Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/EZmPPKuMm8qkdkIWk95KwnAzD0g.roa
File: EZmPPKuMm8qkdkIWk95KwnAzD0g.roa (raw, json)
Hash identifier: +qcl/f8Cdv/fKrxaWyrH9zqy27c7opKrETzKwqJaCIg=
Subject key identifier: 11:99:8F:3C:AB:8C:9B:CA:A4:76:42:16:93:DE:4A:C2:70:33:0F:48
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 01856D8AEF194039FBF66455CA90C94DF540
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/EZmPPKuMm8qkdkIWk95KwnAzD0g.roa
Signing time: Sun 01 Jan 2023 13:34:59 +0000
ROA not before: Sun 01 Jan 2023 13:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39230
IP address blocks: 185.212.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:ef:19:40:39:fb:f6:64:55:ca:90:c9:4d:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 13:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11998f3cab8c9bcaa476421693de4ac270330f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:a4:e9:38:f4:59:d9:03:21:23:b7:be:cd:
e8:9a:88:25:ed:7b:b3:1d:f4:42:a4:bd:1b:a2:0d:
8b:69:c6:94:c2:53:36:8b:0e:47:ee:59:b0:6b:8f:
f2:96:7a:b0:cb:79:bd:d3:6b:b1:67:8d:87:f4:51:
17:06:64:27:4d:e7:8b:79:09:be:b7:59:f3:c1:bf:
8e:5e:ce:83:79:f3:64:a2:7d:4b:d4:a5:32:f2:a5:
06:cf:ee:7a:35:07:77:a3:65:c2:e4:ea:db:86:ab:
28:cb:df:5d:96:89:e7:0f:d5:5b:85:4d:68:a5:be:
41:fa:30:86:20:70:7a:da:9f:7f:5a:2b:bf:0e:83:
53:38:bc:f1:01:76:35:b0:80:bf:cc:dd:a7:ea:e9:
ac:d1:ab:b1:3b:df:57:de:69:c3:5a:c6:8e:e7:de:
9b:f0:81:bd:ab:39:fd:26:3a:43:81:e6:bf:b9:42:
9d:a5:6a:69:69:0b:ae:1a:ed:d1:70:42:a3:21:a9:
aa:7c:78:a3:f4:32:7e:56:cf:84:ce:4b:ce:97:a2:
43:14:da:41:44:7e:b7:7d:fb:ce:df:54:51:c3:be:
0a:fd:bf:de:a1:81:0a:2b:a3:6b:fe:1a:13:91:63:
c7:76:a0:04:00:9f:32:fc:89:a7:5e:c0:18:0b:53:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:8F:3C:AB:8C:9B:CA:A4:76:42:16:93:DE:4A:C2:70:33:0F:48
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/EZmPPKuMm8qkdkIWk95KwnAzD0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.248.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f6:19:f9:42:30:ae:27:3d:ae:41:fd:03:85:ad:b5:57:a5:
2b:39:80:e1:92:5d:9e:9e:ba:4e:12:2a:7d:3c:d7:1a:e6:91:
b1:47:5d:b1:d3:06:fe:a7:f2:3a:e6:e9:7a:12:e1:43:1f:57:
5b:d3:38:b5:6a:aa:eb:9d:ae:c3:49:62:8c:28:5f:42:29:6e:
40:d6:0e:f8:10:7c:10:0b:fc:10:cf:13:76:c7:11:45:a2:f9:
2f:b7:e8:c3:4c:b5:5a:39:02:e7:f6:b8:59:90:78:e1:86:34:
e1:ac:a6:e8:2d:59:29:a9:02:24:69:30:a9:3a:68:e5:4b:47:
f9:af:bd:59:c6:62:56:88:5c:bb:00:2f:8a:e5:6f:ab:e4:c4:
05:36:bb:9f:f2:a7:52:6a:ef:7d:40:f8:88:2a:12:c8:57:e1:
83:ec:67:c3:b9:6a:fa:c8:ca:74:b8:a5:18:9f:2a:a1:c3:3f:
45:59:0b:f6:67:4b:70:7b:24:ae:8d:b0:bd:61:55:56:66:f7:
ae:05:d5:30:d6:b7:e3:7f:f6:5d:05:f5:46:56:47:69:64:7c:
1d:f6:b8:0e:f6:53:6c:2a:d0:b7:0a:fd:b6:ac:ff:2a:32:6c:
d2:fc:2b:85:22:27:8e:b1:f7:df:51:d4:1f:0c:05:f8:2a:f4:
c9:7d:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org