Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa
File: EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa (raw, json)
Hash identifier: mvnb9enU0B7AWOKI985+lV+tNv6aNiqrGSr0x5W08Vg=
Subject key identifier: 10:CC:C8:08:B4:60:CE:64:DE:87:88:BF:9F:F6:4C:3F:91:B5:AF:B9
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018D4B220E6FBE3146AA0A080DE256720D37
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa
Signing time: Sat 27 Jan 2024 13:35:39 +0000
ROA not before: Sat 27 Jan 2024 13:35:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 82.206.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:22:0e:6f:be:31:46:aa:0a:08:0d:e2:56:72:0d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 27 13:35:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10ccc808b460ce64de8788bf9ff64c3f91b5afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:0c:d5:11:18:ff:a7:13:17:24:35:ca:ac:
da:8a:cc:0f:f3:05:2a:a5:19:b3:c3:cd:39:49:eb:
58:85:02:81:66:1b:8c:d5:98:8d:67:91:77:5b:ea:
69:b1:be:9e:8e:d9:c4:75:fc:5d:33:ef:e0:b2:e3:
f5:85:92:56:9e:4d:74:e1:b1:56:fe:40:a1:be:32:
fa:07:11:c4:0e:f6:41:84:3d:95:70:c5:b7:18:22:
1a:81:6c:5b:64:41:25:1a:4e:91:96:c9:02:d6:f8:
e6:2b:4c:3f:06:42:aa:a4:bc:43:47:14:98:fd:7d:
2c:ff:57:41:43:97:17:f0:2d:ba:9a:5e:bc:8b:2a:
8a:12:b6:22:86:72:95:57:5c:a6:6b:05:71:55:53:
80:4c:a0:7c:05:51:37:94:f4:1c:77:d0:c7:12:db:
37:16:95:50:b4:2d:51:c4:68:31:08:fe:4e:69:c6:
ee:9b:d2:fb:33:11:2b:28:d7:e0:a3:ad:30:0a:4a:
03:06:5f:2a:d3:b2:0a:af:31:bf:0c:13:39:01:bd:
78:22:c7:e9:84:ca:7f:26:28:78:cb:ed:df:49:cb:
fd:c2:9b:1c:cd:19:83:18:85:16:8a:e5:48:09:a0:
7b:22:cf:a7:11:e7:7b:1f:e7:39:e4:7d:1e:e7:15:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:C8:08:B4:60:CE:64:DE:87:88:BF:9F:F6:4C:3F:91:B5:AF:B9
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/EMzICLRgzmTeh4i_n_ZMP5G1r7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0/23
Signature Algorithm: sha256WithRSAEncryption
40:12:b0:40:8d:0c:1a:b6:b2:82:78:93:b8:6e:dd:ed:67:f3:
e2:ce:a8:6e:9b:ea:29:93:fb:13:53:70:96:af:2c:e9:b9:9d:
0f:b0:86:63:5c:65:84:83:b6:10:44:51:90:69:a1:22:08:92:
8e:ce:30:15:bc:86:e1:20:e2:13:44:1b:dd:f7:9c:9b:4a:0c:
6e:c4:22:1b:2f:34:2b:76:46:b1:77:8e:95:7e:19:25:3f:0d:
e5:48:18:ea:f0:a9:0a:86:93:49:73:80:50:00:54:9f:35:31:
67:37:00:f6:d5:48:50:ae:18:d4:0d:4b:46:9c:aa:05:aa:6e:
97:9c:31:9c:be:6d:4e:34:ef:b7:3f:01:35:df:3e:af:ea:97:
81:f3:55:f9:07:f9:94:df:5b:de:6f:13:f5:50:7b:3d:80:d0:
9c:63:99:42:63:ab:98:a7:f7:33:62:1a:04:10:e3:99:10:56:
43:e8:76:bd:74:4b:f2:bf:57:39:4e:4a:c3:4a:a5:58:0d:aa:
f3:cc:96:1e:af:1c:d5:0e:0a:bf:25:21:69:b2:52:43:be:a8:
0a:1b:9d:a0:81:31:76:dd:d1:03:72:9a:6b:1b:d9:39:cc:8a:
b1:76:09:e6:39:f3:cc:cb:68:c9:fa:a8:e3:3e:74:76:99:69:
b4:bf:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:57 2025 by rpki-client