Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/2wmtliVBxfozFrIlKB1-nwfdjAE.roa
File: 2wmtliVBxfozFrIlKB1-nwfdjAE.roa (raw, json)
Hash identifier: +lKNzr0mRWdZKlHpN+HQ/mkjY4gghuaP04gNQkK1wf4=
Subject key identifier: DB:09:AD:96:25:41:C5:FA:33:16:B2:25:28:1D:7E:9F:07:DD:8C:01
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019423D6D9CD224ABC10C1BB487CA45A6627
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/2wmtliVBxfozFrIlKB1-nwfdjAE.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 81.188.0.0/16 maxlen: 16
212.100.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d9:cd:22:4a:bc:10:c1:bb:48:7c:a4:5a:66:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db09ad962541c5fa3316b225281d7e9f07dd8c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:eb:89:db:48:64:48:b0:9b:fd:44:d7:5a:
c0:08:cd:97:15:99:17:03:0c:b4:b1:9f:00:90:5a:
45:eb:b7:22:a3:d3:52:d7:a3:18:d8:0a:aa:86:c9:
19:80:02:17:52:59:9a:2b:5f:57:52:47:75:71:15:
38:31:32:e2:9b:69:50:32:78:46:d3:a4:a8:31:d3:
36:39:e6:f6:1f:86:cf:46:5a:14:19:94:9c:27:35:
04:0c:11:ba:d5:b4:a9:e3:7a:6e:32:f5:68:dc:67:
25:47:ce:02:8c:de:71:59:85:3a:68:06:62:2e:27:
f1:83:b4:c8:11:99:c0:8c:be:43:00:97:bb:33:34:
b6:5d:4a:18:62:cc:78:ec:d8:39:ad:86:a4:40:f9:
5c:b3:da:74:c7:00:65:bf:1c:97:f2:b7:04:43:e1:
ed:c3:5a:7e:d5:28:31:78:d6:62:98:d7:6f:92:6b:
26:4e:ca:98:c6:ae:cf:d8:68:0d:a3:87:fc:9e:af:
5c:71:1f:b6:68:7e:7a:da:ac:44:4a:6d:6d:51:b2:
59:ec:73:e3:f0:b9:33:88:e3:0d:98:aa:02:8b:6c:
08:be:c8:21:96:78:a7:cc:3f:db:8d:46:c6:b4:3d:
ad:21:0d:45:dc:85:da:04:7e:b7:78:c1:b1:b2:b9:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:AD:96:25:41:C5:FA:33:16:B2:25:28:1D:7E:9F:07:DD:8C:01
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/2wmtliVBxfozFrIlKB1-nwfdjAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.188.0.0/16
212.100.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:de:24:39:74:9f:a1:e1:48:b3:4b:2b:72:16:27:27:3b:1a:
0e:e2:91:91:6f:83:c7:c9:0c:2d:df:f1:4c:ac:0b:16:af:75:
fa:ab:57:c3:88:f8:58:e9:61:fd:6c:30:72:c7:cc:5a:95:3c:
23:a7:4b:54:7b:e6:1d:8b:b5:82:26:ad:6a:43:19:17:08:b4:
aa:44:da:d6:36:a4:25:ae:6a:fb:b0:89:74:79:51:05:13:0a:
be:a1:41:21:d5:9f:04:9c:fa:1e:44:b6:cb:97:9a:04:5a:c5:
42:67:cc:a4:b9:7b:35:65:19:7c:ad:32:6c:0b:c5:5b:2f:50:
55:80:e9:08:e3:a5:e3:58:65:f2:7e:5a:26:fc:82:95:5e:e9:
b6:c7:08:22:81:c1:a8:a2:98:be:b7:49:2d:ef:2c:a5:b2:ea:
2a:9a:83:e1:58:96:22:7b:fe:60:c0:42:42:56:e0:04:0f:37:
a0:cf:54:ee:27:73:e6:de:5c:94:ce:ee:ad:30:d4:05:77:1c:
b3:9d:f2:0d:96:76:45:78:8d:d6:c6:df:92:e9:de:c4:1a:36:
41:47:8a:a9:33:89:1a:d5:50:7c:13:3b:be:fd:bf:36:a1:17:
95:f7:97:36:13:86:4e:40:eb:8f:e4:5c:ec:3b:84:da:cf:bf:
d5:92:cf:91
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZQj1tnNIkq8EMG7SHykWmYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjUwMTAxMjE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjA5YWQ5NjI1NDFjNWZhMzMxNmIyMjUyODFkN2U5ZjA3ZGQ4YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsrridtIZEiwm/1E11rACM2XFZkX
Awy0sZ8AkFpF67cio9NS16MY2AqqhskZgAIXUlmaK19XUkd1cRU4MTLim2lQMnhG
06SoMdM2Oeb2H4bPRloUGZScJzUEDBG61bSp43puMvVo3GclR84CjN5xWYU6aAZi
Lifxg7TIEZnAjL5DAJe7MzS2XUoYYsx47Ng5rYakQPlcs9p0xwBlvxyX8rcEQ+Ht
w1p+1SgxeNZimNdvkmsmTsqYxq7P2GgNo4f8nq9ccR+2aH562qxESm1tUbJZ7HPj
8LkziOMNmKoCi2wIvsghlninzD/bjUbGtD2tIQ1F3IXaBH63eMGxsrlbCwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFNsJrZYlQcX6MxayJSgdfp8H3YwBMB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvMndtdGxpVkJ4Zm96RnJJbEtCMS1ud2ZkakFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAUbwDBAXU
ZKAwDQYJKoZIhvcNAQELBQADggEBAB3eJDl0n6HhSLNLK3IWJyc7Gg7ikZFvg8fJ
DC3f8UysCxavdfqrV8OI+FjpYf1sMHLHzFqVPCOnS1R75h2LtYImrWpDGRcItKpE
2tY2pCWuavuwiXR5UQUTCr6hQSHVnwSc+h5EtsuXmgRaxUJnzKS5ezVlGXytMmwL
xVsvUFWA6QjjpeNYZfJ+Wib8gpVe6bbHCCKBwaiimL63SS3vLKWy6iqag+FYliJ7
/mDAQkJW4AQPN6DPVO4nc+beXJTO7q0w1AV3HLOd8g2WdkV4jdbG35Lp3sQaNkFH
iqkziRrVUHwTO779vzahF5X3lzYThk5A64/kXOw7hNrPv9WSz5E=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:08 2025 by rpki-client