Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa
File: xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa (raw, json)
Hash identifier: Hkm6WHwRdTSoB7TcHCYv7BVtxpaKdYgTRcxJjgGeF78=
Subject key identifier: C4:49:A8:8E:81:B3:46:15:16:00:2D:48:27:E5:4E:EC:89:9B:3B:E0
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 0187757F442AEEEF9C6955B0E4D2739C38BD
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa
Signing time: Wed 12 Apr 2023 12:44:47 +0000
ROA not before: Wed 12 Apr 2023 12:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.127.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:7f:44:2a:ee:ef:9c:69:55:b0:e4:d2:73:9c:38:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Apr 12 12:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c449a88e81b3461516002d4827e54eec899b3be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:64:16:d5:53:e3:29:80:b1:0a:dc:7c:bc:
99:12:49:77:c8:02:27:b0:29:06:2f:ef:a0:c9:12:
4e:9e:10:c8:4d:b6:a1:4d:5d:a3:f5:53:47:e5:ac:
56:93:51:16:00:12:6a:e4:38:ad:6f:2f:fb:4d:87:
f2:8a:bf:89:d6:f7:51:db:6b:6a:05:20:28:94:d6:
c4:b3:d6:48:f4:f6:ab:8d:71:2a:9a:5b:95:d8:af:
be:18:b5:11:fa:46:4c:ab:66:41:50:9b:ec:e3:74:
3b:85:f9:ce:9c:f2:b7:4b:44:35:74:ae:4c:eb:b0:
35:c0:ab:b6:41:b5:6b:15:cd:58:96:40:a4:da:8d:
af:76:24:0a:a0:1b:08:60:5f:ce:b3:f3:9f:fd:de:
8e:f1:76:1e:3d:c8:9f:e8:85:fb:0b:25:a3:2b:64:
0e:2f:5e:f0:5c:1f:08:0b:4b:74:ae:f9:87:86:86:
dd:c4:51:d5:0e:20:a5:22:10:33:e5:68:4c:ae:bf:
7c:b6:19:d0:a0:69:56:f2:fc:c3:f7:a1:ad:2b:6f:
bf:66:3a:33:f8:11:da:30:a0:37:f0:38:df:f1:ff:
b2:25:21:ce:4e:32:6e:e4:4c:c7:09:20:f7:53:47:
eb:d6:c6:b3:9d:22:13:f8:5c:ed:5e:3c:96:cf:a3:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:A8:8E:81:B3:46:15:16:00:2D:48:27:E5:4E:EC:89:9B:3B:E0
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.166.0/23
Signature Algorithm: sha256WithRSAEncryption
15:15:85:fe:b8:19:a6:cf:d4:10:4d:c7:4d:8b:cb:2c:c7:58:
58:47:11:d1:03:12:3c:0c:fa:79:ce:44:6b:f6:ad:40:1a:95:
9e:c2:8a:ee:ba:d4:34:a6:98:18:fd:99:1e:c5:04:9f:9d:3b:
50:a3:56:c6:76:d8:43:69:4d:8c:2c:de:c8:a7:94:2b:3b:f2:
cd:63:38:c6:88:9e:35:cb:21:70:37:df:5f:1b:ec:a4:9b:16:
2a:8d:63:f8:39:54:b1:6c:f9:06:a4:ce:e3:99:06:2a:ab:42:
80:81:ac:77:de:84:fd:b4:ff:17:1b:88:a3:ae:97:3a:dc:36:
2f:f4:a0:53:ad:7a:c3:b4:03:2e:eb:83:a6:b8:17:6d:9c:c6:
ab:d8:31:98:14:cf:12:1e:88:ea:5c:42:9a:82:d5:a5:9e:a6:
b2:c1:7e:59:a6:26:dc:4f:65:01:1c:a5:b5:a2:70:ac:f3:3c:
ba:c9:bc:e3:2b:37:95:ec:16:df:6d:29:e4:26:73:83:32:63:
92:29:f2:42:df:c4:a7:e0:a2:17:51:50:8f:ce:a3:d5:a5:71:
b8:bc:20:24:ca:e1:fc:de:4f:99:ce:4a:cd:d9:64:90:e1:8b:
0a:08:75:45:78:d7:c5:ed:ff:e2:ed:d1:dc:c3:a4:ff:c2:56:
46:5c:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:23 2025 by rpki-client