:89:b7:6e:82:2e:05:da:46:49:36:47:2c:
d6:e7:41:55:1f:15:f4:f5:be:1a:18:e3:d8:98:13:
fd:9c:64:b7:94:08:20:6d:be:13:31:90:09:6d:ab:
28:f8:76:f0:c3:96:db:00:d2:ee:94:2a:b2:5a:d3:
f6:c6:4a:5d:46:c3:b6:18:67:c2:ea:7a:4d:9b:d5:
0b:99:57:c2:b4:9d:75:b2:22:29:08:f3:a3:29:51:
ec:8e:38:0a:6c:10:10:36:2c:e0:c8:ce:89:37:aa:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:73:E0:07:1D:D5:BB:D7:28:8C:34:20:51:1A:DD:39:2E:DA:EB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wetz4Acd1bvXKIw0IFEa3Tku2us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
IPv6:
2a02:660:9::/48
Signature Algorithm: sha256WithRSAEncryption
40:52:22:41:f7:b1:4e:8c:6d:7f:0c:cb:40:96:ef:09:ff:7f:
c6:be:34:68:d0:50:70:0d:52:93:4c:11:a0:60:2b:fe:c1:aa:
61:19:ee:45:fc:c6:c5:33:87:c6:5d:f7:47:19:e8:76:7e:a6:
b9:8d:4b:52:a2:9f:39:00:36:3c:f6:c0:51:21:e5:e5:27:a7:
bd:fa:4b:22:ff:88:db:9a:d0:29:d9:6d:2c:b6:b0:f2:ae:ed:
ae:9f:df:25:2c:b2:57:9f:90:be:0e:4b:78:be:fe:d2:1f:ad:
5c:55:51:61:c9:12:45:64:27:2a:3a:1d:f5:8d:3c:d0:f4:30:
eb:9e:ef:b6:4d:5c:52:4f:51:08:5a:53:32:ed:57:93:77:83:
70:f3:c1:e1:a5:d6:4d:76:08:4d:7d:45:22:61:ae:b1:98:f5:
51:14:e4:29:bf:bf:fe:23:8f:6f:9a:31:70:df:ec:19:9b:2c:
e1:8d:50:fc:5f:c0:cb:57:07:12:07:37:fa:89:b2:43:28:a3:
1c:ef:77:15:6b:ec:db:80:35:aa:ab:15:8b:78:ab:ed:7b:cb:
be:ea:8d:fa:c6:f9:89:1d:ca:4c:27:55:f2:96:da:6b:07:d4:
87:f0:52:d8:d7:8b:3c:4e:11:7c:97:b0:c2:bc:4f:71:64:82:
27:12:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:29 2025 by rpki-client