Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/SeADfFB8f_N01hgMYuivJGKWTSQ.roa
File: SeADfFB8f_N01hgMYuivJGKWTSQ.roa (raw, json)
Hash identifier: ai2JxCnoac6xKoEyseo3qYkVI/ewYdbtx/OOCMVVSz4=
Subject key identifier: 49:E0:03:7C:50:7C:7F:F3:74:D6:18:0C:62:E8:AF:24:62:96:4D:24
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 019425FDAE497EB148DC50B658947B8D6075
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/SeADfFB8f_N01hgMYuivJGKWTSQ.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47159
IP address blocks: 91.147.216.0/21 maxlen: 21
94.248.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ae:49:7e:b1:48:dc:50:b6:58:94:7b:8d:60:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e0037c507c7ff374d6180c62e8af2462964d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:0e:0a:fb:b8:6d:2a:c1:a5:d9:3b:86:fc:
10:97:d8:40:bd:f2:c8:e0:66:00:d2:cd:a3:88:da:
66:01:7c:d1:4f:95:2b:74:c9:fb:3f:f6:fd:e8:43:
8d:fd:5a:af:9d:2c:4f:51:ad:f8:00:01:7d:c7:f4:
4c:eb:4b:c0:6d:4d:f2:e9:ad:f2:3a:2b:70:f6:4b:
9c:c3:09:c8:ac:96:20:09:ac:50:7d:2b:7d:22:76:
89:26:45:e6:c6:5c:e5:1c:ce:6c:33:c0:1a:7a:23:
6c:43:fb:5c:d0:ed:5c:d7:5c:10:36:1c:1e:78:3c:
f7:22:92:6c:cb:56:9c:a1:fd:c9:39:67:85:db:da:
db:4c:26:57:ca:16:60:87:51:be:d6:2b:4d:c4:4a:
a0:c8:fa:5c:1e:5c:fe:7c:74:07:e0:1b:ad:08:a3:
4a:c5:8a:4f:ab:a4:1f:74:bf:b3:30:95:2f:12:b8:
88:09:27:e1:78:21:13:3e:2a:a7:ac:e0:03:8d:55:
c0:d5:35:ea:50:c0:dc:f2:53:7e:b5:75:d2:30:fe:
cf:cd:a0:90:fd:76:43:29:79:35:a7:12:5b:19:46:
20:0e:ca:12:c5:6d:88:86:d2:5d:51:c7:c3:f6:cc:
16:c6:1a:79:e4:3f:68:d4:5c:3d:93:4e:dd:88:60:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E0:03:7C:50:7C:7F:F3:74:D6:18:0C:62:E8:AF:24:62:96:4D:24
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/SeADfFB8f_N01hgMYuivJGKWTSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.216.0/21
94.248.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:f2:39:5d:3f:c3:8b:52:ba:c5:4c:7a:1c:8d:dc:ea:81:78:
0c:0f:e6:11:29:bd:a5:bd:6b:bb:44:ed:bf:bd:54:b2:35:9c:
55:ab:5c:67:24:83:44:a4:f6:60:89:36:cc:f1:2a:e9:19:7d:
88:95:a5:08:39:fa:32:d8:d0:d7:db:a7:92:6c:e9:3a:85:c9:
e6:bf:87:80:df:cb:b8:6f:0d:65:f2:3a:cc:f9:4e:f2:cd:56:
a4:6d:80:3d:bb:ab:58:12:af:a6:e2:14:65:78:b3:eb:9a:d6:
6d:a8:e0:c9:09:26:e7:34:3d:eb:8a:2e:1f:12:97:41:c0:6b:
11:1d:24:76:71:50:52:33:49:1e:e4:c1:7a:11:52:34:b0:b7:
11:70:74:08:07:1e:ff:72:61:11:55:47:ca:64:90:7a:1e:91:
f7:10:03:1e:ca:8d:0e:fb:38:da:db:53:4c:83:7b:d7:8f:85:
05:f3:1f:9d:b6:17:bc:6d:74:d6:30:d6:8c:f6:9e:51:88:27:
51:5e:f5:1c:02:28:c0:05:3c:8e:56:ff:ee:49:c9:6f:30:79:
87:3e:cd:89:cf:80:f7:47:a7:b1:5d:cb:a1:11:17:0c:86:1e:
07:0c:79:75:93:13:c3:95:1f:28:f9:c6:e2:e1:1b:80:74:f4:
16:af:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net