Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/nO-JlctOUYJvBS4jFNotPZsCZUY.roa
File: nO-JlctOUYJvBS4jFNotPZsCZUY.roa (raw, json)
Hash identifier: bWKPF2rTwekxW5ADC6V0v8I4K5/lCSOWvT9OU/1H2Jc=
Subject key identifier: 9C:EF:89:95:CB:4E:51:82:6F:05:2E:23:14:DA:2D:3D:9B:02:65:46
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 0189D00C10B880F46FBA94A8D3AD23D30D77
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/nO-JlctOUYJvBS4jFNotPZsCZUY.roa
Signing time: Mon 07 Aug 2023 12:49:58 +0000
ROA not before: Mon 07 Aug 2023 12:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.43.0/24 maxlen: 24
2a0c:9c0:1::/48 maxlen: 48
2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:0c:10:b8:80:f4:6f:ba:94:a8:d3:ad:23:d3:0d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Aug 7 12:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cef8995cb4e51826f052e2314da2d3d9b026546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:f4:46:74:88:96:3a:09:21:16:07:a4:05:
a0:64:10:6a:29:40:48:3c:b5:6f:f4:af:b5:73:ff:
25:9b:ac:24:68:ca:5d:d9:aa:d7:7b:81:67:6c:70:
dc:dd:97:45:f4:b0:f0:2e:9c:65:f3:7b:5f:99:38:
24:c0:01:51:f7:1c:15:9d:50:d5:96:be:6c:2f:3e:
04:12:48:4b:c0:c8:5d:1b:aa:42:e7:2a:f1:5c:d5:
a0:a6:18:82:4f:51:4b:a5:9e:d7:12:ad:21:83:54:
29:b1:a7:1d:c1:ce:62:b9:35:b4:1b:2f:04:1b:90:
20:13:97:f4:72:ed:21:18:b3:15:a6:cc:b6:c6:0c:
68:c1:2d:e2:96:44:de:1e:9d:e4:76:42:58:d8:42:
f4:0a:c4:65:d6:33:1a:b0:c8:02:af:59:bf:6a:16:
84:1d:2c:b7:32:9f:ec:d8:97:3d:9b:ea:17:8f:09:
23:f0:17:9d:7e:08:a0:a9:8e:b2:54:76:5d:11:20:
3d:8b:5c:43:11:5a:91:eb:a2:95:ef:6e:ed:e5:de:
d1:45:f0:f0:b4:c0:78:b6:55:f6:cc:f9:51:29:cf:
b2:97:7f:da:b4:6b:9e:1c:ff:34:e6:c0:93:e0:a3:
93:d1:73:24:6d:f6:7a:46:04:b9:4a:c6:01:f4:59:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EF:89:95:CB:4E:51:82:6F:05:2E:23:14:DA:2D:3D:9B:02:65:46
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/nO-JlctOUYJvBS4jFNotPZsCZUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.43.0/24
IPv6:
2a0c:9c0::/47
Signature Algorithm: sha256WithRSAEncryption
95:bb:5c:83:09:c3:16:11:ec:ea:c0:7f:3e:4c:0f:9d:cd:e1:
0f:02:1c:fd:4d:24:7c:21:03:9d:33:33:ae:1f:3f:0e:7b:4e:
42:6f:25:4f:ef:89:1c:8b:2c:11:ff:4b:6e:0b:d0:b4:82:95:
7f:b4:0d:9c:8c:e7:ee:e6:70:3d:1f:5a:81:f2:b7:c1:67:b3:
c3:21:45:49:f6:28:c1:34:bc:d8:64:d2:30:de:1f:16:7b:f8:
ad:f2:fd:0e:e1:b3:ff:73:fb:41:ba:90:b6:33:57:b4:04:e5:
2b:3c:cd:64:3e:df:80:d7:9d:f5:d0:26:f8:b2:22:c1:5e:bb:
80:04:e8:75:9b:81:ce:d2:88:32:08:4e:94:21:0b:2c:d1:4c:
d1:cc:79:38:ea:00:c2:a1:3b:3a:34:b4:9f:3e:df:24:bd:e1:
72:ce:34:d0:ce:7a:94:d5:77:0f:dc:d2:54:91:ff:a3:2e:ed:
cd:71:fa:91:de:ba:7e:fd:a8:58:6d:5d:c8:ef:07:a8:56:5f:
fc:f4:db:37:46:95:77:c1:33:ac:86:76:a8:51:70:e7:52:4f:
d0:23:14:eb:f8:b0:b5:25:10:29:2e:e1:54:b1:e3:c5:10:75:
37:fd:75:65:5f:db:1a:0d:78:81:bd:2e:56:a1:bd:a2:f6:b7:
6f:d3:05:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnQDBC4gPRvupSo060j0w13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTBiMjFjODlhMzAyYmU5ZGMwMzg3MGMwOThmMjMyODAz
MDRiMGYwHhcNMjMwODA3MTI0OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2VmODk5NWNiNGU1MTgyNmYwNTJlMjMxNGRhMmQzZDliMDI2NTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0r0RnSIljoJIRYHpAWgZBBqKUBI
PLVv9K+1c/8lm6wkaMpd2arXe4FnbHDc3ZdF9LDwLpxl83tfmTgkwAFR9xwVnVDV
lr5sLz4EEkhLwMhdG6pC5yrxXNWgphiCT1FLpZ7XEq0hg1Qpsacdwc5iuTW0Gy8E
G5AgE5f0cu0hGLMVpsy2xgxowS3ilkTeHp3kdkJY2EL0CsRl1jMasMgCr1m/ahaE
HSy3Mp/s2Jc9m+oXjwkj8BedfgigqY6yVHZdESA9i1xDEVqR66KV727t5d7RRfDw
tMB4tlX2zPlRKc+yl3/atGueHP805sCT4KOT0XMkbfZ6RgS5SsYB9FnGuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJzviZXLTlGCbwUuIxTaLT2bAmVGMB8GA1UdIwQY
MBaAFE7gshyJowK+ncA4cMCY8jKAMEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUt
NTA5NjExYjU5YzRhLzEvbk8tSmxjdE9VWUp2QlM0akZOb3RQWnNDWlVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUtNTA5NjExYjU5YzRh
LzEvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvEgrMA8E
AgACMAkDBwEqDAnAAAAwDQYJKoZIhvcNAQELBQADggEBAJW7XIMJwxYR7OrAfz5M
D53N4Q8CHP1NJHwhA50zM64fPw57TkJvJU/viRyLLBH/S24L0LSClX+0DZyM5+7m
cD0fWoHyt8Fns8MhRUn2KME0vNhk0jDeHxZ7+K3y/Q7hs/9z+0G6kLYzV7QE5Ss8
zWQ+34DXnfXQJviyIsFeu4AE6HWbgc7SiDIITpQhCyzRTNHMeTjqAMKhOzo0tJ8+
3yS94XLONNDOepTVdw/c0lSR/6Mu7c1x+pHeun79qFhtXcjvB6hWX/z02zdGlXfB
M6yGdqhRcOdST9AjFOv4sLUlECku4VSx48UQdTf9dWVf2xoNeIG9LlahvaL2t2/T
BQo=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:26 2025 by rpki-client