Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/EMMVgaWp365nmYLGTzgu_0xRe_M.roa
File: EMMVgaWp365nmYLGTzgu_0xRe_M.roa (raw, json)
Hash identifier: nhP+8Kyrhu2/fqK1yF1JcMrV05kMyZETe/bXij7lewI=
Subject key identifier: 10:C3:15:81:A5:A9:DF:AE:67:99:82:C6:4F:38:2E:FF:4C:51:7B:F3
Certificate issuer: /CN=c7feaeab4d5c1c02291ddfbe8812a61426454fea
Certificate serial: 01849B5A5007D3F3464ABBBA938AA97AFD2A
Authority key identifier: C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_6uq01cHAIpHd--iBKmFCZFT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/EMMVgaWp365nmYLGTzgu_0xRe_M.roa
Signing time: Mon 21 Nov 2022 18:01:37 +0000
ROA not before: Mon 21 Nov 2022 18:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57866
IP address blocks: 62.3.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:5a:50:07:d3:f3:46:4a:bb:ba:93:8a:a9:7a:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7feaeab4d5c1c02291ddfbe8812a61426454fea
Validity
Not Before: Nov 21 18:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10c31581a5a9dfae679982c64f382eff4c517bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:fd:6a:97:23:7a:42:cb:50:b7:29:dd:8a:
8e:e8:4a:19:8c:ab:c6:d5:2b:c3:8a:d9:1d:ae:2b:
99:0a:a7:20:49:2d:85:92:c1:d9:5f:0f:a5:95:37:
eb:57:9a:40:0b:f9:84:04:14:ca:e3:ed:f0:15:67:
72:17:3a:17:9c:82:1d:e6:4c:d1:16:05:a8:33:75:
f5:9b:ec:c7:9f:47:e1:0a:d5:1c:52:a0:72:c6:c5:
e9:bd:da:e5:20:27:1b:f9:46:03:e8:e0:6a:9b:aa:
a7:5f:11:01:80:01:a2:f7:d9:53:13:e6:a7:ee:46:
58:96:db:23:1c:75:d7:9b:de:02:3e:84:6b:c0:0a:
33:7b:06:dc:b0:30:b0:e5:55:4d:0b:c1:c1:06:9c:
49:6c:2f:4e:23:14:9e:01:91:46:47:11:cd:69:35:
8f:59:ce:39:47:19:f5:95:01:47:d7:52:69:d3:1b:
4d:f3:a5:cc:17:6b:14:b9:f3:7c:8d:59:b8:0b:fb:
2d:65:e5:04:85:da:44:1a:e4:5a:5e:0c:8a:db:5c:
07:df:a0:60:b2:4f:dc:f5:57:15:9d:01:ba:76:2c:
a9:47:d6:38:dd:c7:f2:ed:93:1d:61:99:19:38:3b:
8e:3b:e5:ca:4c:81:2c:3c:d3:68:ce:94:6b:c9:e2:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:15:81:A5:A9:DF:AE:67:99:82:C6:4F:38:2E:FF:4C:51:7B:F3
X509v3 Authority Key Identifier:
keyid:C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_6uq01cHAIpHd--iBKmFCZFT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/EMMVgaWp365nmYLGTzgu_0xRe_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/x_6uq01cHAIpHd--iBKmFCZFT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.37.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f9:a7:79:90:9f:70:9a:d6:85:58:d6:20:65:09:f1:88:f7:
60:24:99:30:3a:5a:53:de:ea:31:05:f8:35:28:62:2a:f4:42:
3a:b4:90:a4:66:79:82:af:14:13:42:e4:7b:c5:5a:a2:dd:82:
55:1b:a1:c0:35:2b:c2:02:30:5d:15:74:c5:d3:74:ff:15:ac:
9d:e9:59:2d:24:21:bf:61:0b:13:94:c2:98:23:08:93:f0:df:
ae:0b:cb:02:28:13:4c:73:d1:11:86:76:93:04:65:cd:1a:c9:
9a:f3:11:93:06:c8:7c:41:bc:84:38:99:b6:71:90:c7:a3:ea:
bc:22:69:ad:15:bb:b3:99:13:96:71:2a:98:b9:21:8b:c9:b2:
0f:9c:72:5e:7f:44:b6:ba:4e:40:a9:4a:26:f2:71:06:94:ba:
59:12:f3:e7:31:57:16:bc:3a:73:d9:95:04:02:dc:8e:c8:bb:
02:2f:f1:de:26:b7:92:95:a2:50:91:0e:ce:77:77:af:ef:7d:
8d:fb:8c:b9:fc:c9:76:7e:fb:50:ef:27:b7:a0:6d:f6:ff:a9:
a8:b4:e5:30:a4:48:e5:bd:56:68:ea:c1:2f:16:38:dc:e6:40:
f6:f7:b5:72:f1:e7:f4:22:73:75:4f:4e:08:3c:ec:a7:2a:a1:
a3:12:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:25 2025 by rpki-client