Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/ZGBhJljS8KnY-Xp380jYPgu_YWc.roa
File: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (raw, json)
Hash identifier: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=
Subject key identifier: 64:60:61:26:58:D2:F0:A9:D8:F9:7A:77:F3:48:D8:3E:0B:BF:61:67
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 019427B650B26DBCF814E62CD7B04342308F
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/ZGBhJljS8KnY-Xp380jYPgu_YWc.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 5.158.80.0/21 maxlen: 24
185.178.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:50:b2:6d:bc:f8:14:e6:2c:d7:b0:43:42:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6460612658d2f0a9d8f97a77f348d83e0bbf6167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:c7:c4:2d:46:21:5b:e8:38:53:c9:dc:c1:
35:1d:d8:86:be:4a:17:46:fa:cc:00:89:b1:93:f0:
01:62:f9:06:a8:50:09:bd:e6:04:e3:e7:8e:0d:ee:
fb:7f:68:2b:43:90:21:c3:4a:69:c2:96:a7:c0:88:
66:ff:a0:b2:e9:71:5a:c0:14:ca:85:76:25:83:77:
ba:8b:31:d4:d7:78:fa:96:f2:28:1e:9f:5d:fb:4f:
b4:2e:34:1c:30:3b:4a:10:df:2d:c3:5f:3b:a2:49:
79:35:81:74:63:a0:b0:76:99:de:9b:1f:80:37:87:
7b:db:03:3b:6b:ae:fe:66:a8:2d:87:44:18:58:9e:
cf:f9:bf:d9:c2:ab:be:28:0e:53:32:a1:34:c7:ae:
e5:30:30:41:9e:6e:02:75:a7:78:1f:20:fa:26:f1:
b5:cc:66:05:66:02:55:82:ab:f4:82:ac:6f:c9:23:
68:01:dd:f7:8e:0a:99:5a:92:e5:93:b9:66:0e:80:
1b:69:1b:3f:6c:3c:a2:86:c2:18:7d:5c:a3:8a:35:
a6:1b:e7:8a:0b:42:a9:6a:a6:1d:1b:23:ef:90:2b:
e3:76:3b:7f:5e:4c:c6:ad:b2:60:9b:9e:f8:93:e8:
76:57:7f:17:30:dc:d4:6a:25:ac:a9:21:3b:92:67:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:61:26:58:D2:F0:A9:D8:F9:7A:77:F3:48:D8:3E:0B:BF:61:67
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/ZGBhJljS8KnY-Xp380jYPgu_YWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.80.0/21
185.178.170.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e0:87:65:7c:ab:0f:ff:f5:f7:b4:eb:e6:a0:e5:cd:89:47:
77:0d:92:62:40:47:98:ba:59:f5:4a:db:34:9e:07:b7:d6:14:
90:b7:46:cb:86:3e:cd:dc:b1:77:5a:4d:b3:3d:20:5e:c1:6f:
2b:aa:c5:35:75:af:41:fd:f0:18:04:94:5d:4a:e8:2d:7d:c6:
dd:d0:3a:0f:77:ee:49:b5:32:88:1f:45:1a:21:f1:25:bc:40:
5f:59:19:e1:c8:04:40:1c:7c:b3:9e:4b:20:61:54:c3:4e:e2:
d9:4a:cf:4d:98:d2:97:a8:d9:08:0e:ee:2a:cf:74:75:d1:42:
b1:5c:7a:5b:33:93:c1:53:e5:44:47:1a:3a:75:c9:9a:ed:d3:
fd:08:a3:c7:71:e8:72:60:5c:76:22:9e:24:f9:28:36:e2:0f:
2d:30:5c:a6:53:08:a5:30:9e:9f:aa:4e:c3:ac:81:41:6e:18:
90:a1:a2:9c:71:40:35:98:3d:8e:2f:29:c3:d7:1f:87:e4:7f:
be:6f:e8:06:47:1c:d3:b0:5d:2b:06:76:7f:e3:23:07:d0:77:
e2:f0:d4:d3:d7:5e:58:42:aa:24:c3:9b:7d:c4:d5:a8:fe:be:
c1:7a:8e:a4:25:7f:9e:0e:54:eb:b1:9e:05:ee:ff:c1:61:d9:
75:a1:cd:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntlCybbz4FOYs17BDQjCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWU1NTFhZjBiYjVkNzk3N2VhNzNmNjg5NmYyNWYxZWNh
MjhmOWQwHhcNMjUwMTAyMTU1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDYwNjEyNjU4ZDJmMGE5ZDhmOTdhNzdmMzQ4ZDgzZTBiYmY2MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNrHxC1GIVvoOFPJ3ME1HdiGvkoX
RvrMAImxk/ABYvkGqFAJveYE4+eODe77f2grQ5Ahw0ppwpanwIhm/6Cy6XFawBTK
hXYlg3e6izHU13j6lvIoHp9d+0+0LjQcMDtKEN8tw187okl5NYF0Y6Cwdpnemx+A
N4d72wM7a67+Zqgth0QYWJ7P+b/Zwqu+KA5TMqE0x67lMDBBnm4Cdad4HyD6JvG1
zGYFZgJVgqv0gqxvySNoAd33jgqZWpLlk7lmDoAbaRs/bDyihsIYfVyjijWmG+eK
C0KpaqYdGyPvkCvjdjt/XkzGrbJgm574k+h2V38XMNzUaiWsqSE7kme+bQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGRgYSZY0vCp2Pl6d/NI2D4Lv2FnMB8GA1UdIwQY
MBaAFCWuVRrwu115d+pz9olvJfHsoo+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjkt
MjE0MmY4ZmI2NzZlLzEvWkdCaEpsalM4S25ZLVhwMzgwallQZ3VfWVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjktMjE0MmY4ZmI2NzZl
LzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBZ5QAwQA
ubKqMA0GCSqGSIb3DQEBCwUAA4IBAQAB4IdlfKsP//X3tOvmoOXNiUd3DZJiQEeY
uln1Sts0nge31hSQt0bLhj7N3LF3Wk2zPSBewW8rqsU1da9B/fAYBJRdSugtfcbd
0DoPd+5JtTKIH0UaIfElvEBfWRnhyARAHHyznksgYVTDTuLZSs9NmNKXqNkIDu4q
z3R10UKxXHpbM5PBU+VERxo6dcma7dP9CKPHcehyYFx2Ip4k+Sg24g8tMFymUwil
MJ6fqk7DrIFBbhiQoaKccUA1mD2OLynD1x+H5H++b+gGRxzTsF0rBnZ/4yMH0Hfi
8NTT115YQqokw5t9xNWo/r7Beo6kJX+eDlTrsZ4F7v/BYdl1oc0C
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:06 2025 by rpki-client