Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/EMSjnhd68o1EpoB8_orrip5V1sA.roa
File: EMSjnhd68o1EpoB8_orrip5V1sA.roa (raw, json)
Hash identifier: Hmu7a+kjX9bzLaIEhiqyFblNPnph+njCaeY5PhkrF/w=
Subject key identifier: 10:C4:A3:9E:17:7A:F2:8D:44:A6:80:7C:FE:8A:EB:8A:9E:55:D6:C0
Certificate issuer: /CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Certificate serial: 1B290CDE
Authority key identifier: C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/EMSjnhd68o1EpoB8_orrip5V1sA.roa
Signing time: Sat 01 Jan 2022 13:59:06 +0000
ROA not before: Sat 01 Jan 2022 13:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60478
IP address blocks: 185.31.100.0/22 maxlen: 24
2a00:b420::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455675102 (0x1b290cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Validity
Not Before: Jan 1 13:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10c4a39e177af28d44a6807cfe8aeb8a9e55d6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:53:2d:90:34:6a:ad:b3:d8:60:6c:d2:da:
86:1c:89:e8:d1:58:de:0a:56:5b:1f:3a:27:30:92:
b4:d6:27:49:34:11:ee:c1:63:ce:e7:fa:4a:a1:09:
76:b0:1a:61:47:ee:57:94:86:57:56:7a:9f:31:b7:
94:bd:b8:35:c1:1a:00:ef:0f:c3:97:7f:e3:b2:25:
2b:db:1d:e4:fa:e2:97:2a:00:d5:3e:05:96:e2:b9:
58:b7:40:fc:cd:a6:59:b8:3b:00:ac:94:1f:0d:60:
f1:c0:45:6c:b5:40:45:47:5b:86:0c:63:7c:d0:89:
c9:74:b9:18:16:93:26:23:95:ac:18:a4:88:58:b4:
7e:ef:b3:a9:27:6a:f1:2e:82:68:b4:72:2a:41:3d:
8f:80:92:4b:2d:0f:1a:a6:97:d7:87:09:c8:99:31:
f4:3b:ec:f0:f4:e4:6d:fe:51:e9:49:28:2c:d4:7d:
68:60:b5:f1:fd:4e:30:c9:e6:d9:89:8d:c7:2b:87:
91:e8:1a:cb:a9:34:5c:0f:d1:59:db:d0:f2:3b:1c:
a0:6c:7f:5f:8d:9f:b5:ab:ab:22:1d:d5:e2:57:b5:
df:30:0f:db:e4:49:df:23:82:f5:e6:41:60:d9:03:
11:1d:37:45:8c:cc:40:11:ed:0b:33:55:ed:e1:40:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:A3:9E:17:7A:F2:8D:44:A6:80:7C:FE:8A:EB:8A:9E:55:D6:C0
X509v3 Authority Key Identifier:
keyid:C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/EMSjnhd68o1EpoB8_orrip5V1sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.100.0/22
IPv6:
2a00:b420::/32
Signature Algorithm: sha256WithRSAEncryption
88:f2:21:e7:1d:eb:01:5d:d3:eb:9f:0b:1c:07:1f:54:d2:5b:
86:08:27:7c:f8:95:cc:c8:88:ed:b4:de:a9:3f:f1:13:80:af:
87:df:44:12:92:00:bd:1a:08:21:19:ab:f0:a2:57:d3:e8:af:
ac:bf:11:8d:c9:33:9f:e0:8d:00:54:ac:f0:59:b3:c7:38:ea:
fb:21:fa:40:14:08:94:e6:a1:d2:cb:a7:02:0d:f1:04:c6:e1:
47:93:c3:fc:dc:b7:84:32:d0:01:98:65:48:3c:e5:bb:73:ab:
67:a7:6c:22:90:7d:63:68:d9:84:c1:5e:fa:65:cc:90:6e:b1:
ca:f7:0c:7f:61:37:b3:84:29:d7:54:03:d4:6f:4f:67:2c:1e:
40:a5:65:8d:7e:8c:fd:33:9f:24:3b:05:5d:f7:5e:d6:2a:2c:
28:af:4f:e4:20:c0:35:a1:49:cd:d8:a6:ef:31:c3:b5:87:b4:
a3:a8:40:5a:5e:30:73:cb:9d:09:ff:7c:26:2e:72:cf:6b:a1:
3f:76:15:65:79:a3:aa:82:f9:0c:bd:c1:c8:1a:f8:8b:d9:87:
2d:19:be:d6:eb:5a:d1:dd:32:04:b2:3e:bc:d9:2a:dc:f8:04:
9e:a4:2a:80:79:fb:ae:30:0c:0d:1d:bf:92:7e:c4:1a:85:13:
78:64:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:01 2024 by rpki-client on console-ams.rpki-client.org