Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa
File: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (raw, json)
Hash identifier: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=
Subject key identifier: 10:C1:D9:2B:91:66:1A:CD:DE:E1:FB:79:CC:E1:2A:CA:B3:C0:5F:79
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 01942748441262C4CF9606DE976C4B507788
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 194.145.240.0/24 maxlen: 24
194.145.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:44:12:62:c4:cf:96:06:de:97:6c:4b:50:77:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10c1d92b91661acddee1fb79cce12acab3c05f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:c1:a0:fb:15:e1:7e:a7:82:77:e5:2b:39:
1d:2b:83:68:1b:9e:9e:31:a4:66:1d:b9:90:25:ce:
8e:a3:89:b0:19:04:b0:22:f2:6f:09:97:6a:df:34:
5c:70:94:f7:f4:61:70:7e:a6:7d:59:b2:ec:26:4b:
57:a0:da:af:d7:5b:0b:db:f9:2c:50:7c:2c:b9:ff:
7a:83:8e:66:52:2e:84:9b:be:d8:32:10:68:9a:3c:
78:1c:e6:4f:54:b4:00:17:92:86:87:b4:e2:df:59:
97:de:85:2d:21:76:26:24:3d:87:07:48:f7:bb:db:
68:35:be:5b:6c:7f:7a:8e:f4:31:00:04:2e:28:d0:
18:07:ca:3e:b1:86:e2:78:66:5a:a2:2f:bf:3b:7c:
d2:b8:6f:7e:bd:32:2b:68:af:c7:4c:7d:e1:cc:86:
10:18:62:48:2f:bf:d7:68:7e:43:29:d0:ce:56:cb:
ab:a0:4a:5d:60:63:ed:57:71:a0:b1:b6:2e:90:6a:
18:5d:5f:11:ca:70:4d:6c:7e:48:36:59:da:17:04:
12:67:75:db:3f:90:a9:83:ef:ac:e2:60:2f:eb:4c:
0f:68:bb:cb:86:24:34:58:3e:96:c5:01:65:92:f0:
4e:6c:d0:04:15:ed:1d:f1:5d:45:99:b7:c6:cb:9a:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C1:D9:2B:91:66:1A:CD:DE:E1:FB:79:CC:E1:2A:CA:B3:C0:5F:79
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.240.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:d5:b5:66:c2:23:25:c8:57:99:b9:a7:85:dd:4c:ea:80:ef:
be:47:b6:0e:1c:6b:f3:ad:66:57:b9:c8:d6:a4:58:9f:18:91:
0f:83:78:ee:cc:f1:a3:01:02:57:83:9f:cf:e3:c8:98:e6:ec:
36:df:ce:ba:2f:d5:57:48:c3:33:06:dc:0f:04:02:b5:e1:55:
2d:70:2d:0d:c6:b2:8a:7c:1c:47:17:63:48:d8:10:fe:9c:c8:
c1:60:0d:6a:71:bf:70:d6:ab:cb:67:b2:53:15:a8:54:26:7a:
fd:0e:fd:bb:31:8f:30:81:92:5c:aa:a1:99:19:c9:ae:f2:dd:
92:12:22:39:2d:07:6f:5c:24:90:36:42:33:0f:0b:0d:25:19:
b3:6c:b2:dc:4f:1f:f6:df:6c:e2:52:f1:a3:42:3e:9d:c2:e1:
46:2b:23:73:a4:8d:ef:24:fa:40:ac:8b:15:0b:76:e7:db:7b:
a5:da:4f:00:ff:87:6c:4d:00:b1:0b:95:9b:cc:54:64:90:d3:
ca:43:1e:47:00:ac:28:c7:b4:c1:b6:dc:91:a2:85:0f:72:f0:
90:63:29:00:3d:22:0f:de:2d:87:9d:2f:e2:b6:f6:f6:92:3a:
9c:41:e0:8f:2d:e5:bc:18:3d:b6:c3:97:6e:a1:2d:95:05:9d:
75:4e:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:37 2025 by rpki-client