Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/LF__WUM5-Iu3haQEpzIfIzOWTfU.roa
File: LF__WUM5-Iu3haQEpzIfIzOWTfU.roa (raw, json)
Hash identifier: aLE//Hr38vCU8GeIUDOuxQLh64sOk+g/jgUiB0dETto=
Subject key identifier: 2C:5F:FF:59:43:39:F8:8B:B7:85:A4:04:A7:32:1F:23:33:96:4D:F5
Certificate issuer: /CN=188a460189ee14abceda75997194ccbfe3c58b6b
Certificate serial: 01856FE7226418C48D624D8AD81FDB46BAED
Authority key identifier: 18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/LF__WUM5-Iu3haQEpzIfIzOWTfU.roa
Signing time: Mon 02 Jan 2023 00:34:56 +0000
ROA not before: Mon 02 Jan 2023 00:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199927
IP address blocks: 45.11.12.0/22 maxlen: 22
45.11.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:22:64:18:c4:8d:62:4d:8a:d8:1f:db:46:ba:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a460189ee14abceda75997194ccbfe3c58b6b
Validity
Not Before: Jan 2 00:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c5fff594339f88bb785a404a7321f2333964df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e1:6a:d0:ec:51:ee:e9:4d:44:ec:86:c4:89:
32:2b:56:a4:56:ad:61:33:a2:95:74:51:b0:43:45:
98:9c:6d:fc:a2:d3:9c:ef:a4:cf:60:91:b1:65:8f:
4e:2f:99:8f:d6:7f:7d:43:97:e7:84:b2:0f:42:51:
50:bc:30:71:f2:60:68:4a:9d:77:f6:66:a0:9e:38:
1c:61:ab:29:bd:7e:b1:93:f1:ff:21:9e:52:75:a9:
ff:db:79:fc:06:e7:ea:c4:36:fc:e6:b7:b0:6c:a0:
d7:2b:83:aa:f8:c1:bd:dd:0b:91:ce:5d:7c:6b:47:
ee:04:83:5d:8c:cb:b9:dd:91:30:05:96:96:a1:57:
51:22:85:c7:3a:23:bd:da:5e:ed:7f:76:ce:88:26:
15:fa:aa:20:e8:3f:9d:35:18:0d:6d:f9:17:2c:7e:
0a:71:de:54:c6:cc:59:9d:23:2f:69:8b:50:89:7f:
cf:d6:57:a8:c2:e9:6b:50:5a:3b:43:a2:73:5a:3c:
1b:33:4a:aa:43:aa:fc:00:a2:ff:fc:37:7e:48:8a:
6f:39:d1:9a:ca:08:16:31:fb:67:a3:48:95:22:2c:
d0:ff:f6:9e:b8:3d:fc:9b:0b:da:5e:a5:dc:f8:d7:
ae:2d:6b:b2:ee:64:91:b0:1c:9e:df:cb:14:42:87:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:FF:59:43:39:F8:8B:B7:85:A4:04:A7:32:1F:23:33:96:4D:F5
X509v3 Authority Key Identifier:
keyid:18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/LF__WUM5-Iu3haQEpzIfIzOWTfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.12.0/22
Signature Algorithm: sha256WithRSAEncryption
16:2d:d5:0d:ac:af:6b:18:5c:0f:28:8a:92:47:6a:0e:d7:cd:
d5:63:bc:9b:91:00:60:ae:fe:cc:98:1f:b6:b1:df:90:5f:56:
cf:13:6c:e6:dc:e3:9b:2b:29:94:b7:33:59:b3:b5:e3:23:a3:
59:fb:df:f1:f4:a5:e5:16:8d:75:34:37:1d:fe:af:ab:b8:cd:
4f:62:a4:75:f1:f0:7f:72:ce:eb:7e:9c:2d:77:28:51:70:aa:
41:29:6b:91:09:b3:11:ff:73:54:52:de:3e:71:b2:35:2c:14:
e0:75:70:56:26:6f:fc:3a:0f:73:86:38:d8:08:d5:3b:ce:c9:
8b:44:25:42:1e:ba:fa:9c:51:c8:98:30:ce:bf:37:aa:26:cd:
7c:25:d3:86:54:9f:e4:bc:12:33:09:99:d3:fb:63:e4:ad:0d:
62:11:b7:69:91:2a:39:5a:2d:64:73:7c:4f:fc:a0:10:06:8c:
c4:a0:83:c1:2a:50:7d:9a:66:07:4d:8f:98:33:d0:5e:89:a0:
97:af:0f:b5:8d:84:02:e1:5b:d7:73:19:2c:70:f9:69:b8:ee:
cf:32:a3:01:72:0f:f2:69:ae:7a:a4:e8:4f:d0:ca:b7:3e:ce:
1e:1d:a8:0f:7b:a3:8b:a8:51:ec:4e:95:f5:69:cd:e2:ec:0b:
15:db:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:31 2025 by rpki-client