Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/OFYvb2NQfbG_6CFw-X6sJ7_LpqY.roa
File: OFYvb2NQfbG_6CFw-X6sJ7_LpqY.roa (raw, json)
Hash identifier: lBWNp8bwpu2ZXc/wQUeDzgeimuwXMCqQi2Z2Qktnpo4=
Subject key identifier: 38:56:2F:6F:63:50:7D:B1:BF:E8:21:70:F9:7E:AC:27:BF:CB:A6:A6
Certificate issuer: /CN=188a460189ee14abceda75997194ccbfe3c58b6b
Certificate serial: 018A465E5F3569C4DFCAD8730F812EE4C790
Authority key identifier: 18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/OFYvb2NQfbG_6CFw-X6sJ7_LpqY.roa
Signing time: Wed 30 Aug 2023 12:15:04 +0000
ROA not before: Wed 30 Aug 2023 12:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199927
IP address blocks: 45.11.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:5e:5f:35:69:c4:df:ca:d8:73:0f:81:2e:e4:c7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a460189ee14abceda75997194ccbfe3c58b6b
Validity
Not Before: Aug 30 12:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38562f6f63507db1bfe82170f97eac27bfcba6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:3d:79:cc:e0:a6:ed:2b:e0:ae:41:9d:b8:
81:41:73:ea:f1:18:ca:cf:9c:70:f3:29:6d:42:1e:
e3:93:d4:37:65:73:4c:4a:5a:85:6d:df:db:f2:0f:
d7:d2:ff:7c:68:98:b9:76:e4:86:02:fa:cf:e9:3e:
ba:e5:20:ad:5c:8a:b2:f8:ee:12:1e:37:65:af:14:
5a:17:86:e9:37:60:ea:ca:f3:b0:a9:b6:ce:82:ca:
59:7c:e4:e3:ca:52:08:a0:c0:0e:25:21:96:62:15:
dc:68:8e:f3:c4:4e:87:65:f8:95:31:bf:80:89:3c:
c7:18:51:1c:54:b1:31:d9:41:5a:57:0b:0b:99:a1:
4d:f6:06:be:33:f3:44:98:0d:c3:02:21:f7:81:20:
81:b5:59:c2:9d:59:4c:07:98:b3:e1:8c:b8:85:a0:
b8:6a:d8:1d:17:76:d2:c3:80:71:f3:03:dc:6e:f3:
e7:48:f4:f6:cb:fe:5a:bd:63:92:2f:8d:6b:a1:4b:
b5:9c:b4:c7:75:9d:42:d1:e1:4c:31:3c:69:2b:37:
7c:a0:5c:3a:1c:25:14:f8:26:90:c8:39:48:e3:e2:
dd:62:4b:72:ea:18:a1:6b:56:c4:ad:f0:3f:5f:ca:
93:27:70:32:0b:ba:89:78:3a:2a:10:fc:fe:65:4f:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:2F:6F:63:50:7D:B1:BF:E8:21:70:F9:7E:AC:27:BF:CB:A6:A6
X509v3 Authority Key Identifier:
keyid:18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/OFYvb2NQfbG_6CFw-X6sJ7_LpqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.12.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b4:6e:c5:71:e9:b9:8b:8f:5c:31:f3:5b:ab:1d:b7:0c:5e:
e3:20:4e:a4:7c:ee:c2:05:cf:4c:fc:7b:4c:7c:22:37:09:e6:
16:33:5f:02:2c:49:2a:35:51:32:91:05:16:6b:0a:23:87:2f:
66:fd:74:c6:3c:51:9c:83:09:4f:13:37:6e:63:0b:c5:be:0d:
b2:8e:f5:c9:34:18:36:f3:4c:73:36:50:d7:16:06:4f:1c:c8:
34:97:86:5d:fb:5a:80:43:a5:08:46:6a:41:88:d8:40:84:79:
eb:4c:cd:08:5f:0a:71:48:a3:af:b8:dd:ec:68:45:f6:03:66:
f9:b7:48:d3:72:7a:1b:e2:90:02:89:05:25:50:3d:69:1d:5a:
8e:ea:ae:9d:0b:8b:a7:db:e4:d6:cc:cf:ef:10:58:58:97:6f:
03:09:55:7a:58:07:d0:76:ea:6a:dd:55:8a:91:b5:43:c0:8b:
76:82:31:fd:f1:b3:8b:6a:99:67:f0:39:74:ef:48:e0:81:79:
57:ab:89:6f:be:bb:dd:90:ed:d9:d0:0e:5e:57:3f:b4:d5:7f:
fa:a0:06:a3:bb:69:af:36:40:56:45:df:50:c6:e6:fe:b1:80:
cd:17:14:8f:1c:66:e2:e3:56:02:5b:ca:4c:dc:5c:ee:63:c9:
5b:78:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:15 2025 by rpki-client