Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/EemFD3pubsFZeAyaUKhj9SgEg4k.roa
File: EemFD3pubsFZeAyaUKhj9SgEg4k.roa (raw, json)
Hash identifier: Ko59AqPbE4zfJPESw+iV5pKf4PEYlb0jhIqxayrPodQ=
Subject key identifier: 11:E9:85:0F:7A:6E:6E:C1:59:78:0C:9A:50:A8:63:F5:28:04:83:89
Certificate issuer: /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial: 0187A34E295C477BB7D77C3E126A78803B3E
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/EemFD3pubsFZeAyaUKhj9SgEg4k.roa
Signing time: Fri 21 Apr 2023 10:13:41 +0000
ROA not before: Fri 21 Apr 2023 10:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 94.247.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:4e:29:5c:47:7b:b7:d7:7c:3e:12:6a:78:80:3b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Validity
Not Before: Apr 21 10:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e9850f7a6e6ec159780c9a50a863f528048389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:be:f2:cf:de:76:27:25:3a:9c:69:86:d1:
2d:5c:5f:c7:fa:d5:4d:9a:a5:81:ea:ef:d3:19:ae:
94:24:13:55:f3:21:05:b8:7f:6f:39:56:16:10:60:
00:47:25:70:db:ce:ab:47:da:fa:19:4b:7a:1d:a1:
08:df:bf:68:95:6c:a9:3a:38:c9:df:e8:fe:50:68:
eb:f0:fd:46:3a:d0:ea:38:37:81:c3:1c:04:14:fc:
ab:33:92:30:3f:f1:09:8a:10:8c:0c:ff:6f:e5:fe:
ea:84:8c:68:90:3a:e6:7f:9a:e5:28:95:a3:6a:9b:
19:6f:f7:77:ba:84:40:a2:92:9c:5b:06:fc:5c:b7:
2a:fd:76:3f:71:23:fc:f8:82:f8:0c:ef:d6:f1:8e:
97:6d:55:43:f1:a3:a3:6c:13:52:12:6e:9f:1d:ce:
d5:71:e7:00:36:f9:f3:5f:02:b3:58:a6:9b:04:64:
1d:73:a2:73:39:f9:36:88:b7:da:8f:8d:04:b0:6a:
5a:0a:4d:d5:c2:2f:56:90:34:9c:06:34:89:cc:d3:
20:d0:8a:f1:0d:e0:8a:28:34:31:5f:4b:6b:62:b3:
d1:2c:1b:cd:2c:d3:93:d5:cd:02:4d:f6:cf:66:6f:
25:32:f6:99:58:8c:dc:04:3c:14:32:c1:55:3b:33:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:85:0F:7A:6E:6E:C1:59:78:0C:9A:50:A8:63:F5:28:04:83:89
X509v3 Authority Key Identifier:
keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/EemFD3pubsFZeAyaUKhj9SgEg4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:35:6d:74:a4:77:44:6b:26:f3:be:35:50:be:58:d5:7d:e4:
5c:ec:3f:3e:02:ce:7d:3a:25:03:d5:f7:18:04:b9:db:05:fb:
43:37:93:50:ca:5a:6d:1a:d4:0a:93:60:dc:88:7d:14:d6:f3:
26:38:ec:c3:9b:73:4f:37:60:58:38:77:a0:6d:b8:d9:6e:16:
c2:f5:bd:23:03:5e:57:b8:f9:91:37:a1:4f:6c:66:7c:6f:24:
7e:9b:c3:da:09:10:59:44:ad:e4:01:2b:ce:61:1d:72:bf:e2:
72:3d:96:f5:42:ab:f4:64:02:11:b5:ca:67:c5:8f:a0:b7:95:
bb:45:4c:d2:be:ac:e2:93:b1:04:99:1a:d7:83:07:ab:af:9e:
f9:e0:0b:57:c3:f2:41:1d:e6:d9:4f:3a:71:b8:c5:34:33:b9:
1a:f4:be:98:ed:96:78:4b:b8:d1:0e:3b:ec:f4:99:5e:de:83:
0d:a9:df:97:1e:61:52:b9:2d:da:10:9b:fb:b4:ae:01:2d:0a:
fe:00:9c:d7:bb:21:cc:c3:b0:4c:8e:a9:a8:56:51:51:8f:0c:
f8:43:37:38:45:51:bb:5d:8c:79:b4:98:c4:b8:64:cb:f7:b9:
5a:a3:7e:bd:2d:9c:21:ee:41:12:a3:9e:f0:a6:dc:f5:ae:d0:
94:a4:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:40 2025 by rpki-client