Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa
File: wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa (raw, json)
Hash identifier: kbPsqoJze+tNEJsbFqXpAiz/ui3VxFgmLT6No+U36XU=
Subject key identifier: C3:39:DD:68:F4:6C:4E:2D:26:C5:61:90:F0:3C:2B:4D:2C:85:22:37
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 0194258E6B53168DC770B212CD6B5662BA5C
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa
Signing time: Thu 02 Jan 2025 05:47:58 +0000
ROA not before: Thu 02 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.11.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:6b:53:16:8d:c7:70:b2:12:cd:6b:56:62:ba:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jan 2 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c339dd68f46c4e2d26c56190f03c2b4d2c852237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:ac:97:ed:c4:77:7f:b4:96:15:60:62:aa:
75:52:56:eb:b0:ae:79:76:89:a5:c3:cb:7e:2e:d1:
9b:52:c2:af:a2:92:76:47:2f:0c:46:da:c3:65:94:
cc:86:ae:35:16:6b:29:1d:18:66:5f:a4:0b:cc:47:
69:72:a2:13:e8:d1:d2:fa:da:d7:06:89:d2:29:94:
ed:c0:03:2d:f2:9e:67:c6:82:0d:b8:ff:ce:0e:20:
7b:c0:c2:c1:c6:e5:56:0d:62:a6:6a:0b:31:d8:76:
4e:58:54:b2:82:3a:e9:07:53:34:25:3f:22:98:d8:
f7:d9:5c:0e:cd:8b:96:55:f7:93:5c:fe:ca:3d:68:
7e:a2:00:c2:eb:e5:86:25:1f:1d:c4:53:f5:55:57:
71:49:5c:03:5d:6c:77:dd:0b:d4:cb:28:2b:ee:b3:
1e:64:c3:22:a9:8e:8a:0d:39:97:75:f1:bc:8f:86:
f9:1b:d5:b1:e6:a7:b7:2f:57:9e:55:a1:8f:a8:48:
cc:8c:b9:e1:e3:95:79:51:7f:9e:4b:b2:92:4b:14:
02:fe:52:75:cc:a8:a4:a9:84:ce:8d:2b:10:4c:c2:
37:ab:aa:31:ff:68:97:7f:72:3f:a2:df:1d:0a:2f:
4d:9d:ad:79:fd:f1:97:b7:d6:fc:50:0a:92:12:dd:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:DD:68:F4:6C:4E:2D:26:C5:61:90:F0:3C:2B:4D:2C:85:22:37
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.252.0/22
Signature Algorithm: sha256WithRSAEncryption
01:0d:fc:18:bd:31:21:77:5c:b6:9d:8d:5a:3b:19:f8:00:11:
6a:f9:eb:5d:07:83:1b:2e:10:85:08:e6:25:51:82:e1:67:d0:
c5:52:39:41:3d:e8:11:2b:31:22:79:d1:f8:b9:df:d1:35:1d:
cd:1e:e0:02:8d:63:e4:57:ea:09:27:12:d8:0d:bc:e4:f6:4b:
19:c8:2c:6e:d0:70:a9:d4:19:03:c0:61:19:b9:d8:b7:63:8b:
18:38:7c:15:1c:50:8b:1c:5f:cf:7c:ee:e2:82:c0:86:bd:b3:
68:f3:18:1b:bb:aa:79:e2:40:11:61:34:66:4a:71:cf:1b:c0:
b7:c1:db:40:f9:e0:d6:b0:bc:19:cd:94:f9:7f:12:7b:a1:f1:
96:8f:5e:ca:07:f8:96:06:64:c1:59:02:0f:0c:33:c2:cd:67:
ff:4d:40:30:f7:a0:50:a0:b3:a7:57:1f:75:bf:9b:c3:a0:aa:
71:83:ea:b0:62:90:d5:a3:c9:c9:69:43:6d:ba:bf:10:d5:0c:
66:ec:ee:5f:4f:a6:95:e6:91:f9:c3:69:18:c4:76:f4:6b:b5:
aa:5e:5e:66:21:3a:64:7e:f4:42:d0:50:19:ff:02:bf:a4:47:
5b:ae:99:a7:b2:9c:77:5c:88:a5:c4:d1:b0:6e:42:11:2c:3e:
96:fa:8b:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljmtTFo3HcLISzWtWYrpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWEyYTk0MDViZGExNjcxYzEwNzc2ZjQ0MjYyNzNjOTA0
ZTRhZDAwHhcNMjUwMTAyMDU0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzM5ZGQ2OGY0NmM0ZTJkMjZjNTYxOTBmMDNjMmI0ZDJjODUyMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fqsl+3Ed3+0lhVgYqp1UlbrsK55
domlw8t+LtGbUsKvopJ2Ry8MRtrDZZTMhq41FmspHRhmX6QLzEdpcqIT6NHS+trX
BonSKZTtwAMt8p5nxoINuP/ODiB7wMLBxuVWDWKmagsx2HZOWFSygjrpB1M0JT8i
mNj32VwOzYuWVfeTXP7KPWh+ogDC6+WGJR8dxFP1VVdxSVwDXWx33QvUyygr7rMe
ZMMiqY6KDTmXdfG8j4b5G9Wx5qe3L1eeVaGPqEjMjLnh45V5UX+eS7KSSxQC/lJ1
zKikqYTOjSsQTMI3q6ox/2iXf3I/ot8dCi9Nna15/fGXt9b8UAqSEt0YoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMM53Wj0bE4tJsVhkPA8K00shSI3MB8GA1UdIwQY
MBaAFEEaKpQFvaFnHBB3b0QmJzyQTkrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQt
OGM1MmU2NjZhOGEyLzEvd3puZGFQUnNUaTBteFdHUThEd3JUU3lGSWpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQtOGM1MmU2NjZhOGEy
LzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQv8MA0G
CSqGSIb3DQEBCwUAA4IBAQABDfwYvTEhd1y2nY1aOxn4ABFq+etdB4MbLhCFCOYl
UYLhZ9DFUjlBPegRKzEiedH4ud/RNR3NHuACjWPkV+oJJxLYDbzk9ksZyCxu0HCp
1BkDwGEZudi3Y4sYOHwVHFCLHF/PfO7igsCGvbNo8xgbu6p54kARYTRmSnHPG8C3
wdtA+eDWsLwZzZT5fxJ7ofGWj17KB/iWBmTBWQIPDDPCzWf/TUAw96BQoLOnVx91
v5vDoKpxg+qwYpDVo8nJaUNtur8Q1Qxm7O5fT6aV5pH5w2kYxHb0a7WqXl5mITpk
fvRC0FAZ/wK/pEdbrpmnspx3XIilxNGwbkIRLD6W+otB
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:04 2025 by rpki-client