Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/dGHvdq4GQ4sl4l98Bo5y5-clt0Q.roa
File: dGHvdq4GQ4sl4l98Bo5y5-clt0Q.roa (raw, json)
Hash identifier: /PgE3g4jZbQkEY1ayt/wklbnCOyED3fEnr6XZMTqKuM=
Subject key identifier: 74:61:EF:76:AE:06:43:8B:25:E2:5F:7C:06:8E:72:E7:E7:25:B7:44
Certificate issuer: /CN=188a460189ee14abceda75997194ccbfe3c58b6b
Certificate serial: 018CC2DB161FF97CF995507B12C8C8CE3D6C
Authority key identifier: 18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/dGHvdq4GQ4sl4l98Bo5y5-clt0Q.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199927
IP address blocks: 45.11.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:16:1f:f9:7c:f9:95:50:7b:12:c8:c8:ce:3d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a460189ee14abceda75997194ccbfe3c58b6b
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7461ef76ae06438b25e25f7c068e72e7e725b744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:91:a5:01:de:d7:62:be:9a:33:4f:d7:07:
43:b6:48:a3:91:96:60:7a:1c:39:f9:97:c8:f4:34:
79:3a:57:93:73:0d:b1:a6:05:a0:42:01:85:0f:b9:
57:eb:dc:01:bd:ce:5d:d2:0f:79:97:4b:45:e9:ef:
38:87:59:01:01:e8:a5:df:e9:f4:3a:63:e0:5c:d1:
cc:d5:6c:38:c0:64:e5:4e:92:ac:6a:88:76:12:11:
30:74:06:85:e7:03:2d:bb:f9:37:87:12:87:09:58:
28:e8:6a:ea:ff:43:be:3e:db:83:ad:7b:41:f8:43:
63:76:1c:27:2f:ac:1f:05:4c:63:88:04:2b:1a:dd:
94:56:35:55:45:40:32:b5:1d:17:ae:ed:ec:a9:a6:
81:05:77:b0:8f:9c:d6:0b:2a:be:4c:cd:38:80:ef:
37:80:52:79:90:21:86:36:a6:9a:4b:03:b5:12:f5:
a5:f5:9f:f4:65:91:ef:cb:a7:6b:ea:68:2e:c1:f2:
5c:eb:58:00:e5:62:63:d7:cb:bd:f6:85:e3:df:1b:
3f:f5:93:68:9f:81:0c:84:6a:87:bd:fe:2e:5b:ae:
33:79:55:b4:a2:cd:c9:bb:45:d9:0f:d5:f9:af:2f:
d9:72:17:10:b2:a2:c1:5b:3f:e3:ec:22:57:f8:ee:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:EF:76:AE:06:43:8B:25:E2:5F:7C:06:8E:72:E7:E7:25:B7:44
X509v3 Authority Key Identifier:
keyid:18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/dGHvdq4GQ4sl4l98Bo5y5-clt0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:88:b6:ef:52:cf:8a:5b:c7:e7:65:5f:e2:b7:3b:16:d9:5f:
24:15:fc:bb:8c:4c:30:ce:11:15:e3:57:98:fd:2a:67:e2:75:
32:8d:c7:b9:0a:2c:66:12:d4:69:13:d4:5c:b4:db:2a:37:35:
67:6a:40:30:df:2a:14:65:13:47:8b:c3:85:7b:8d:1a:63:4f:
9f:55:e1:33:36:c0:9c:64:43:b8:7f:d2:bd:c0:99:12:39:bf:
1f:46:1e:75:68:7a:5e:b2:25:77:cb:e1:db:43:19:e2:ec:2f:
16:e5:60:49:8d:6e:99:4f:7d:62:9c:0c:03:3d:b1:2b:81:3c:
50:de:42:9c:c9:16:81:61:f4:21:1d:26:66:17:ab:f6:ec:e4:
21:3f:e4:7f:39:3f:79:ae:bb:fc:01:41:95:c3:22:98:4d:15:
e5:58:6f:4b:14:28:59:82:d7:b8:ea:96:5f:48:78:15:bf:65:
ec:2d:eb:7a:79:5e:19:f0:3f:87:0d:e0:26:48:da:66:d1:de:
f7:b6:1b:cd:76:9f:25:ae:ab:6e:6c:3c:1b:4b:e6:45:26:c4:
71:d4:8a:e0:4d:59:0a:9f:7c:47:35:93:4a:89:b9:67:e9:b3:
94:0f:45:7d:e5:4f:5a:cd:25:80:bb:98:2d:63:ab:d1:e6:41:
d1:9d:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:20 2025 by rpki-client