Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/ZUu2knym8howfwschR0BNJFYu5U.roa
File: ZUu2knym8howfwschR0BNJFYu5U.roa (raw, json)
Hash identifier: GCCExXFssX46XOMK9Y3Y0SmzYbJz2hC3QarwgAASCo4=
Subject key identifier: 65:4B:B6:92:7C:A6:F2:1A:30:7F:0B:1C:85:1D:01:34:91:58:BB:95
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 0189D03282D661718F68616062BD4C0B3A90
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/ZUu2knym8howfwschR0BNJFYu5U.roa
Signing time: Mon 07 Aug 2023 13:31:58 +0000
ROA not before: Mon 07 Aug 2023 13:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
2a0c:9c0:1::/48 maxlen: 48
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:32:82:d6:61:71:8f:68:61:60:62:bd:4c:0b:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Aug 7 13:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=654bb6927ca6f21a307f0b1c851d01349158bb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f1:2e:83:32:b2:a5:99:cd:03:70:38:2d:45:
2b:e2:d1:4f:1e:76:15:47:fe:ff:37:81:e6:9f:70:
27:60:99:c6:14:32:18:1c:e7:e0:55:91:07:15:f8:
9f:8e:d6:98:37:84:a2:e7:c4:fe:01:27:e3:a1:d0:
c7:0d:34:2f:f6:77:da:52:eb:07:b1:7f:5d:d0:d2:
02:03:f8:3b:b6:73:3c:61:37:f1:e6:b0:95:6e:19:
6d:af:c5:74:14:5e:fe:b2:aa:2c:7a:ae:f7:bf:80:
d1:09:e6:1c:f7:99:24:45:76:7a:a4:ce:f3:9c:9f:
a3:b9:e6:89:65:1e:da:ef:d2:c2:24:f1:23:2c:e5:
71:2b:a9:17:da:85:e9:c7:30:06:85:7f:b4:72:4e:
a9:f5:b5:85:65:c6:5f:b2:69:0f:f7:0c:29:8d:dd:
04:64:ad:6d:b8:a9:85:62:d9:c6:57:30:3e:a8:94:
d6:a2:a9:8a:31:3b:3b:7d:ae:38:a8:c8:00:04:a5:
39:2f:bc:b8:df:59:a2:f2:23:70:4e:52:46:bc:50:
06:54:d9:bd:67:a5:8f:d5:ac:94:6e:85:0e:97:2c:
13:09:d8:ed:a0:91:2a:ce:c9:63:93:14:fb:47:14:
35:98:86:58:01:a4:e4:af:3e:73:fe:1b:09:f3:b2:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4B:B6:92:7C:A6:F2:1A:30:7F:0B:1C:85:1D:01:34:91:58:BB:95
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/ZUu2knym8howfwschR0BNJFYu5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.42.0/23
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
6d:e3:11:22:71:a6:20:80:86:af:47:1f:20:9b:83:94:c0:c8:
1c:59:b0:77:2e:36:87:95:a7:0d:61:b4:8a:15:d8:d2:fa:f1:
b8:23:57:94:fa:1d:a2:9f:c1:cf:56:f3:f0:f8:e6:ad:57:41:
84:2e:16:bc:47:12:d6:1b:0a:39:72:13:fc:63:bd:4e:89:1d:
1f:91:dc:58:8c:cc:9a:a2:82:6d:e6:6e:1e:84:01:ce:fb:13:
fe:bd:49:ad:ff:90:7d:19:64:75:2e:bc:3c:16:07:26:4a:11:
e8:20:d3:80:3f:d2:0c:0d:04:86:65:20:79:90:32:2a:ef:bb:
b7:5f:ee:03:b6:4d:08:c9:2b:29:f6:f0:9d:d4:16:5e:55:7b:
72:ff:fc:ab:57:a0:ec:c6:3a:4f:05:49:7d:a1:48:90:64:cb:
e8:c8:db:d9:05:45:d2:a2:ef:b8:00:31:f9:40:b5:42:5a:73:
68:17:53:01:fb:26:61:57:14:27:46:7d:b4:0f:3d:47:2b:1f:
64:58:91:01:89:0b:74:b4:79:12:01:f6:26:90:b1:08:87:ef:
60:35:ef:01:13:0e:b6:6e:a2:ce:8f:9d:32:8a:8b:0b:0c:19:
56:96:70:cd:13:a8:49:21:1d:a7:e4:f6:95:bd:08:27:ae:59:
82:a6:8a:f6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnQMoLWYXGPaGFgYr1MCzqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTBiMjFjODlhMzAyYmU5ZGMwMzg3MGMwOThmMjMyODAz
MDRiMGYwHhcNMjMwODA3MTMzMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTRiYjY5MjdjYTZmMjFhMzA3ZjBiMWM4NTFkMDEzNDkxNThiYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfEugzKypZnNA3A4LUUr4tFPHnYV
R/7/N4Hmn3AnYJnGFDIYHOfgVZEHFfifjtaYN4Si58T+ASfjodDHDTQv9nfaUusH
sX9d0NICA/g7tnM8YTfx5rCVbhltr8V0FF7+sqoseq73v4DRCeYc95kkRXZ6pM7z
nJ+jueaJZR7a79LCJPEjLOVxK6kX2oXpxzAGhX+0ck6p9bWFZcZfsmkP9wwpjd0E
ZK1tuKmFYtnGVzA+qJTWoqmKMTs7fa44qMgABKU5L7y431mi8iNwTlJGvFAGVNm9
Z6WP1ayUboUOlywTCdjtoJEqzsljkxT7RxQ1mIZYAaTkrz5z/hsJ87JnzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGVLtpJ8pvIaMH8LHIUdATSRWLuVMB8GA1UdIwQY
MBaAFE7gshyJowK+ncA4cMCY8jKAMEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUt
NTA5NjExYjU5YzRhLzEvWlV1MmtueW04aG93ZndzY2hSMEJOSkZZdTVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUtNTA5NjExYjU5YzRh
LzEvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBvEgqMA8E
AgACMAkDBwEqDAnAAAAwDQYJKoZIhvcNAQELBQADggEBAG3jESJxpiCAhq9HHyCb
g5TAyBxZsHcuNoeVpw1htIoV2NL68bgjV5T6HaKfwc9W8/D45q1XQYQuFrxHEtYb
CjlyE/xjvU6JHR+R3FiMzJqigm3mbh6EAc77E/69Sa3/kH0ZZHUuvDwWByZKEegg
04A/0gwNBIZlIHmQMirvu7df7gO2TQjJKyn28J3UFl5Ve3L//KtXoOzGOk8FSX2h
SJBky+jI29kFRdKi77gAMflAtUJac2gXUwH7JmFXFCdGfbQPPUcrH2RYkQGJC3S0
eRIB9iaQsQiH72A17wETDrZuos6PnTKKiwsMGVaWcM0TqEkhHafk9pW9CCeuWYKm
ivY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:57 2025 by rpki-client