Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EmWajGf6b4_C42aOMkfPd04tS8g.roa
File: EmWajGf6b4_C42aOMkfPd04tS8g.roa (raw, json)
Hash identifier: bfez9CIr2E9bwBp8wlnm8v4GNZzrowbBjDbbcG4UC0A=
Subject key identifier: 12:65:9A:8C:67:FA:6F:8F:C2:E3:66:8E:32:47:CF:77:4E:2D:4B:C8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184148BF17A5E9CA10680653AB509294DCC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EmWajGf6b4_C42aOMkfPd04tS8g.roa
Signing time: Wed 26 Oct 2022 13:47:06 +0000
ROA not before: Wed 26 Oct 2022 13:47:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201465
IP address blocks: 81.3.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:8b:f1:7a:5e:9c:a1:06:80:65:3a:b5:09:29:4d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 13:47:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12659a8c67fa6f8fc2e3668e3247cf774e2d4bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:87:61:92:c2:bb:bc:f6:db:6d:bf:1b:b8:
f5:1d:d3:a7:00:56:0a:e9:20:fb:3c:8c:68:36:29:
40:b3:21:9a:6a:4a:a8:bf:a6:62:9c:de:9f:17:0b:
0c:ae:66:79:e4:18:10:b5:1c:c9:95:1b:14:1e:bf:
9d:03:93:69:df:22:9b:0d:62:f7:f3:0c:2a:c5:16:
38:c6:a9:91:d1:6e:0b:ed:cd:b2:ca:8f:a1:b0:6c:
3f:26:93:93:90:de:b3:ac:94:d0:a3:0b:8f:52:3c:
ee:ee:35:0c:6a:ae:e5:30:61:bc:49:84:b2:9e:b3:
0b:92:b4:d7:c4:0b:a2:98:dd:c9:1e:11:79:75:36:
a5:45:9d:ea:70:b4:dc:63:38:1a:2b:28:99:14:65:
2c:84:7b:f8:9d:cb:cc:b3:6e:03:c4:d5:70:36:fa:
47:66:c7:9d:98:5a:60:0b:08:3a:90:9d:04:a8:ad:
91:7b:2e:43:e5:de:10:d2:7c:bf:51:84:30:39:ee:
43:db:bd:88:02:63:ad:c6:e7:50:fe:db:27:38:f4:
2b:dc:53:b8:04:9d:40:a0:7b:70:b1:f1:56:74:90:
2b:27:68:e6:40:75:29:d7:79:03:07:90:03:c4:e2:
06:96:bd:32:93:de:a7:6e:6e:86:38:0c:fd:c4:0b:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:9A:8C:67:FA:6F:8F:C2:E3:66:8E:32:47:CF:77:4E:2D:4B:C8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EmWajGf6b4_C42aOMkfPd04tS8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.145.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4b:47:69:80:60:08:ad:9c:cc:20:c4:d0:23:4a:50:eb:e5:
e0:c4:7d:e8:93:8b:ae:c6:08:14:4d:e5:11:f6:50:bf:1b:5d:
fb:87:c7:ff:ef:47:06:2e:2e:9f:10:4a:f4:b0:75:87:32:34:
52:33:16:ed:a8:bb:7f:77:b8:b4:c1:4d:3a:c2:2d:ee:33:fc:
9c:7b:18:c1:cf:f0:9b:c1:12:70:c3:a7:d1:94:f3:b6:73:21:
5d:2f:5e:27:d3:df:dd:6e:f7:89:39:7d:4c:ba:e7:68:27:99:
e5:21:2a:f6:e2:d7:15:9c:df:77:e9:66:5c:6d:b1:ed:f4:83:
47:3c:c4:46:13:e2:56:af:21:3d:c2:75:55:33:3f:cc:52:11:
79:63:3d:2d:dd:b8:55:b3:8e:52:43:35:46:39:57:0b:18:dd:
fc:61:c4:7f:7e:3b:f7:ba:10:88:71:07:d6:24:f7:eb:45:59:
3c:be:47:94:5f:36:43:d4:44:89:99:48:60:ac:bb:62:91:90:
dc:bf:e1:1b:e6:e7:59:60:a6:c3:fd:0b:d8:c0:b6:90:67:d4:
1b:77:c9:4b:59:bf:5a:dd:b1:06:38:39:a0:3b:02:77:ad:42:
62:8f:d6:0c:17:a4:b7:ee:17:05:81:22:86:be:d6:55:6b:1d:
13:68:61:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQUi/F6XpyhBoBlOrUJKU3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI2MTM0NzA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjY1OWE4YzY3ZmE2ZjhmYzJlMzY2OGUzMjQ3Y2Y3NzRlMmQ0YmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf+HYZLCu7z2222/G7j1HdOnAFYK
6SD7PIxoNilAsyGaakqov6ZinN6fFwsMrmZ55BgQtRzJlRsUHr+dA5Np3yKbDWL3
8wwqxRY4xqmR0W4L7c2yyo+hsGw/JpOTkN6zrJTQowuPUjzu7jUMaq7lMGG8SYSy
nrMLkrTXxAuimN3JHhF5dTalRZ3qcLTcYzgaKyiZFGUshHv4ncvMs24DxNVwNvpH
ZsedmFpgCwg6kJ0EqK2Rey5D5d4Q0ny/UYQwOe5D272IAmOtxudQ/tsnOPQr3FO4
BJ1AoHtwsfFWdJArJ2jmQHUp13kDB5ADxOIGlr0yk96nbm6GOAz9xAtjVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJlmoxn+m+PwuNmjjJHz3dOLUvIMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvRW1XYWpHZjZiNF9DNDJhT01rZlBkMDR0UzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQORMA0G
CSqGSIb3DQEBCwUAA4IBAQAKS0dpgGAIrZzMIMTQI0pQ6+XgxH3ok4uuxggUTeUR
9lC/G137h8f/70cGLi6fEEr0sHWHMjRSMxbtqLt/d7i0wU06wi3uM/ycexjBz/Cb
wRJww6fRlPO2cyFdL14n09/dbveJOX1MuudoJ5nlISr24tcVnN936WZcbbHt9INH
PMRGE+JWryE9wnVVMz/MUhF5Yz0t3bhVs45SQzVGOVcLGN38YcR/fjv3uhCIcQfW
JPfrRVk8vkeUXzZD1ESJmUhgrLtikZDcv+Eb5udZYKbD/QvYwLaQZ9Qbd8lLWb9a
3bEGODmgOwJ3rUJij9YMF6S37hcFgSKGvtZVax0TaGEb
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:59 2025 by rpki-client