Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EMSOW3Bkfoybajo9-P_ET004kAI.roa
File: EMSOW3Bkfoybajo9-P_ET004kAI.roa (raw, json)
Hash identifier: r2d47jpD5/cklyMLLQ5gzGAKW351QfXqsVIym+Eqn+M=
Subject key identifier: 10:C4:8E:5B:70:64:7E:8C:9B:6A:3A:3D:F8:FF:C4:4F:4D:38:90:02
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01900D30B5E84ED4F59582DD62A69DAA23B7
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EMSOW3Bkfoybajo9-P_ET004kAI.roa
Signing time: Wed 12 Jun 2024 16:03:34 +0000
ROA not before: Wed 12 Jun 2024 16:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 91.239.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:30:b5:e8:4e:d4:f5:95:82:dd:62:a6:9d:aa:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 12 16:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10c48e5b70647e8c9b6a3a3df8ffc44f4d389002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:ca:66:ff:e9:63:55:ea:63:0d:af:61:2f:
9d:3d:98:24:0e:72:0c:1e:4a:da:96:38:10:6c:b1:
3b:af:2a:90:30:5b:6b:11:7e:a5:e5:d4:a6:fd:7b:
09:24:0e:60:0a:94:8c:f1:f6:9a:9f:9b:12:bd:65:
f9:d6:69:00:a3:16:53:fb:19:61:67:2d:e1:6d:10:
ae:10:42:60:2a:a8:fb:1f:1e:d0:fa:2b:8b:9a:cd:
60:0f:10:ff:4d:f9:ea:7f:5e:b0:1e:c5:7e:6b:a5:
bb:d1:ac:66:6e:26:00:c2:49:c2:f1:61:7f:03:53:
06:80:ab:54:64:e5:96:cb:71:ed:5e:88:ea:3a:e3:
04:e5:1d:05:a9:d7:07:06:2e:61:dd:53:68:21:4b:
0b:c4:90:bc:09:a3:cf:03:7b:93:da:31:68:0e:1f:
1f:a7:86:ed:51:61:a3:3a:7c:14:22:9d:25:c2:c5:
b9:e4:3f:d1:91:15:3c:f7:ca:70:24:6e:7a:2d:28:
8e:f8:e5:1a:b5:0d:0f:13:ef:52:13:59:8c:92:8d:
a2:33:6c:14:1f:1a:41:7e:eb:4b:cb:bc:1e:84:12:
67:6f:49:de:16:35:5e:37:eb:41:af:46:a1:bc:3e:
75:06:81:f5:15:66:81:7f:a8:7d:d1:c2:af:ca:20:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:8E:5B:70:64:7E:8C:9B:6A:3A:3D:F8:FF:C4:4F:4D:38:90:02
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EMSOW3Bkfoybajo9-P_ET004kAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8e:3e:9a:dd:b6:41:ba:58:8e:53:64:0b:2e:33:23:5e:31:
f8:b9:a0:ab:35:81:76:4e:d2:eb:57:03:ab:92:65:73:15:f3:
23:64:be:68:21:ad:6a:d0:7b:34:9f:e9:95:6a:94:01:76:5f:
d0:6d:98:34:14:80:2f:9d:fa:5e:f8:be:5b:f2:3e:8f:41:8e:
9f:2d:77:d3:29:23:9c:e5:3c:e8:87:20:34:4d:16:67:c2:28:
13:7f:51:6b:7d:99:30:b3:01:43:ea:11:cb:ed:e4:84:73:43:
63:3c:1b:2a:63:0b:e2:d6:9f:f2:74:a7:af:8b:c4:34:d8:a1:
2f:53:b3:fa:10:c7:79:e4:38:19:9a:c1:08:6b:38:d8:d8:b8:
0c:a5:dd:1a:00:d0:49:46:bd:ad:16:bc:4d:c8:47:4d:56:0d:
8a:fe:45:23:11:7a:41:0f:55:81:7f:56:b8:e9:c3:c0:ce:9c:
01:f1:2c:0f:f8:ed:41:7c:9b:f2:2b:43:53:8e:20:83:01:82:
9c:26:9f:ae:13:0e:79:26:32:eb:8d:32:9d:ca:57:f2:60:da:
17:1d:01:fb:3a:de:5c:09:94:90:2b:6e:c9:9c:b9:97:1f:10:
43:6e:56:01:98:e0:98:41:f5:d2:f4:a0:33:23:db:9e:15:fd:
06:52:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:20 2025 by rpki-client