Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/BEmBDnptvzjhfzJrUDvPqUHuGp8.roa
File: BEmBDnptvzjhfzJrUDvPqUHuGp8.roa (raw, json)
Hash identifier: MSexBMlLyvdhjFQFO7DHr8OtG2mR7wRaSorNzCXm/4Q=
Subject key identifier: 04:49:81:0E:7A:6D:BF:38:E1:7F:32:6B:50:3B:CF:A9:41:EE:1A:9F
Certificate issuer: /CN=49c639d86461701172c9cea81947910424d71ace
Certificate serial: 01856CAF1C8F89F55056D9DACBDE20777F05
Authority key identifier: 49:C6:39:D8:64:61:70:11:72:C9:CE:A8:19:47:91:04:24:D7:1A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScY52GRhcBFyyc6oGUeRBCTXGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/BEmBDnptvzjhfzJrUDvPqUHuGp8.roa
Signing time: Sun 01 Jan 2023 09:34:53 +0000
ROA not before: Sun 01 Jan 2023 09:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.156.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:1c:8f:89:f5:50:56:d9:da:cb:de:20:77:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c639d86461701172c9cea81947910424d71ace
Validity
Not Before: Jan 1 09:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0449810e7a6dbf38e17f326b503bcfa941ee1a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:4f:04:68:89:c9:14:a4:c3:ba:09:76:e1:
e9:68:96:db:99:f9:7f:10:73:ae:09:20:43:9e:4f:
08:34:d5:f3:57:8a:9d:14:b5:05:a5:c4:7c:58:17:
a6:1e:1f:19:77:d2:93:b1:ce:cf:f0:49:46:e2:57:
7f:c7:c8:8e:64:8a:78:de:15:c9:4f:73:c4:2e:51:
86:c2:12:65:71:e6:7d:92:ab:3b:0b:c3:dc:ba:5e:
cd:61:01:3f:0f:9d:40:df:1b:88:f0:9e:cf:d7:ec:
17:4c:93:bd:41:d4:1b:0d:cb:93:e7:f2:a3:59:a5:
3f:ff:c8:84:5c:96:db:b4:26:95:16:d6:a6:72:f9:
2e:3a:9e:5f:00:d6:2d:8d:ca:29:42:d8:1f:d0:a0:
7a:ce:ea:fb:09:99:79:d0:05:73:f3:1c:63:fc:88:
95:ab:c3:77:f1:fc:90:1f:c8:65:71:0a:02:cf:1b:
88:84:21:de:fb:63:86:d3:2d:07:9c:28:a4:56:11:
d0:a3:cb:ff:59:a4:97:7a:f2:cc:bb:8d:27:a4:13:
4a:c6:5b:f5:0d:61:43:27:57:a8:94:be:3b:4a:58:
d6:cc:0e:00:8a:c5:db:98:41:a0:b6:f2:44:0c:23:
35:a7:0a:a9:aa:78:19:c8:f2:d7:92:79:68:d1:c5:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:81:0E:7A:6D:BF:38:E1:7F:32:6B:50:3B:CF:A9:41:EE:1A:9F
X509v3 Authority Key Identifier:
keyid:49:C6:39:D8:64:61:70:11:72:C9:CE:A8:19:47:91:04:24:D7:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScY52GRhcBFyyc6oGUeRBCTXGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/BEmBDnptvzjhfzJrUDvPqUHuGp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/ScY52GRhcBFyyc6oGUeRBCTXGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:16:ea:7d:91:f6:61:ad:46:7c:76:17:b1:63:76:59:27:ae:
32:16:a3:50:b5:53:9f:6f:8d:5d:ed:18:ef:3e:bd:44:34:c0:
5e:4c:59:b6:1a:fc:1d:d1:2d:40:51:1f:90:fd:98:59:8e:e7:
d2:e0:00:be:56:2d:2d:89:ea:ed:31:5e:9b:a7:f4:f2:a4:0c:
1e:b3:47:31:a0:55:43:b1:a9:b4:b9:9f:54:f1:cc:4c:66:56:
3e:97:68:af:7b:d4:3f:24:56:2a:76:bb:68:58:73:06:eb:68:
ab:6c:50:7f:4d:fe:57:45:a5:1d:47:22:83:22:d2:18:3b:f0:
eb:e2:9f:ef:9c:4e:70:45:b3:b3:99:d4:40:a3:15:b1:5b:50:
52:25:c1:af:3f:7e:c3:70:a3:57:04:b0:10:4a:fa:2c:61:01:
67:69:16:52:c2:51:d7:90:c6:82:81:ae:84:8d:e1:8e:eb:a9:
cd:e8:fd:f6:0a:d2:9d:67:83:94:19:c5:2d:ad:78:a0:62:e4:
58:04:49:94:a8:45:5e:ec:af:0c:15:66:30:dd:34:5a:d8:59:
a1:99:f6:fa:92:67:6d:7a:11:b1:55:e7:56:28:bc:f9:62:7e:
b8:4a:a2:4d:d1:99:b6:fa:bd:14:51:26:90:74:be:73:ed:0d:
e4:0c:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:10:25 2025 by rpki-client