Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa
File: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (raw, json)
Hash identifier: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=
Subject key identifier: 7A:68:98:C8:E3:BE:E1:9B:68:3C:4C:E4:4A:74:34:F6:D6:20:C6:6A
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 019421B1AA8EB6B725C2AC54B59F88068E1F
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197721
IP address blocks: 192.162.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:aa:8e:b6:b7:25:c2:ac:54:b5:9f:88:06:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6898c8e3bee19b683c4ce44a7434f6d620c66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:87:0f:44:d6:43:a3:af:a8:0b:12:24:43:
8c:76:a3:d6:42:fc:95:61:98:e5:8a:5a:a5:91:19:
d7:03:5d:5e:c9:02:c6:03:ca:bb:25:3a:af:a5:9c:
cd:95:79:46:09:e2:6c:06:a9:31:cc:d4:38:74:7f:
30:fb:27:a9:49:9a:ed:48:76:4f:99:d0:d5:96:4a:
d1:39:5e:80:45:29:f6:25:66:13:2d:9c:ba:8b:58:
33:17:15:8e:0f:e3:7c:7a:f2:38:fd:32:36:b2:a4:
a9:95:f8:d0:82:19:8f:0f:93:83:81:06:15:f7:ce:
d3:af:7c:ef:6c:29:ed:fe:67:4e:de:b1:99:87:10:
09:e6:7f:da:ed:78:02:e3:d5:71:d6:10:f2:b0:6c:
16:44:1a:f3:6b:a3:6a:79:b6:33:95:f2:1c:e1:0d:
7f:d8:0a:8d:1b:a2:b6:26:0c:f5:cf:81:95:cb:e8:
68:23:fd:2a:f0:02:78:be:9e:9c:43:54:72:77:68:
19:15:13:8b:86:9a:86:86:4a:92:f7:95:bd:a4:61:
d7:03:b1:d3:0e:37:3a:06:97:df:bf:4b:b5:cb:15:
fe:83:fe:5c:05:7c:f2:6c:a7:25:0d:52:df:55:dc:
3a:d8:88:cc:47:e6:9c:00:89:83:10:8d:4a:af:d1:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:68:98:C8:E3:BE:E1:9B:68:3C:4C:E4:4A:74:34:F6:D6:20:C6:6A
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fe:77:f7:ba:b4:d5:5d:74:7a:1f:7f:fb:02:4f:26:0f:42:
7e:c7:79:a5:a8:00:ce:f9:d6:81:c0:cd:de:ba:3b:36:65:a2:
0e:ab:69:2a:5f:c1:97:24:93:11:cc:7b:ba:f0:00:57:08:ee:
12:ed:7e:bf:e7:30:56:00:cf:59:2d:62:1d:8e:97:3b:48:bf:
91:67:3c:c5:89:37:4d:af:f8:2c:ef:b0:76:75:6e:cf:3a:03:
4d:a6:b2:f6:33:13:a2:74:12:93:c8:ea:5c:b3:65:04:ff:72:
30:53:61:2f:36:24:75:69:01:52:ec:0a:57:f4:ba:5e:b9:06:
d1:d2:eb:df:58:c0:6e:bd:dd:f5:1e:16:0b:cf:52:bf:54:cb:
e5:3f:c0:e6:a1:e0:1e:c2:23:bb:33:a2:d9:6e:4f:8e:62:a3:
24:c2:41:84:ac:ff:ef:2a:78:c6:be:cc:bc:ba:69:18:0a:13:
91:c2:7d:02:3d:3d:c6:8b:db:12:c3:eb:21:a3:e4:41:a6:9f:
22:b0:bf:a2:8b:78:16:dc:6a:a1:a3:10:95:ac:69:cd:ed:e0:
f9:88:f2:4e:2b:d3:01:74:27:41:ea:aa:58:c7:3f:3f:29:7b:
e4:65:39:15:69:05:b6:5c:3c:2d:c4:05:23:0c:ee:a5:66:e9:
76:67:ab:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:46 2025 by rpki-client