Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/WyA56EA2oxi30uAjF6x_QQYyE00.roa
File: WyA56EA2oxi30uAjF6x_QQYyE00.roa (raw, json)
Hash identifier: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=
Subject key identifier: 5B:20:39:E8:40:36:A3:18:B7:D2:E0:23:17:AC:7F:41:06:32:13:4D
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 019427481311AF0669849D4806B3E584184A
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/WyA56EA2oxi30uAjF6x_QQYyE00.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204835
IP address blocks: 45.11.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:13:11:af:06:69:84:9d:48:06:b3:e5:84:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b2039e84036a318b7d2e02317ac7f410632134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:69:f3:97:81:19:8a:6c:30:06:e2:ae:15:
ca:4d:47:12:aa:a5:a6:b6:69:12:f2:aa:8b:5a:00:
28:b2:10:e5:8d:c8:cc:94:a3:1b:cc:8a:3d:82:a5:
ef:d6:dc:e8:48:a8:b4:fe:11:b8:9a:1f:68:3e:ba:
2d:31:89:02:6f:a3:95:ad:a4:a8:1e:4b:d3:ec:5a:
43:26:a6:21:bf:c2:4c:5b:77:63:97:a8:2a:36:e0:
4c:24:1b:4a:3d:11:51:77:06:6a:1b:4b:07:80:1b:
90:e7:56:e2:74:11:99:08:50:a2:a9:2d:3e:2a:f2:
94:2d:39:e6:ac:48:58:f6:5a:ab:88:e0:a8:40:42:
36:54:e1:44:d3:ae:69:92:d5:e4:1e:20:da:0b:22:
0f:a2:8d:15:46:d6:b3:14:56:d9:b1:56:86:ab:29:
fc:6a:0a:4b:f5:24:b4:34:56:81:b3:fc:45:99:36:
e1:15:31:78:c8:05:03:77:83:94:5f:bf:fc:4b:e5:
3c:d3:a8:2a:76:26:26:21:a0:c7:79:2c:ea:02:ba:
41:a7:67:8f:ad:6b:30:bc:5b:9c:ec:b5:1f:03:ce:
82:d4:11:f1:ff:9a:c7:cf:f0:88:4a:da:66:84:5c:
03:aa:fc:0b:41:da:7b:b0:e9:36:19:3b:c4:00:41:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:39:E8:40:36:A3:18:B7:D2:E0:23:17:AC:7F:41:06:32:13:4D
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/WyA56EA2oxi30uAjF6x_QQYyE00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3d:f1:be:60:ca:1b:fa:2b:31:1b:a8:71:70:49:a3:41:2e:
73:e3:82:a2:e8:b3:80:a8:97:4d:b3:a5:77:55:6f:09:ca:c5:
71:e6:9e:d9:9e:dc:2c:4a:f5:91:f2:9c:be:4c:c4:30:6c:3e:
c4:03:9b:14:07:f6:71:ae:34:e5:b3:81:94:3d:fe:94:56:89:
73:da:62:ec:e2:1f:53:99:6d:e9:f9:41:8a:5e:a0:7f:e9:e1:
b9:40:36:db:02:72:27:10:f6:f6:2f:a7:75:26:8f:c8:82:01:
95:d9:d7:23:f0:63:2c:89:56:17:41:09:23:b3:e8:cf:de:b8:
de:49:78:7b:4e:a4:03:49:b6:4c:95:fa:b5:7e:97:e7:a0:e0:
a3:e8:5f:9a:a7:e8:40:34:9f:50:19:1e:b8:d8:59:a7:c0:32:
d2:d7:b9:c6:60:89:1c:8a:a1:e2:2e:d8:24:4b:79:3c:db:4a:
d9:1d:3b:9d:93:24:31:7a:f0:a2:3d:d0:a4:27:c5:f1:f9:33:
5a:ac:06:fc:ce:63:e2:cf:cb:84:6c:38:af:14:37:68:20:f4:
fe:49:96:08:6e:8d:91:a6:79:52:df:34:7f:97:de:26:36:2e:
1d:8f:7f:6f:4c:e7:a1:30:c9:fb:55:ec:51:2a:5d:50:d1:23:
b2:64:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:06 2025 by rpki-client