Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/6fBnm-tlzvCGv-RMNcadmAZavYw.roa
File: 6fBnm-tlzvCGv-RMNcadmAZavYw.roa (raw, json)
Hash identifier: 9ZYku96S8gKKTCvG1DUD6VUIqr6OYwTSBmKh18yuz9A=
Subject key identifier: E9:F0:67:9B:EB:65:CE:F0:86:BF:E4:4C:35:C6:9D:98:06:5A:BD:8C
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 0182A70E66F58B7A5BFF1F53BF41767249B3
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/6fBnm-tlzvCGv-RMNcadmAZavYw.roa
Signing time: Tue 16 Aug 2022 14:28:35 +0000
ROA not before: Tue 16 Aug 2022 14:28:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210021
IP address blocks: 188.72.43.0/24 maxlen: 24
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:0e:66:f5:8b:7a:5b:ff:1f:53:bf:41:76:72:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Aug 16 14:28:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9f0679beb65cef086bfe44c35c69d98065abd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:b7:e6:37:7e:a1:e5:8d:23:7e:51:24:63:
d0:90:3e:d9:3b:4d:a6:b7:c4:69:f0:ff:49:93:e6:
f0:18:40:8d:b0:61:f9:8f:3f:c0:95:10:28:90:82:
4d:b7:06:65:a7:8a:90:7b:c4:62:2d:1b:89:ea:d8:
0a:2e:2f:54:07:26:7b:7b:34:aa:3f:9e:c6:c2:3e:
6f:49:68:de:71:1b:9a:b0:d6:d8:4d:24:a6:90:38:
fa:1d:34:95:4e:cf:21:39:27:57:a2:b6:cc:8a:72:
47:7b:a5:e1:cb:b3:7a:a0:ca:cc:4e:3d:cd:47:62:
9a:dd:c8:98:ee:df:be:cc:5b:9f:5a:f6:2b:92:47:
41:fc:39:39:b3:d5:6b:ea:bf:18:f8:7b:c2:0f:b4:
41:33:b1:65:15:20:f8:33:56:dd:ec:4b:fd:76:05:
74:b4:7d:aa:ad:06:48:18:cb:ab:57:44:5a:0c:d3:
5e:73:bb:cd:e3:2d:02:f3:c2:b4:54:8a:7b:af:ee:
cd:55:36:49:e4:82:77:2f:d8:4b:c2:32:f0:94:78:
87:56:80:f1:18:a2:59:ef:9a:f3:cf:93:33:03:2a:
67:40:78:0e:70:7e:09:cd:d8:bb:ab:14:59:86:5e:
39:8c:e0:8e:32:0d:57:89:74:16:49:10:f7:9d:6a:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:67:9B:EB:65:CE:F0:86:BF:E4:4C:35:C6:9D:98:06:5A:BD:8C
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/6fBnm-tlzvCGv-RMNcadmAZavYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.43.0/24
IPv6:
2a0c:9c0::/48
Signature Algorithm: sha256WithRSAEncryption
8b:a9:2d:80:0d:0d:61:e1:ea:8b:a2:09:13:00:29:27:5b:2b:
69:2e:c1:20:bc:e8:45:57:6a:27:50:4d:e2:32:53:5b:e7:b7:
ee:5c:ff:cf:96:53:ae:b7:5d:79:0d:c1:73:d1:34:c8:f5:79:
fc:33:ed:29:9f:21:f8:89:9e:2b:26:6d:2c:54:fd:c0:11:bc:
ff:b4:5c:0c:ff:65:02:cd:3b:b4:66:a5:90:17:19:9f:62:4a:
23:ef:04:dc:9e:62:51:3c:82:a2:07:4f:b4:87:56:fc:78:07:
01:97:5b:7e:35:6d:8c:23:ee:78:97:8f:af:24:cb:d7:b9:15:
89:f8:77:b8:1d:96:a4:80:fd:e3:6e:e8:44:a2:93:8d:8f:5e:
b7:22:0a:23:a9:e1:19:a4:8e:f2:b4:ce:5a:a6:4d:40:48:ff:
90:96:ea:14:f0:19:a1:71:39:f9:f1:1d:d4:da:a6:48:87:d7:
42:86:6c:48:63:ec:12:31:bf:79:c4:dd:1f:11:fa:85:18:68:
36:5c:06:2c:cc:f9:39:73:79:2f:bc:7e:65:56:cf:c2:52:0e:
6a:1d:ca:65:8b:22:9d:29:87:7d:5d:34:ec:c1:fa:92:aa:84:
7b:7a:4d:2e:83:68:a9:8e:07:e7:cf:55:8c:93:2b:17:1d:e8:
2d:72:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:09:07 2025 by rpki-client