Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EmcKIxPjFCcJoGIXq0RLoLRpVoU.roa
File: EmcKIxPjFCcJoGIXq0RLoLRpVoU.roa (raw, json)
Hash identifier: W0Pmi4O75ejzHGUkseMgvtQzx+MVEis6/ichVDxU/Es=
Subject key identifier: 12:67:0A:23:13:E3:14:27:09:A0:62:17:AB:44:4B:A0:B4:69:56:85
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0185845D936443ED49D6D990716B89593155
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EmcKIxPjFCcJoGIXq0RLoLRpVoU.roa
Signing time: Thu 05 Jan 2023 23:56:43 +0000
ROA not before: Thu 05 Jan 2023 23:56:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.172.172.0/24 maxlen: 24
185.172.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:84:5d:93:64:43:ed:49:d6:d9:90:71:6b:89:59:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 5 23:56:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12670a2313e3142709a06217ab444ba0b4695685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:76:b8:bd:d8:d4:84:e6:91:04:85:a7:66:
0b:a4:d7:22:03:6e:6d:36:0d:c4:3f:4a:0c:a1:67:
77:43:8a:7f:3f:fa:25:ea:f5:77:53:8d:89:01:d6:
78:97:3e:27:10:01:89:57:3b:58:f8:af:a4:86:26:
e3:d6:60:5c:c5:13:4c:f2:df:ba:c0:ae:73:1e:08:
cf:72:cf:23:4f:99:2b:b3:95:01:ba:97:5b:8b:4a:
c6:bb:f0:1c:c6:f6:55:99:3d:18:e8:f5:cc:6d:ee:
73:15:ec:66:de:78:30:63:06:62:b1:67:7e:31:bd:
6e:c9:50:e6:80:d0:a9:33:d0:49:38:df:61:40:55:
9a:63:8f:c9:4c:41:53:ea:4a:bb:e7:94:e8:0a:a9:
65:fe:48:34:a1:8b:12:2d:c7:5b:ee:8b:bb:ab:68:
35:ac:bf:f6:a9:6f:c7:b1:27:68:79:4c:27:8c:e4:
13:fe:a0:ed:6d:ec:61:6f:7c:24:81:51:8e:12:33:
67:91:5a:97:e0:ab:af:31:10:01:c8:87:2c:da:08:
4e:1e:07:f5:b5:b6:e1:60:6f:07:40:b1:93:14:a4:
6d:4f:31:c2:2e:62:0f:99:a2:9a:0e:31:fa:31:dd:
6b:22:ef:a3:89:b8:68:2c:dd:07:6d:41:a0:11:e2:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:0A:23:13:E3:14:27:09:A0:62:17:AB:44:4B:A0:B4:69:56:85
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EmcKIxPjFCcJoGIXq0RLoLRpVoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/23
Signature Algorithm: sha256WithRSAEncryption
39:17:f8:c7:c3:2e:9f:11:78:e6:ff:21:37:c0:b2:ff:e2:84:
17:0b:e0:e3:4f:fc:49:42:91:ea:0a:19:63:72:5e:b2:07:f8:
f7:3a:4c:ca:ab:d8:a2:97:09:ae:57:29:37:08:1f:52:d3:5b:
68:33:70:d5:9d:48:e7:ea:27:04:dc:0f:f8:ce:02:89:09:1e:
c4:a2:4d:ec:36:ce:e8:24:bd:b3:a0:d1:6d:8c:2c:f4:6e:03:
58:97:e7:eb:c8:4b:5d:70:72:42:24:14:ad:fd:37:e8:cd:b8:
57:62:18:96:26:9b:0e:a7:1e:93:73:80:ff:c0:53:ef:2e:98:
6a:67:b7:7c:9f:80:11:86:1c:7e:c9:d8:4f:dd:17:b2:79:80:
6c:e9:44:fc:7d:73:70:67:be:94:ad:1b:7b:e0:88:77:6c:53:
8e:6e:5d:40:5e:66:90:58:e1:7e:e6:b8:23:42:c4:ff:db:75:
d2:49:97:17:35:cf:10:33:56:bf:96:60:47:a8:31:81:ca:70:
89:91:ab:64:60:57:d5:4e:4d:0a:22:34:b0:54:8c:fb:f1:3a:
38:77:28:0f:5a:d8:31:29:23:cd:ac:6d:fd:c0:76:62:d8:88:
7b:2f:74:fe:9b:de:d4:b1:d9:e7:68:9d:50:98:be:aa:03:10:
40:d1:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:30 2025 by rpki-client