Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/emsUNBXjpgIl50TtMV0K33ax_BA.roa
File: emsUNBXjpgIl50TtMV0K33ax_BA.roa (raw, json)
Hash identifier: PoDbvOjcJ429G9nzMLsfGOopKfro0sOHDCSRIcnE5d8=
Subject key identifier: 7A:6B:14:34:15:E3:A6:02:25:E7:44:ED:31:5D:0A:DF:76:B1:FC:10
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC49336543B5D415119C1CE371A68AAE8
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/emsUNBXjpgIl50TtMV0K33ax_BA.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22333
IP address blocks: 185.162.73.0/24 maxlen: 24
185.162.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:36:54:3b:5d:41:51:19:c1:ce:37:1a:68:aa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a6b143415e3a60225e744ed315d0adf76b1fc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:ad:74:6c:e3:b1:56:a4:c4:a3:2e:66:c5:
6f:51:bc:c7:ec:27:f4:b6:9e:0f:6e:a0:c3:f6:f0:
89:ce:42:b7:ee:2b:18:4a:ad:90:d6:2a:1c:4b:ea:
f5:94:b3:99:c9:cc:64:4e:56:c7:3e:8c:b9:b1:95:
e1:d9:f9:6a:13:f5:66:bf:c2:7b:e6:d5:51:4a:e4:
5e:76:b0:0c:37:8b:15:b8:4f:95:89:bc:db:45:3c:
ac:db:b2:77:31:97:38:94:53:a2:20:dc:04:ef:b5:
c9:c6:5f:e9:53:5d:48:30:97:2f:cb:24:62:91:6b:
ae:8c:6d:b7:20:ac:2f:92:f7:0a:f8:b1:62:8b:1e:
92:c5:36:05:d0:05:c3:fb:85:e0:bf:86:42:0d:4a:
03:67:1a:bc:72:ac:7c:29:fd:32:d7:a2:ac:8f:c6:
40:f4:55:b7:e5:ae:52:5d:7a:26:23:69:e1:b8:54:
40:7e:7d:7b:c9:2b:74:9c:09:60:e4:f7:4f:dd:56:
e5:28:0a:70:70:64:f4:7c:94:6d:89:4c:cc:92:c4:
ce:c8:91:70:50:c8:8e:63:be:36:9a:70:d1:4f:48:
05:ec:d2:75:ee:5e:7e:be:6d:67:cd:fd:b6:c9:b5:
a2:22:38:24:5f:41:13:24:17:e2:1d:41:9e:10:d0:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:14:34:15:E3:A6:02:25:E7:44:ED:31:5D:0A:DF:76:B1:FC:10
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/emsUNBXjpgIl50TtMV0K33ax_BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.72.0/23
Signature Algorithm: sha256WithRSAEncryption
79:49:ce:b2:47:9d:9a:7f:e3:72:70:59:f9:47:53:91:43:a8:
0d:e2:30:24:51:06:c4:32:ba:89:ba:4a:11:34:ba:43:51:29:
e9:33:50:ca:2f:b9:24:a0:23:69:c8:0a:e5:17:96:c9:55:e6:
2f:9d:8b:7b:8d:31:72:3a:40:28:a1:42:99:4f:cf:c7:38:0b:
8e:fd:6d:e2:58:a1:71:f0:1f:71:34:44:a3:6f:fa:82:f3:9b:
b4:55:81:99:c2:a0:36:07:f5:58:c6:7f:c5:7f:be:90:30:fb:
c8:2f:cf:e5:b5:d7:19:6d:08:63:4c:ee:eb:0c:75:44:9c:34:
80:2d:ce:2a:d6:bd:5f:4f:1a:f2:fd:48:93:6a:56:26:fa:76:
60:c0:23:98:38:a3:b9:85:93:25:62:eb:f8:0b:34:ab:e9:0f:
34:36:b9:d0:52:b9:89:70:fa:e0:8f:da:d9:27:6e:55:a7:57:
99:6e:b9:dc:71:70:27:b3:45:c0:22:4a:96:3a:ba:d9:67:b0:
82:62:11:d6:8e:a6:c2:65:7f:9f:3c:48:58:bc:a5:14:db:d9:
1e:23:c9:d0:63:e3:1a:d2:9c:2c:8a:de:a1:7a:35:b9:92:f5:
6e:4a:1c:83:17:50:8c:25:65:b5:ac:7a:eb:0b:e6:3b:63:2f:
1d:90:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:34 2025 by rpki-client