Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/EMHIZTSWrp_Kp6fPFgOAfiSLbZA.roa
File: EMHIZTSWrp_Kp6fPFgOAfiSLbZA.roa (raw, json)
Hash identifier: YDLCG3Q6FEjJISI4qtFzn4UWcDILBg/78WCoW01jXnQ=
Subject key identifier: 10:C1:C8:65:34:96:AE:9F:CA:A7:A7:CF:16:03:80:7E:24:8B:6D:90
Certificate issuer: /CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Certificate serial: 0680C1EE
Authority key identifier: 74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/EMHIZTSWrp_Kp6fPFgOAfiSLbZA.roa
Signing time: Tue 24 May 2022 16:08:13 +0000
ROA not before: Tue 24 May 2022 16:08:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39859
IP address blocks: 192.162.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109101550 (0x680c1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Validity
Not Before: May 24 16:08:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10c1c8653496ae9fcaa7a7cf1603807e248b6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:ee:33:f0:0c:14:18:29:0a:a6:49:42:9d:
ca:c0:37:21:28:4a:fd:8b:6a:e6:15:0c:4b:14:89:
ae:d9:e8:3e:10:ff:f9:d0:20:30:70:23:a2:5c:b4:
4e:8d:0b:83:b6:d4:c8:44:d4:ab:4c:58:e9:9c:57:
7a:49:49:11:5f:d6:3d:39:66:69:41:3f:eb:5b:2d:
12:15:b9:86:5c:c6:b7:0e:d0:dd:9d:df:65:c4:77:
8f:7a:e2:32:4e:04:be:f1:30:1b:d9:94:0d:7e:49:
60:0a:12:ab:a9:09:00:7a:74:1f:25:27:f6:5d:ad:
43:76:b5:49:7b:9e:4c:a9:d8:1c:99:37:e5:4e:bf:
c0:71:44:fa:3a:c4:ef:4a:f6:77:9f:96:c3:db:ba:
de:2e:c1:c9:ec:1c:fe:8f:0d:40:c9:e5:cc:1c:4b:
fc:84:d7:03:c7:6d:91:56:17:6f:7f:58:7a:2f:bf:
f0:74:7e:4a:c3:66:b1:13:95:d1:56:20:f4:58:ab:
b5:68:82:35:f4:d3:4b:12:9a:5d:65:20:09:fc:f8:
49:69:a8:de:7c:d2:a2:5a:77:1c:dd:48:12:3a:7a:
b6:6b:28:e1:64:f2:e6:f7:ef:f8:8f:db:f9:e2:2f:
b0:4d:69:12:63:ec:f4:3a:91:00:e0:e3:63:ee:4d:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C1:C8:65:34:96:AE:9F:CA:A7:A7:CF:16:03:80:7E:24:8B:6D:90
X509v3 Authority Key Identifier:
keyid:74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/EMHIZTSWrp_Kp6fPFgOAfiSLbZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/dMF8P0X8We5mdfEJFOw6nmi3I48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.196.0/23
Signature Algorithm: sha256WithRSAEncryption
83:b0:0b:b4:ed:d9:17:08:27:df:ad:67:45:7d:30:91:ec:87:
be:20:00:24:62:61:6b:0e:d0:39:fa:bb:fe:56:18:84:37:96:
a2:7d:d7:85:bf:d8:3e:55:3c:b0:00:3b:ce:94:a0:30:38:13:
2c:76:0d:9c:36:8d:fb:d9:45:27:23:38:21:59:f3:e8:2d:53:
29:dc:83:8c:13:b5:48:cd:b3:6d:6e:15:1c:cb:cc:f7:15:39:
b8:0b:db:b0:a3:d8:dd:d6:cd:3f:d6:2f:d4:cd:16:00:70:8d:
84:53:88:31:b5:16:49:bd:34:99:db:a0:55:c5:2b:18:30:f3:
5b:c2:55:35:a5:ad:37:6b:0a:8c:a4:cb:f1:a0:33:58:a0:ce:
97:85:8b:a2:f1:ee:5c:8e:14:35:86:8a:6c:07:2e:82:07:bc:
eb:ec:1c:b9:2c:fc:80:f5:4e:be:ba:1e:ee:fb:4b:c2:78:f8:
0f:9e:d5:1c:f1:25:18:74:11:91:a5:5b:43:4c:c7:cb:8d:7f:
9f:54:42:23:8c:20:ee:d0:92:a6:d3:38:5b:45:dc:fd:9e:6c:
0d:f1:43:22:ad:67:ee:59:d5:55:54:11:68:1b:dc:d6:51:db:
88:3e:3b:ef:43:05:d8:04:11:93:5a:96:6a:02:fd:fa:cb:53:
21:2b:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org