Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/A30Nyr3JUSxTdpxJjjdJ1RG2okc.roa
File: A30Nyr3JUSxTdpxJjjdJ1RG2okc.roa (raw, json)
Hash identifier: DRM3RYQYVN/DyYL3Zl5UPoKanevZ6ssWkCZevDf1Ch0=
Subject key identifier: 03:7D:0D:CA:BD:C9:51:2C:53:76:9C:49:8E:37:49:D5:11:B6:A2:47
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 0183E63366C292BA9E6B27C3612C9A50C226
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/A30Nyr3JUSxTdpxJjjdJ1RG2okc.roa
Signing time: Mon 17 Oct 2022 13:47:51 +0000
ROA not before: Mon 17 Oct 2022 13:47:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
2a0c:9c0:1::/48 maxlen: 48
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:33:66:c2:92:ba:9e:6b:27:c3:61:2c:9a:50:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Oct 17 13:47:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=037d0dcabdc9512c53769c498e3749d511b6a247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:52:d8:8b:08:4f:7b:78:cf:26:91:54:a3:
97:c7:69:29:65:bc:9e:b8:3c:2d:d3:99:8a:a3:40:
c1:6c:a2:76:1d:61:67:c2:d4:ca:04:cf:1b:10:59:
cd:c2:85:95:53:14:43:3b:74:fa:84:a1:2b:65:cf:
b9:90:29:6a:d7:f6:63:d6:b1:db:e2:81:68:70:7a:
e1:2d:75:cc:75:13:cd:ac:27:ac:4e:aa:b9:39:50:
bc:51:91:3b:60:08:7e:9d:84:4a:84:31:21:63:f5:
4c:69:f9:28:8b:7c:9f:2e:03:36:1d:10:40:ec:73:
57:b6:19:ef:19:c9:10:37:83:6d:28:93:8c:23:1f:
ee:08:1e:2c:88:16:ce:a8:f3:19:aa:af:ed:50:bb:
9e:98:13:e0:0f:52:f6:fc:8a:ce:a3:49:7e:3c:5e:
f5:73:04:35:d3:74:0b:80:7b:f0:02:59:e7:08:a3:
44:a7:62:bc:57:f3:aa:f2:f4:7b:89:0b:e1:a3:51:
fc:68:95:d1:d5:9a:a5:a0:a4:5b:a1:c8:0d:70:44:
de:bc:b8:48:e9:18:c0:0c:4c:da:46:09:e5:83:78:
4c:ab:56:3f:ba:dd:4f:07:32:3e:bc:e0:69:88:50:
0a:b5:57:0a:50:2b:64:77:16:69:6c:57:18:fd:ab:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:0D:CA:BD:C9:51:2C:53:76:9C:49:8E:37:49:D5:11:B6:A2:47
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/A30Nyr3JUSxTdpxJjjdJ1RG2okc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.42.0/23
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
a2:51:fd:bf:70:8a:0f:28:04:02:61:3c:db:0f:32:e9:06:a4:
0f:6b:ea:5c:c7:9c:f8:55:33:4d:44:ad:28:45:e7:d0:88:eb:
36:9f:fc:ef:1d:58:ae:ee:f7:ee:b7:13:31:ba:b3:69:f2:1c:
54:a8:c1:7f:a1:57:22:f0:f9:62:22:09:1d:a2:36:98:ae:bf:
48:94:7f:22:ea:d8:d4:04:d5:02:45:87:ac:dc:a7:60:96:80:
6a:b2:42:04:77:fd:f6:31:10:19:c8:de:94:47:9d:fc:34:cc:
69:6f:af:b2:fb:29:d8:62:d1:ea:ec:f4:5a:3e:c2:ce:88:55:
ec:6c:0c:79:7c:24:c8:30:60:62:8f:f8:99:b9:8b:6e:47:46:
8e:af:2e:4e:0e:9b:52:cb:e8:d1:08:b3:1b:3e:48:b6:fc:25:
4a:c1:2c:1c:5e:36:69:9c:f2:5c:13:94:d0:52:8c:47:58:37:
03:6f:9b:21:8c:46:ce:62:a4:47:47:04:bc:cb:36:58:85:d5:
b9:67:b5:b3:22:7b:2e:a5:09:01:d3:fc:95:88:d6:bb:66:a0:
df:8b:d9:75:16:80:65:7a:fb:b1:2b:19:b4:49:5d:d2:7f:64:
92:aa:30:29:bc:e8:d8:c4:bb:5e:30:36:05:d5:b9:99:66:2f:
ab:c7:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:32 2025 by rpki-client