Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/EmaR1dFh4C44CROnznSle4RKoZY.roa
File: EmaR1dFh4C44CROnznSle4RKoZY.roa (raw, json)
Hash identifier: Gjb47BK3BdncMxIXGeuASD9kSTnBNMc+se5DRg3yyTo=
Subject key identifier: 12:66:91:D5:D1:61:E0:2E:38:09:13:A7:CE:74:A5:7B:84:4A:A1:96
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC217166926D06271DBEDAE6CA0B0
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/EmaR1dFh4C44CROnznSle4RKoZY.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41464
IP address blocks: 78.133.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:17:16:69:26:d0:62:71:db:ed:ae:6c:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=126691d5d161e02e380913a7ce74a57b844aa196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:19:1a:fc:07:24:d9:f8:5e:1a:23:c0:59:
25:58:5f:00:49:a2:ac:22:45:a6:60:ff:29:ce:22:
0e:72:99:36:ef:bc:80:8b:7f:47:9e:eb:a8:f1:05:
08:63:71:34:de:7e:36:6c:03:94:f1:db:65:bf:d5:
6b:bc:78:e9:89:50:a3:ab:64:af:78:0b:33:7c:32:
74:fe:97:22:0c:a5:3a:27:8c:cc:0f:8f:51:2b:7a:
cf:98:2f:42:cc:0a:e8:0a:81:b4:8b:19:ee:36:2e:
60:87:d1:2a:cd:ac:5c:9b:72:c8:b5:97:7e:ca:a0:
02:9c:f5:9e:84:41:d7:32:45:a2:14:8e:d8:7f:1f:
7c:83:7f:fd:39:06:26:4f:79:f1:65:8c:f5:15:8f:
fa:12:9a:13:74:c2:7c:01:f5:e3:1a:1f:e7:43:86:
f0:dc:75:1d:c0:9d:b7:0f:24:bf:d7:8f:8b:89:f0:
f6:77:55:de:d3:49:48:62:de:31:7f:0d:ca:d7:bd:
8c:e6:96:23:0d:cc:f1:3d:ca:02:1e:c3:f4:2f:5a:
64:26:3a:0b:fb:18:f6:0f:6b:1b:86:ac:4e:b0:0d:
f4:77:be:1c:e7:d4:0d:15:de:b6:79:15:e7:65:b3:
d6:1d:e5:ea:3f:3e:d6:cc:00:28:ab:22:af:a0:00:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:91:D5:D1:61:E0:2E:38:09:13:A7:CE:74:A5:7B:84:4A:A1:96
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/EmaR1dFh4C44CROnznSle4RKoZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.168.0/24
Signature Algorithm: sha256WithRSAEncryption
48:25:29:43:5a:d1:6f:80:79:9d:98:aa:4f:35:fa:64:45:c4:
14:2e:c9:94:a6:01:68:f0:2e:43:4a:ad:c3:26:15:b4:e8:f9:
42:5f:13:8d:28:9d:e0:73:bd:e1:94:33:e6:e6:2a:c5:7b:84:
37:1c:92:e7:0f:63:65:2f:46:39:dc:12:3f:f9:0a:16:95:66:
b6:6f:5b:50:11:4a:d1:08:e6:c3:b2:51:3c:76:1b:0b:e6:c8:
de:5b:de:dc:03:69:b8:f1:6d:3a:fc:e1:79:93:c6:af:d1:72:
79:4d:a4:f8:30:6b:b4:0e:de:d5:74:e1:b5:0b:5a:05:17:6a:
36:da:bc:62:0d:a7:79:9c:a1:6c:76:a4:ea:50:41:b2:44:47:
39:37:72:f7:6c:9e:d6:8c:14:79:8e:97:1d:55:30:0e:b7:de:
2f:0a:a2:31:5d:3c:c3:35:2c:1e:18:cc:ca:09:d6:97:f4:38:
9d:69:34:b6:ad:2c:7b:14:6c:71:7b:9d:93:26:8b:5d:86:91:
f7:85:48:87:60:8f:04:c1:f2:3a:df:c6:7b:6f:0f:6b:fb:8d:
be:25:15:24:f1:f3:b6:6b:69:94:af:c7:f7:39:fd:72:d8:60:
ca:f4:0c:17:9c:1d:4f:39:cb:52:bb:d7:e7:88:73:bc:94:8c:
a5:14:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net