Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/emzZnL_CY-mLqbNmxpMF5dgLw_o.roa
File: emzZnL_CY-mLqbNmxpMF5dgLw_o.roa (raw, json)
Hash identifier: /sbzK1qJq/cgvOH318Stt/FNccht9CX2irpLzmtkV8k=
Subject key identifier: 7A:6C:D9:9C:BF:C2:63:E9:8B:A9:B3:66:C6:93:05:E5:D8:0B:C3:FA
Certificate issuer: /CN=d19f124bd8e870c6eabe5247145238f417a440db
Certificate serial: 01856CAF0D0326458C080ED6699EA5B15ECA
Authority key identifier: D1:9F:12:4B:D8:E8:70:C6:EA:BE:52:47:14:52:38:F4:17:A4:40:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Z8SS9jocMbqvlJHFFI49BekQNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/emzZnL_CY-mLqbNmxpMF5dgLw_o.roa
Signing time: Sun 01 Jan 2023 09:34:49 +0000
ROA not before: Sun 01 Jan 2023 09:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21472
IP address blocks: 185.229.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0d:03:26:45:8c:08:0e:d6:69:9e:a5:b1:5e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19f124bd8e870c6eabe5247145238f417a440db
Validity
Not Before: Jan 1 09:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a6cd99cbfc263e98ba9b366c69305e5d80bc3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:8f:f9:22:77:91:90:6a:b1:03:c9:8d:26:
9e:58:9e:7d:92:1a:0f:01:7b:4e:22:b8:a5:13:48:
50:4c:ad:23:57:63:01:62:d6:5d:46:2f:49:5c:36:
9c:d3:04:9c:47:2b:6d:0d:cd:31:f1:14:09:09:bd:
26:b9:29:a2:12:f8:8a:b4:d3:d7:24:0d:b3:81:c1:
26:32:46:d4:10:82:e9:1e:42:df:57:3d:7e:e0:7b:
24:40:be:da:54:65:6a:3d:b3:65:46:9a:cb:fe:6a:
d6:33:34:65:51:79:e4:38:fc:6c:aa:3a:f5:92:69:
0a:54:ff:10:d4:b7:91:40:f3:33:49:9d:be:30:c9:
60:8b:0c:e5:fc:88:78:2f:ec:72:3d:4b:75:20:b9:
de:48:f0:86:2f:e1:b5:41:47:35:34:ab:2a:18:6d:
a6:4c:75:f7:25:2d:2f:a7:13:bd:4e:8b:d4:76:e8:
28:a9:08:3e:a1:19:1e:2c:89:73:be:e0:08:32:8f:
71:f9:9f:58:88:5f:56:a0:37:95:9b:85:c6:d3:9e:
99:54:69:b7:f9:16:5b:16:bd:fb:ce:8f:f9:2a:11:
2b:f5:82:d7:6f:43:58:e9:fa:a8:3a:de:f8:7d:48:
5c:b4:44:fa:31:2c:a9:8a:a8:28:10:45:fb:50:90:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:D9:9C:BF:C2:63:E9:8B:A9:B3:66:C6:93:05:E5:D8:0B:C3:FA
X509v3 Authority Key Identifier:
keyid:D1:9F:12:4B:D8:E8:70:C6:EA:BE:52:47:14:52:38:F4:17:A4:40:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Z8SS9jocMbqvlJHFFI49BekQNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/emzZnL_CY-mLqbNmxpMF5dgLw_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/0Z8SS9jocMbqvlJHFFI49BekQNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:98:7f:35:b4:74:4b:58:de:fc:6a:3f:7e:67:5e:56:1c:ac:
b6:79:ea:ea:a1:11:f4:91:26:46:52:63:76:52:80:34:ee:df:
dc:de:c7:2c:ee:98:87:69:8f:b5:b1:b3:78:f0:f1:74:fe:22:
5b:b4:54:32:cf:13:da:4d:7e:25:9a:87:c1:86:03:f4:42:c6:
a6:85:8b:f7:6b:8a:e2:9d:fa:97:29:1c:d4:d7:44:d6:fa:67:
a2:1b:3a:fa:c6:28:0b:03:ec:be:6d:59:67:03:47:f5:1a:65:
32:af:fe:d3:da:d3:7b:e7:73:fd:48:77:d0:7b:6e:ec:fb:b0:
c7:7c:88:17:ea:e2:c4:a3:77:4c:9f:9f:19:5e:fe:fb:aa:e1:
54:d3:b1:28:90:c8:30:61:df:7d:70:b5:75:b3:87:ee:e5:53:
d5:15:75:ff:a8:b8:15:0c:1d:94:25:db:c5:a1:c5:30:95:35:
89:4e:5b:62:6b:39:29:5b:92:81:48:ab:56:1b:d7:42:81:73:
e8:de:d6:4d:65:7f:75:61:d3:33:86:2f:ce:f7:3f:e4:ce:33:
6f:c5:71:bd:14:3e:25:f9:91:21:67:59:a1:f1:fb:d3:3f:2d:
fe:68:5a:c2:fd:18:05:bb:50:28:6f:4c:19:b9:ad:05:b2:55:
ee:73:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org