Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/JZtLZyS08h7ZysJAAUWJ3KV_Mag.roa
File: JZtLZyS08h7ZysJAAUWJ3KV_Mag.roa (raw, json)
Hash identifier: GTN27KhLUnWPlA+fE6akwmyQmK7Li4DJXMtrMtECOi8=
Subject key identifier: 25:9B:4B:67:24:B4:F2:1E:D9:CA:C2:40:01:45:89:DC:A5:7F:31:A8
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01956A81651003F87911C76703A99029FFD2
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/JZtLZyS08h7ZysJAAUWJ3KV_Mag.roa
Signing time: Thu 06 Mar 2025 08:10:19 +0000
ROA not before: Thu 06 Mar 2025 08:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 178.211.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:81:65:10:03:f8:79:11:c7:67:03:a9:90:29:ff:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Mar 6 08:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=259b4b6724b4f21ed9cac240014589dca57f31a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:82:ec:be:92:b9:04:c7:76:e8:ea:a1:56:
af:89:bd:58:45:b4:99:0e:51:0a:70:4d:ad:3d:35:
81:e3:a8:ec:99:b3:5c:9b:dd:a2:6b:43:be:07:0b:
af:78:a7:ca:41:7c:3c:19:86:f6:3a:e1:a9:4b:07:
01:f4:27:4e:25:09:fe:a3:48:ae:8c:68:26:04:61:
4b:dc:2e:81:bd:70:b3:a2:89:94:09:ba:5e:d0:da:
7e:74:a4:59:97:bf:20:f1:1b:3e:ae:ae:38:78:e2:
69:6d:e0:b0:d5:3f:21:d8:59:05:77:29:a0:23:8d:
8b:e4:22:2d:3a:f1:50:ea:df:b2:16:59:48:e9:d8:
0e:be:dd:99:6d:14:72:c8:b1:12:5a:d1:07:33:aa:
4d:de:56:be:60:d9:3a:c1:8c:fa:6e:0e:88:03:56:
2a:19:4c:ef:e2:a2:f2:69:72:73:47:db:b8:00:77:
06:65:2f:d0:e9:47:29:4d:90:54:89:70:83:16:d0:
8e:73:31:72:0d:45:3e:d9:18:c7:5b:cb:1e:31:68:
3b:a0:7d:4c:2e:be:f1:4f:11:72:6f:f8:a8:57:21:
4e:01:1f:47:f8:71:28:51:21:21:ae:00:91:98:c1:
dd:3c:96:63:0b:95:cd:c3:a0:15:20:23:f8:e6:13:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:4B:67:24:B4:F2:1E:D9:CA:C2:40:01:45:89:DC:A5:7F:31:A8
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/JZtLZyS08h7ZysJAAUWJ3KV_Mag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.61.0/24
Signature Algorithm: sha256WithRSAEncryption
75:56:e6:eb:bc:55:1d:cf:9c:8c:a3:15:7f:c0:f5:a0:51:38:
ac:99:4d:9b:06:a4:c3:a7:75:25:6b:2f:19:ad:33:67:fa:83:
6a:33:70:cd:c0:d3:c8:ce:db:53:ef:32:6d:13:18:a5:d6:62:
00:97:3a:5c:38:80:f4:61:09:f4:e5:14:e1:e1:83:0f:d0:38:
b3:7e:4a:03:52:0c:ef:b7:06:14:00:fe:77:d9:05:dd:fc:fc:
ee:c4:c1:c9:bf:3f:5f:6c:c1:ed:4d:9e:b0:6e:6a:28:81:9a:
d6:6c:fe:0b:bb:19:00:af:f8:70:30:3f:c5:9e:cf:35:f3:e9:
fe:5e:6b:22:23:36:4a:15:f1:8a:bf:83:cf:d1:a3:f1:0b:57:
23:40:ff:a3:b0:4a:09:1b:4b:1d:93:2e:a1:c6:5e:34:9e:57:
80:92:43:fc:2c:92:95:16:e4:23:1d:08:96:4e:4b:fb:1a:70:
e2:b7:9f:f9:5a:5f:25:41:b2:9e:b5:1a:7b:8e:98:d2:b5:da:
1c:5d:cd:4d:c7:cf:0a:5b:15:24:31:ef:83:a8:00:11:96:ed:
b8:2f:f6:73:b3:d8:60:57:a4:96:b3:6c:fa:6b:c4:a2:72:07:
d1:d9:47:5d:d3:bc:28:05:40:ff:07:05:fd:ff:a9:79:4c:d3:
ce:20:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:10 2025 by rpki-client