Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/0EmelMYKSVrwXiVTwjhj0YNvQGM.roa
File: 0EmelMYKSVrwXiVTwjhj0YNvQGM.roa (raw, json)
Hash identifier: /sO+U4Fpn7uAdK6naA5sqtSL+TNQgEqqo0K7yGp65HI=
Subject key identifier: D0:49:9E:94:C6:0A:49:5A:F0:5E:25:53:C2:38:63:D1:83:6F:40:63
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 0193F8EA766812B30F65BB97FC1A6250540D
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/0EmelMYKSVrwXiVTwjhj0YNvQGM.roa
Signing time: Tue 24 Dec 2024 13:45:35 +0000
ROA not before: Tue 24 Dec 2024 13:45:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8468
IP address blocks: 178.16.224.0/22 maxlen: 22
178.16.228.0/24 maxlen: 24
178.16.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:ea:76:68:12:b3:0f:65:bb:97:fc:1a:62:50:54:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Dec 24 13:45:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0499e94c60a495af05e2553c23863d1836f4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:84:1d:ed:e4:02:f1:03:85:cc:64:2f:3e:
5b:54:dd:0e:96:be:88:4a:fc:78:04:d6:51:5f:6d:
18:72:7b:b3:7a:73:0a:b5:b4:62:c4:5e:d1:c8:48:
89:c0:53:e5:78:ee:e6:a3:8a:59:4d:71:a6:c0:f6:
f0:77:66:78:d2:94:c8:28:c4:f4:66:c6:cf:7e:a8:
3b:09:98:31:a6:88:f5:60:53:a4:3c:36:de:9b:13:
a2:12:e3:75:5a:c1:b8:1c:e9:14:d5:88:84:5a:68:
d4:f3:e1:35:9b:08:14:8c:7b:75:6a:47:27:3c:04:
ee:80:c9:3a:f6:a4:ac:6f:27:e6:e8:2f:49:0a:83:
ac:c8:6e:21:2b:f9:e2:c9:e9:e1:9b:4e:55:93:97:
27:db:5c:b8:d6:0c:04:61:d9:49:71:2a:16:f7:6e:
a0:b2:8b:74:d5:09:13:a0:46:da:18:f3:3d:49:69:
16:cc:00:60:7a:9f:ea:1f:42:3d:19:4e:86:2c:f6:
0e:7e:61:80:4e:fa:ef:ae:08:18:56:2a:19:72:c5:
a9:09:36:a1:cb:e2:6e:c8:77:f5:59:4d:ad:c0:ce:
a8:17:8e:13:49:2c:39:df:e0:11:eb:ff:90:5f:35:
9f:64:62:0b:7e:21:64:fa:bd:dc:66:46:87:d0:2b:
76:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:9E:94:C6:0A:49:5A:F0:5E:25:53:C2:38:63:D1:83:6F:40:63
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/0EmelMYKSVrwXiVTwjhj0YNvQGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.224.0-178.16.228.255
178.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0f:8e:c4:20:ce:16:70:a3:a6:8d:7d:6a:24:ed:9e:19:47:
91:b2:8c:3c:21:9e:8c:55:db:49:37:0f:9c:ce:c6:b8:e5:4f:
9f:ef:71:62:a3:2f:de:d9:20:45:12:f4:46:b6:50:d6:91:c7:
c1:26:07:36:f7:76:3b:e3:a2:98:5a:ce:7c:47:66:17:c7:1a:
7d:80:09:ad:fc:4f:8c:39:25:1b:e6:b3:c4:e5:cd:4e:70:22:
56:80:7e:8a:b6:56:b8:88:2b:ac:29:7e:5d:25:16:c7:f9:bd:
09:28:bb:56:5d:62:28:5d:e0:0c:1a:26:c0:3c:3e:e9:7b:24:
17:78:37:dc:62:38:27:57:eb:90:51:b3:47:b1:01:65:63:a5:
19:78:b4:aa:8c:28:20:d2:6a:4a:28:38:d9:8f:41:8a:ca:42:
18:53:6b:9c:1b:8c:e1:1f:51:c1:a5:d3:ea:8c:be:05:e2:52:
65:64:59:d3:04:88:70:13:15:50:9d:be:c6:fd:95:82:4c:c5:
39:2d:1f:39:f8:79:63:50:b1:0e:35:ee:a3:52:d7:50:1c:5a:
2a:02:d0:e8:02:1c:4d:52:30:09:3b:f6:4f:75:c0:64:08:41:
fb:24:a9:86:1f:f5:6e:82:93:27:0d:9d:f5:91:1d:cb:24:74:
83:dd:71:9a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZP46nZoErMPZbuX/BpiUFQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjQxMjI0MTM0NTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDQ5OWU5NGM2MGE0OTVhZjA1ZTI1NTNjMjM4NjNkMTgzNmY0MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTSEHe3kAvEDhcxkLz5bVN0Olr6I
Svx4BNZRX20YcnuzenMKtbRixF7RyEiJwFPleO7mo4pZTXGmwPbwd2Z40pTIKMT0
ZsbPfqg7CZgxpoj1YFOkPDbemxOiEuN1WsG4HOkU1YiEWmjU8+E1mwgUjHt1akcn
PATugMk69qSsbyfm6C9JCoOsyG4hK/niyenhm05Vk5cn21y41gwEYdlJcSoW926g
sot01QkToEbaGPM9SWkWzABgep/qH0I9GU6GLPYOfmGATvrvrggYVioZcsWpCTah
y+JuyHf1WU2twM6oF44TSSw53+AR6/+QXzWfZGILfiFk+r3cZkaH0Ct23wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNBJnpTGCkla8F4lU8I4Y9GDb0BjMB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvMEVtZWxNWUtTVnJ3WGlWVHdqaGowWU52UUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAWyEOAD
BACyEOQDBACyEO0wDQYJKoZIhvcNAQELBQADggEBAKEPjsQgzhZwo6aNfWok7Z4Z
R5GyjDwhnoxV20k3D5zOxrjlT5/vcWKjL97ZIEUS9Ea2UNaRx8EmBzb3djvjopha
znxHZhfHGn2ACa38T4w5JRvms8TlzU5wIlaAfoq2VriIK6wpfl0lFsf5vQkou1Zd
Yihd4AwaJsA8Pul7JBd4N9xiOCdX65BRs0exAWVjpRl4tKqMKCDSakooONmPQYrK
QhhTa5wbjOEfUcGl0+qMvgXiUmVkWdMEiHATFVCdvsb9lYJMxTktHzn4eWNQsQ41
7qNS11AcWioC0OgCHE1SMAk79k91wGQIQfskqYYf9W6CkycNnfWRHcskdIPdcZo=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net