Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/V58InajY2T6sgzmsRx3WXVa41dg.roa
File: V58InajY2T6sgzmsRx3WXVa41dg.roa (raw, json)
Hash identifier: xfBDSRb3JRuLGamOtIgZtmhVRwhmcT/QJln68vbmiHc=
Subject key identifier: 57:9F:08:9D:A8:D8:D9:3E:AC:83:39:AC:47:1D:D6:5D:56:B8:D5:D8
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 0189D00ECF3C69322432D2CB5EB7BA2A38A6
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/V58InajY2T6sgzmsRx3WXVa41dg.roa
Signing time: Mon 07 Aug 2023 12:52:58 +0000
ROA not before: Mon 07 Aug 2023 12:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
2a0c:9c0:1::/48 maxlen: 48
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:0e:cf:3c:69:32:24:32:d2:cb:5e:b7:ba:2a:38:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Aug 7 12:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=579f089da8d8d93eac8339ac471dd65d56b8d5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:91:ee:cc:9f:69:35:a6:b9:19:b4:7d:a5:
5f:ce:a7:fb:4a:ea:e7:45:f0:df:05:3d:79:97:50:
42:93:29:a7:60:2e:4f:12:b6:34:6e:07:25:3b:0c:
5d:d4:86:4b:59:a7:9f:d2:97:d0:bb:1a:a1:0d:10:
1d:25:45:d0:df:a8:0c:73:3b:7c:0c:91:90:77:64:
f1:16:8b:fd:82:57:dc:e5:b5:4a:7e:8f:35:80:cf:
c5:5a:69:d8:c3:76:9b:da:25:78:f2:e0:53:18:17:
55:39:70:00:52:d7:47:f5:08:5f:bf:29:82:7e:9e:
1b:de:0e:43:3e:7c:c6:6d:80:8e:fb:18:c1:5a:c4:
6c:4b:f7:50:d7:5e:43:88:c4:ed:c0:60:df:65:e8:
60:0b:da:59:5e:be:cb:d5:5e:78:4d:6a:69:59:5a:
ce:33:c5:6b:25:46:30:dc:40:91:7e:68:9c:4b:d6:
2c:6b:66:f5:4f:84:0e:d1:07:89:90:da:9b:b6:96:
fa:31:8b:e6:e9:a8:46:c4:fa:9b:44:b1:27:a4:23:
58:13:b4:21:78:d0:3e:4e:38:fd:1e:dc:56:e1:62:
d7:81:9e:09:5e:34:66:f3:92:95:78:ca:be:67:39:
cb:ef:29:72:66:06:a0:c9:ee:bd:01:1f:72:a1:c4:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:08:9D:A8:D8:D9:3E:AC:83:39:AC:47:1D:D6:5D:56:B8:D5:D8
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/V58InajY2T6sgzmsRx3WXVa41dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.42.0/23
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
02:0e:d9:ca:18:f3:77:40:e0:73:0f:00:e5:f8:88:5b:6f:2c:
f3:13:61:93:07:4a:3e:d3:c2:b9:33:d1:be:2f:b0:45:8b:bb:
93:ac:15:65:f6:58:bf:cb:41:99:b1:5a:a2:9d:18:03:82:3e:
5b:c3:aa:33:9e:63:7c:f9:e8:3c:fb:d2:d0:a1:e5:0f:dc:c7:
24:02:01:c9:ab:cc:2c:d3:19:9b:34:14:20:47:b1:cd:e8:99:
49:1d:fe:b2:f3:e0:05:b5:bf:26:1b:b4:9f:41:35:28:5a:ff:
bf:95:7f:cd:ef:1e:e1:c4:59:ca:19:b2:40:b5:16:4c:34:71:
84:fb:ae:05:ed:6f:de:2d:62:19:f6:b6:5b:75:6b:a4:2c:74:
36:f4:f7:f0:86:ab:87:0b:84:af:e8:5c:99:35:5d:7e:93:13:
3b:6a:95:e5:49:d0:9e:96:97:01:2e:f0:7c:c2:a0:41:8b:c5:
55:85:3e:dd:f7:a8:1a:63:87:cd:0d:8a:df:42:fc:a3:16:ca:
96:65:3f:9d:c2:7a:d4:4d:0f:4e:d4:9f:bb:de:a4:a1:8f:6c:
eb:f9:65:6d:3d:07:b8:c0:55:85:d4:b9:10:7f:a2:6e:ea:9b:
55:9c:a2:8d:54:87:5a:4a:84:7b:db:a0:6c:15:ab:94:aa:b2:
9d:12:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:01 2025 by rpki-client