Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/725de8-b6a9-47be-a696-7b0e96674094/1/eMu-Q3fDXLzCFg4ISkfZR4ym8bE.roa
File: eMu-Q3fDXLzCFg4ISkfZR4ym8bE.roa (raw, json)
Hash identifier: JmbLfLVXw1W2UNfmIShpF4Ak/dl84M8qSc73o82/zDk=
Subject key identifier: 78:CB:BE:43:77:C3:5C:BC:C2:16:0E:08:4A:47:D9:47:8C:A6:F1:B1
Certificate issuer: /CN=baa9b89644fb5e6c39f3789abb526346e6db1250
Certificate serial: 023CF65B
Authority key identifier: BA:A9:B8:96:44:FB:5E:6C:39:F3:78:9A:BB:52:63:46:E6:DB:12:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqm4lkT7Xmw583iau1JjRubbElA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/725de8-b6a9-47be-a696-7b0e96674094/1/eMu-Q3fDXLzCFg4ISkfZR4ym8bE.roa
Signing time: Sat 01 Jan 2022 14:00:53 +0000
ROA not before: Sat 01 Jan 2022 14:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47959
IP address blocks: 91.223.236.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
91.226.76.0/24 maxlen: 24
91.226.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37549659 (0x23cf65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa9b89644fb5e6c39f3789abb526346e6db1250
Validity
Not Before: Jan 1 14:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78cbbe4377c35cbcc2160e084a47d9478ca6f1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:8d:5e:ec:7e:d8:5e:b1:b0:3d:60:4f:5f:
4c:42:80:a5:a2:fa:d0:43:8b:71:b7:40:a8:61:29:
74:d9:47:a3:99:b0:b1:a9:f9:f0:2a:56:81:7d:c1:
2f:6f:ee:0c:1d:36:ab:0f:45:72:68:f0:77:d5:b7:
21:50:60:ba:8b:8d:6a:aa:4a:49:7c:7a:2c:4d:1c:
1d:32:b7:4e:97:cd:b8:bd:f4:f8:32:dc:d4:3b:96:
37:b6:f4:e2:45:52:1f:cd:5c:b6:31:a1:4c:e2:23:
fb:52:57:33:00:f1:b9:64:bd:d0:52:68:39:33:c3:
c1:dd:04:4a:f3:e8:f4:8b:4d:8d:ac:d0:fd:09:11:
30:e4:74:08:90:ca:df:dc:bb:23:c6:38:c7:2d:4a:
76:0e:75:dd:e6:50:8e:29:2d:66:bc:fd:ef:ad:f9:
1a:de:02:1f:f4:4a:2b:18:76:cf:58:50:42:e8:38:
3f:95:da:16:1e:fe:d0:40:de:da:13:9f:87:6c:1d:
b1:45:dc:ea:79:08:a8:eb:4b:f8:00:92:88:c1:f5:
af:a1:bd:3d:81:39:14:bf:71:8d:66:4b:32:c9:dd:
97:5a:a0:25:20:b4:a8:f8:9e:96:33:25:e4:97:4f:
2d:fc:1f:d2:47:a5:76:19:86:fd:b2:b4:b0:34:c4:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CB:BE:43:77:C3:5C:BC:C2:16:0E:08:4A:47:D9:47:8C:A6:F1:B1
X509v3 Authority Key Identifier:
keyid:BA:A9:B8:96:44:FB:5E:6C:39:F3:78:9A:BB:52:63:46:E6:DB:12:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqm4lkT7Xmw583iau1JjRubbElA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/725de8-b6a9-47be-a696-7b0e96674094/1/eMu-Q3fDXLzCFg4ISkfZR4ym8bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/725de8-b6a9-47be-a696-7b0e96674094/1/uqm4lkT7Xmw583iau1JjRubbElA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.169.0/24
91.223.236.0/24
91.226.72.0/24
91.226.76.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8f:ea:87:97:c5:88:a4:ac:c2:09:62:e7:92:85:04:55:b2:
c5:b3:db:c6:0e:70:4e:9e:d4:8d:98:ab:b7:7a:0b:f7:77:f6:
18:6d:2e:66:99:0e:3b:c3:c6:84:48:05:ba:90:99:d7:25:8c:
90:60:49:62:96:8e:ca:62:4f:f1:13:86:52:d5:44:d0:24:e3:
c0:b8:42:37:44:2d:7b:82:f2:77:6a:2a:6e:b6:49:29:c7:82:
37:29:9a:f7:ca:6b:48:4f:11:fc:9f:af:98:c7:30:6e:a4:71:
47:31:fb:30:8e:32:ed:3d:a7:e7:a1:df:fb:ba:f3:ac:7f:9b:
2d:e9:58:ac:c3:4d:0b:de:bf:ba:6b:6a:78:58:40:3b:9f:de:
9f:74:b8:65:3a:86:a7:ac:21:cf:59:05:66:b1:f5:3e:b8:85:
58:b1:34:25:0a:58:29:8a:7f:1e:52:3f:20:8a:ac:ef:34:4d:
99:f0:87:09:51:10:f8:04:99:b8:92:77:8c:53:d0:ee:cc:f0:
cf:81:29:ea:9a:85:9b:2b:29:d5:32:c5:7a:b5:5a:61:9e:32:
67:60:81:4a:64:a6:9d:e3:e7:bf:a7:a0:59:ff:2b:ac:6e:4a:
ec:c9:6a:b0:9c:d7:a5:95:74:e2:60:dd:17:4f:f6:55:9f:cb:
d9:00:3d:b3
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAjz2WzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YWE5Yjg5NjQ0ZmI1ZTZjMzlmMzc4OWFiYjUyNjM0NmU2ZGIxMjUwMB4XDTIyMDEw
MTE0MDA1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzhjYmJlNDM3N2Mz
NWNiY2MyMTYwZTA4NGE0N2Q5NDc4Y2E2ZjFiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhRjV7sfthesbA9YE9fTEKApaL60EOLcbdAqGEpdNlHo5mw
san58CpWgX3BL2/uDB02qw9Fcmjwd9W3IVBguouNaqpKSXx6LE0cHTK3TpfNuL30
+DLc1DuWN7b04kVSH81ctjGhTOIj+1JXMwDxuWS90FJoOTPDwd0ESvPo9ItNjazQ
/QkRMOR0CJDK39y7I8Y4xy1Kdg513eZQjiktZrz97635Gt4CH/RKKxh2z1hQQug4
P5XaFh7+0EDe2hOfh2wdsUXc6nkIqOtL+ACSiMH1r6G9PYE5FL9xjWZLMsndl1qg
JSC0qPieljMl5JdPLfwf0keldhmG/bK0sDTEdp8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBR4y75Dd8NcvMIWDghKR9lHjKbxsTAfBgNVHSMEGDAWgBS6qbiWRPtebDnz
eJq7UmNG5tsSUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VxbTRsa1Q3WG13NTgzaWF1MUpqUnViYkVsQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvNzI1ZGU4LWI2YTktNDdiZS1hNjk2LTdiMGU5NjY3NDA5NC8x
L2VNdS1RM2ZEWEx6Q0ZnNElTa2ZaUjR5bThiRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
NzI1ZGU4LWI2YTktNDdiZS1hNjk2LTdiMGU5NjY3NDA5NC8xL3VxbTRsa1Q3WG13
NTgzaWF1MUpqUnViYkVsQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFvfqQMEAFvf7AMEAFviSAMEAFvi
TDANBgkqhkiG9w0BAQsFAAOCAQEAUo/qh5fFiKSswgli55KFBFWyxbPbxg5wTp7U
jZirt3oL93f2GG0uZpkOO8PGhEgFupCZ1yWMkGBJYpaOymJP8ROGUtVE0CTjwLhC
N0Qte4Lyd2oqbrZJKceCNyma98prSE8R/J+vmMcwbqRxRzH7MI4y7T2n56Hf+7rz
rH+bLelYrMNNC96/umtqeFhAO5/en3S4ZTqGp6whz1kFZrH1PriFWLE0JQpYKYp/
HlI/IIqs7zRNmfCHCVEQ+ASZuJJ3jFPQ7szwz4Ep6pqFmysp1TLFerVaYZ4yZ2CB
SmSmnePnv6egWf8rrG5K7MlqsJzXpZV04mDdF0/2VZ/L2QA9sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:18 2024 by rpki-client on console-fra.rpki-client.org