Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/ILF3YObWIKUOmkUPd2tRE4KTt90.roa
File: ILF3YObWIKUOmkUPd2tRE4KTt90.roa (raw, json)
Hash identifier: 3iYiWGDwoBtpjvu1iYu1dAEvhIZLz1GIFYJRGkBy6j0=
Subject key identifier: 20:B1:77:60:E6:D6:20:A5:0E:9A:45:0F:77:6B:51:13:82:93:B7:DD
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 0189D9E397B032E4EAEAF9DC8B72D05A835E
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/ILF3YObWIKUOmkUPd2tRE4KTt90.roa
Signing time: Wed 09 Aug 2023 10:41:58 +0000
ROA not before: Wed 09 Aug 2023 10:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
2a0c:9c0:1::/48 maxlen: 48
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:e3:97:b0:32:e4:ea:ea:f9:dc:8b:72:d0:5a:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Aug 9 10:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20b17760e6d620a50e9a450f776b51138293b7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:91:bb:fc:51:27:47:63:17:ec:bd:06:e4:
00:b7:f1:1f:3c:e2:d0:8c:6a:e8:75:ef:58:3d:a1:
d0:4e:a8:28:8e:dd:e6:bd:3d:fb:2f:dd:84:46:01:
eb:e3:b1:c7:c0:45:bf:bc:ae:9c:d2:a2:01:db:ae:
aa:78:08:3f:57:c2:2a:da:d4:21:78:04:b9:65:23:
28:f5:30:e5:75:13:3f:47:dc:c1:5f:3e:9a:90:e4:
be:a1:77:eb:5c:a7:61:75:6c:dd:87:7b:7f:da:e9:
41:34:d4:d3:54:94:b5:97:df:67:da:a6:0a:b6:7f:
19:6a:67:cf:21:51:e0:6c:5c:41:e8:35:c6:f3:0e:
1c:12:93:05:b0:8b:71:08:17:96:89:b5:8f:81:c1:
f3:bf:f7:01:ad:a3:9b:5b:4c:50:7f:cc:d1:24:dc:
87:2d:47:dc:a0:1a:af:87:92:93:80:0e:94:ca:65:
3b:98:63:ba:9d:0e:8d:68:48:f5:4a:aa:b3:1f:f0:
54:5a:5b:4f:87:80:ce:0b:7d:ca:34:dc:4f:e2:88:
16:a8:5b:4d:c3:0a:59:2b:32:87:f6:fb:f2:e3:35:
53:e1:f6:a9:a3:d2:13:c5:91:4f:b3:05:8c:f0:e9:
a2:c0:0d:db:e7:53:2b:f8:2f:fa:2a:0a:a1:25:74:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:77:60:E6:D6:20:A5:0E:9A:45:0F:77:6B:51:13:82:93:B7:DD
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/ILF3YObWIKUOmkUPd2tRE4KTt90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.42.0/23
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
46:3a:58:37:92:82:5e:b2:56:5e:c3:21:aa:70:7d:e2:09:94:
e5:84:b9:f7:fc:6e:30:72:c2:8a:bb:ab:4e:bf:80:41:20:be:
fc:72:e6:55:f1:38:73:90:e4:97:05:5f:89:b7:d8:67:eb:f5:
5a:75:ff:8b:46:ab:87:0f:ca:69:15:46:09:2c:37:f1:a6:df:
b8:b3:67:5c:53:6b:5d:e2:57:b2:f7:d4:05:ef:88:9f:e7:ec:
de:53:d3:1d:f1:36:40:fd:55:a2:6f:93:e0:19:94:4e:fc:15:
a6:d9:df:35:07:db:20:24:b3:2f:6f:86:26:f0:71:e7:0f:1b:
64:41:d8:52:89:99:5c:a1:bc:ed:ab:1b:a8:7e:28:04:b1:4c:
3b:63:52:66:23:a9:57:a5:70:e3:84:db:9c:5f:2a:9b:fc:8e:
4c:7e:ff:ea:2c:8d:61:35:e2:b6:97:17:f7:52:d1:6a:11:34:
bb:0f:21:5e:71:0a:3a:41:f9:37:d0:db:c1:72:ac:e8:e8:83:
e5:b0:f2:f6:68:fd:04:82:13:2b:84:ac:82:26:a6:4b:ea:ef:
5f:92:4e:f3:8c:2a:d1:df:4a:34:71:ba:fc:ec:6d:20:b4:67:
4d:ff:f1:69:a2:43:ed:b2:4c:e5:c0:c0:f4:ea:5c:ac:c9:1c:
66:ff:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:43:02 2025 by rpki-client