Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/6OPkLWvq7ZYTJ5EAx4dt5vkbfW4.roa
File: 6OPkLWvq7ZYTJ5EAx4dt5vkbfW4.roa (raw, json)
Hash identifier: czBRrQ8da3FtFilQRBJU+d6h3/6/7fv87ysN+oARvjk=
Subject key identifier: E8:E3:E4:2D:6B:EA:ED:96:13:27:91:00:C7:87:6D:E6:F9:1B:7D:6E
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 0189D0319739A864D45418E044C31332B516
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/6OPkLWvq7ZYTJ5EAx4dt5vkbfW4.roa
Signing time: Mon 07 Aug 2023 13:30:58 +0000
ROA not before: Mon 07 Aug 2023 13:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.43.0/24 maxlen: 24
2a0c:9c0:1::/48 maxlen: 48
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:31:97:39:a8:64:d4:54:18:e0:44:c3:13:32:b5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Aug 7 13:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e3e42d6beaed9613279100c7876de6f91b7d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:4e:a7:fe:d5:f3:bf:87:0f:7f:1e:f9:93:
d7:96:a7:0d:03:cb:ea:fa:d4:f5:1d:8a:c2:31:9a:
6d:ec:7e:76:ef:ae:82:cb:86:4b:0a:43:69:29:41:
08:5b:19:18:40:5d:5e:09:a1:8c:b6:52:ff:55:c5:
27:75:b5:46:68:95:b9:65:28:6a:0d:1a:53:dc:84:
d7:41:34:72:0b:33:4b:3d:36:6c:b2:64:08:22:f9:
7a:55:6f:5f:13:8c:5f:6d:1c:ef:51:d5:f8:f3:d5:
db:38:00:44:aa:97:74:0b:d0:b2:36:9c:4a:86:ce:
49:5b:c9:c2:73:39:a7:8f:bb:c9:94:71:12:96:fb:
28:b6:52:49:a9:b8:44:c5:55:1c:22:50:b6:69:1b:
c4:40:8a:d6:5c:16:55:81:ea:12:8b:de:4e:1f:7e:
41:c1:ea:97:0a:71:b5:0a:54:0f:85:4f:e4:68:2a:
a5:5f:f5:89:17:81:4a:a4:cf:17:69:73:04:98:77:
22:8b:c4:ce:7b:b0:70:50:e9:61:f9:ae:73:ee:b1:
2b:05:d7:f3:ee:0d:ad:43:72:43:49:38:81:75:62:
3e:b3:d8:35:24:de:44:9a:1b:ad:e0:dc:09:17:22:
d6:d0:53:02:1b:8f:0c:07:69:9a:49:ee:44:38:20:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:E4:2D:6B:EA:ED:96:13:27:91:00:C7:87:6D:E6:F9:1B:7D:6E
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/6OPkLWvq7ZYTJ5EAx4dt5vkbfW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.43.0/24
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
af:63:a2:03:a9:7c:4c:65:23:a5:18:c6:14:26:dd:be:58:ed:
6b:d0:65:0f:03:56:69:79:53:04:7f:a6:3a:4c:be:56:d7:7b:
c5:87:73:08:60:89:20:4d:b6:f4:22:d7:8e:8e:14:7a:97:9c:
a8:b9:8e:64:4b:a7:61:9f:3b:a4:90:6d:fe:a1:ee:2b:17:66:
55:45:f5:c9:b3:61:d0:b0:32:3f:74:b3:92:1c:89:f1:ce:02:
12:a5:95:6f:34:82:80:49:d9:98:a8:dc:e3:1f:4e:ed:41:fc:
a9:27:75:1e:a5:e2:57:05:9d:92:1e:3d:a0:1f:bf:81:f8:0a:
58:99:bb:e6:71:83:87:03:30:95:55:4a:cf:09:eb:20:85:18:
a0:aa:7a:0c:a0:6f:ec:e3:d5:e4:ca:31:89:44:ff:d6:c3:53:
e0:1e:8d:d9:25:bd:72:99:d6:5e:34:43:16:00:c4:2a:cd:4e:
ac:b9:6c:c1:90:f9:84:20:3e:71:2f:a4:bf:43:e3:91:9e:1a:
9a:e8:94:59:2a:60:39:a5:01:b5:6a:f0:0f:c5:6a:b1:89:24:
bf:6f:ef:de:9a:63:66:e9:4a:9e:8d:c8:ba:ab:24:2d:7b:80:
10:01:97:46:09:cf:b9:0a:16:df:20:68:9f:a2:8f:74:61:6f:
4c:65:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:48 2025 by rpki-client