Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/2dUaeIlQPWX6DbrGZpyOUzhhaaE.roa
File: 2dUaeIlQPWX6DbrGZpyOUzhhaaE.roa (raw, json)
Hash identifier: rnePrHMtQz2rtRJGUoGCMkFTa7sJr6VxZQX7EHVQP7w=
Subject key identifier: D9:D5:1A:78:89:50:3D:65:FA:0D:BA:C6:66:9C:8E:53:38:61:69:A1
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 01833AA49D5765B3D5CEA52FEB93FD13975A
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/2dUaeIlQPWX6DbrGZpyOUzhhaaE.roa
Signing time: Wed 14 Sep 2022 06:16:50 +0000
ROA not before: Wed 14 Sep 2022 06:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.43.0/24 maxlen: 24
2a0c:9c0:1::/48 maxlen: 48
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:a4:9d:57:65:b3:d5:ce:a5:2f:eb:93:fd:13:97:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Sep 14 06:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9d51a7889503d65fa0dbac6669c8e53386169a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:10:60:90:ba:f5:43:88:cb:99:69:85:0c:
c2:72:35:ce:0f:7d:29:a2:4a:9d:e2:a9:a7:f8:8c:
35:e1:96:50:de:97:46:4d:6d:4a:6e:8b:fb:5e:e7:
ea:e3:e8:ca:1e:cc:60:b7:9b:f6:28:ee:9a:19:96:
3c:ab:bc:75:fa:bc:c9:d8:84:9e:ff:23:1a:2f:0a:
b1:24:6a:66:9a:d1:b0:2e:b0:92:56:de:de:35:8e:
e0:30:f7:db:ce:09:d8:84:c2:2f:6a:4e:81:7e:3f:
8e:0e:9a:31:8e:ef:44:0a:5c:69:54:b0:be:93:fc:
9a:d5:f1:fc:7a:a7:b9:2a:08:e4:62:ef:78:8e:79:
e4:f3:87:bc:f8:00:9e:64:1a:a2:30:eb:ed:f9:54:
dc:23:d7:c0:0b:5e:57:3e:e9:43:2f:9b:83:da:25:
ae:d6:8f:b0:49:8e:7b:54:de:27:c9:08:0f:dc:e3:
ac:3b:af:bf:3b:17:aa:f3:70:00:a3:2b:c6:4c:9f:
61:b1:9c:24:d8:38:ba:e2:ec:86:17:23:08:2d:52:
f1:39:f8:ee:18:b4:e3:7a:3c:b4:9f:66:85:eb:82:
3a:81:6a:01:e8:cc:83:2c:e0:63:dc:c1:2c:b7:19:
a7:84:fb:63:8f:9e:18:92:63:aa:f3:f5:6d:86:5b:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:1A:78:89:50:3D:65:FA:0D:BA:C6:66:9C:8E:53:38:61:69:A1
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/2dUaeIlQPWX6DbrGZpyOUzhhaaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.43.0/24
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
92:b3:6f:41:91:56:e4:8e:aa:02:35:6d:7c:38:3d:b9:7b:04:
2f:bf:12:97:09:60:41:52:12:2a:56:f2:06:2a:49:a7:7f:62:
55:85:1b:d6:1f:8a:de:e1:0f:f4:61:54:ed:8a:ae:c1:59:f0:
71:d5:9a:27:4c:de:d6:d1:0c:d7:0f:0d:6a:1d:0d:37:f8:9c:
a5:86:2b:61:1e:e8:ba:c6:23:f4:16:8d:23:fe:f1:40:9a:25:
32:81:2d:ff:14:7d:1b:09:bd:50:9b:b1:a6:1a:9a:97:37:c8:
45:fa:ce:74:ed:11:e6:f4:6e:f4:b9:e4:42:88:5c:ae:77:0c:
60:f9:05:5d:64:db:e8:88:d1:d5:74:9c:f2:d7:54:16:68:3c:
59:9a:ff:83:29:56:6c:f6:5a:66:4f:78:21:38:c9:67:7e:7d:
79:12:af:30:57:a2:b2:e4:22:87:14:59:ae:54:be:91:b1:32:
78:bd:13:cd:47:32:88:5d:99:9a:a1:c0:57:65:92:69:fb:ab:
a9:73:f8:ba:48:81:3d:21:57:02:03:30:ed:54:ce:fa:d3:19:
5d:cc:d2:22:80:f5:7a:e0:79:e9:f8:79:5c:a4:30:9a:e3:fc:
a9:e6:94:12:67:42:97:4f:8c:b1:bf:a2:94:3f:4d:84:87:ec:
41:d1:99:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYM6pJ1XZbPVzqUv65P9E5daMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTBiMjFjODlhMzAyYmU5ZGMwMzg3MGMwOThmMjMyODAz
MDRiMGYwHhcNMjIwOTE0MDYxNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWQ1MWE3ODg5NTAzZDY1ZmEwZGJhYzY2NjljOGU1MzM4NjE2OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T4QYJC69UOIy5lphQzCcjXOD30p
okqd4qmn+Iw14ZZQ3pdGTW1Kbov7Xufq4+jKHsxgt5v2KO6aGZY8q7x1+rzJ2ISe
/yMaLwqxJGpmmtGwLrCSVt7eNY7gMPfbzgnYhMIvak6Bfj+ODpoxju9EClxpVLC+
k/ya1fH8eqe5KgjkYu94jnnk84e8+ACeZBqiMOvt+VTcI9fAC15XPulDL5uD2iWu
1o+wSY57VN4nyQgP3OOsO6+/Oxeq83AAoyvGTJ9hsZwk2Di64uyGFyMILVLxOfju
GLTjejy0n2aF64I6gWoB6MyDLOBj3MEstxmnhPtjj54YkmOq8/Vthlsq2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNnVGniJUD1l+g26xmacjlM4YWmhMB8GA1UdIwQY
MBaAFE7gshyJowK+ncA4cMCY8jKAMEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUt
NTA5NjExYjU5YzRhLzEvMmRVYWVJbFFQV1g2RGJyR1pweU9VemhoYWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUtNTA5NjExYjU5YzRh
LzEvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvEgrMA8E
AgACMAkDBwEqDAnAAAAwDQYJKoZIhvcNAQELBQADggEBAJKzb0GRVuSOqgI1bXw4
Pbl7BC+/EpcJYEFSEipW8gYqSad/YlWFG9Yfit7hD/RhVO2KrsFZ8HHVmidM3tbR
DNcPDWodDTf4nKWGK2Ee6LrGI/QWjSP+8UCaJTKBLf8UfRsJvVCbsaYampc3yEX6
znTtEeb0bvS55EKIXK53DGD5BV1k2+iI0dV0nPLXVBZoPFma/4MpVmz2WmZPeCE4
yWd+fXkSrzBXorLkIocUWa5UvpGxMni9E81HMohdmZqhwFdlkmn7q6lz+LpIgT0h
VwIDMO1UzvrTGV3M0iKA9Xrgeen4eVykMJrj/KnmlBJnQpdPjLG/opQ/TYSH7EHR
mVQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:03 2025 by rpki-client