Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wzsf_69Vu8NqK3QabYJh6D7-6BE.roa
File: wzsf_69Vu8NqK3QabYJh6D7-6BE.roa (raw, json)
Hash identifier: TJhbyDsG1mk81GcXyFadyHauj5NKxuu7fIUbFc/QgUQ=
Subject key identifier: C3:3B:1F:FF:AF:55:BB:C3:6A:2B:74:1A:6D:82:61:E8:3E:FE:E8:11
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBE5089ABCC5808D66862010BEDF6C
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wzsf_69Vu8NqK3QabYJh6D7-6BE.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e5:08:9a:bc:c5:80:8d:66:86:20:10:be:df:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c33b1fffaf55bbc36a2b741a6d8261e83efee811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:2d:bb:65:18:ec:85:31:c4:87:2d:73:5e:
85:3b:a6:a1:c8:9c:c0:29:c5:36:0c:11:0d:a4:4d:
8c:5a:ac:25:f2:ca:f5:21:27:fd:87:b5:a7:b3:21:
13:ad:6c:08:2c:62:d5:fa:01:64:33:85:a6:40:3d:
f4:51:97:6d:68:e5:f1:75:74:51:7d:69:58:e5:b4:
d7:f7:99:9a:4c:69:33:0c:ae:d4:00:fa:fb:b1:50:
85:8b:0d:c8:aa:10:03:44:24:da:ff:3e:0a:eb:6f:
d6:dd:c3:d3:61:ba:3d:38:f0:a0:ec:6e:c7:60:1c:
d9:f3:b2:dc:84:17:54:89:3d:a7:d1:5d:60:49:2c:
a9:2e:b6:5b:80:36:b3:0f:2c:ac:85:f0:65:86:96:
b4:9b:01:2f:1a:bc:2f:ef:54:ab:85:e8:0a:34:d1:
2f:81:28:19:35:77:e4:bf:7b:25:02:f5:63:fe:29:
a8:a0:a4:aa:78:7e:96:75:94:a5:62:19:88:f3:60:
22:b2:e3:9d:e1:20:6a:85:a6:40:ee:7d:7b:ca:61:
83:5c:af:e4:cd:bd:5e:9b:70:72:e4:d3:4e:8b:f8:
f0:3e:e7:69:66:39:fd:16:02:47:56:f9:07:1e:c5:
91:57:f9:6f:c3:59:51:91:14:59:f5:c5:cd:f3:61:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:1F:FF:AF:55:BB:C3:6A:2B:74:1A:6D:82:61:E8:3E:FE:E8:11
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wzsf_69Vu8NqK3QabYJh6D7-6BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.58.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7c:c9:ee:de:0f:c5:fa:82:d4:43:2c:c9:1e:19:76:ac:82:
bd:1d:34:be:8d:d2:ed:74:31:a6:af:77:10:0b:8e:44:e3:42:
1e:17:14:a9:51:61:88:50:5d:8a:47:07:b2:9b:a6:78:2b:25:
29:6b:a8:58:30:33:82:79:b3:e5:52:b6:9c:63:5d:ab:16:e8:
2c:0a:49:4c:86:e1:a6:fe:14:d9:45:91:38:6d:d7:2e:d4:7c:
1b:69:01:ef:a5:ca:89:db:ea:49:a6:d4:d1:9c:83:41:55:ae:
a2:96:68:f4:c8:93:f0:16:ad:ae:69:5a:fc:e8:62:16:5f:0f:
3d:70:8e:26:07:8e:33:e4:69:67:ac:1d:20:fa:20:ba:25:83:
c5:55:44:c4:19:30:a1:44:3e:3a:9d:86:56:c3:c5:63:9e:73:
87:bf:b8:84:84:9e:d5:04:a4:85:e7:b1:ef:2d:fb:14:9c:be:
03:92:20:02:a7:f1:6a:aa:86:be:21:30:36:1f:40:58:e3:ad:
e5:f1:9a:73:ac:22:56:c1:24:b0:6a:5d:8b:b6:e6:12:44:93:
79:47:76:1c:10:04:9e:98:40:79:b7:14:01:c1:31:ee:7d:1f:
e1:55:3c:fa:43:59:b0:c9:c8:af:cd:a1:b4:90:d1:48:ca:ef:
4d:a9:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:25:02 2025 by rpki-client