Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/e9CofsvHtUd9nOdIWFYukSYHblY.roa
File: e9CofsvHtUd9nOdIWFYukSYHblY.roa (raw, json)
Hash identifier: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=
Subject key identifier: 7B:D0:A8:7E:CB:C7:B5:47:7D:9C:E7:48:58:56:2E:91:26:07:6E:56
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 01942522048F13D30DA66F6FC409FFFC9FB1
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/e9CofsvHtUd9nOdIWFYukSYHblY.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41192
IP address blocks: 195.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:04:8f:13:d3:0d:a6:6f:6f:c4:09:ff:fc:9f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bd0a87ecbc7b5477d9ce74858562e9126076e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:5c:7a:58:d4:35:f8:ea:da:f0:7e:cd:4f:
ea:7b:7f:c5:f1:a2:be:a1:03:37:54:bc:f7:0f:34:
80:71:0c:7f:1c:93:18:a0:9e:be:1e:61:3b:4e:82:
b0:31:39:3d:c2:ac:8a:9f:0a:d6:7a:7d:a8:59:4e:
c8:51:36:22:e2:33:4f:10:13:07:25:f6:ba:b2:99:
06:1a:88:3e:46:7d:9d:19:51:8a:61:28:76:0f:59:
18:1b:cd:91:7f:ff:18:54:75:32:0c:3e:57:f4:ff:
66:7a:83:81:10:31:ac:1d:22:47:a7:f4:1c:4c:19:
f9:26:d5:50:2b:28:1a:98:14:80:87:16:2d:1b:c7:
69:8e:66:d2:fa:ab:8d:32:5e:24:cc:ee:58:eb:1a:
82:72:69:27:70:91:67:a0:9a:fe:40:c0:c5:56:50:
70:58:8f:8a:16:f5:cf:7b:02:48:f0:c5:36:80:f2:
9c:a3:e9:47:69:5e:19:21:1f:00:ec:64:15:20:e1:
a0:3b:ca:15:65:54:fb:e0:a0:1a:93:2d:68:3b:29:
4a:be:02:7f:c9:74:3e:a9:ef:b4:29:5c:17:66:77:
77:d1:0d:b9:99:a4:14:c6:57:f1:85:87:ff:8c:9d:
02:32:30:58:92:b9:33:09:fc:08:60:fb:16:c9:2b:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:A8:7E:CB:C7:B5:47:7D:9C:E7:48:58:56:2E:91:26:07:6E:56
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/e9CofsvHtUd9nOdIWFYukSYHblY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fa:64:85:0a:41:cf:aa:c4:2a:45:7e:f4:4f:59:bf:f5:96:
1f:a8:6b:a8:19:a5:a4:3c:9b:f1:aa:f3:49:87:b1:03:5a:55:
17:fb:2e:4f:b9:96:74:4b:68:23:e5:c9:ca:10:c3:43:6a:97:
d6:b1:94:2a:24:4d:b4:91:c4:c9:20:de:29:41:76:1e:f8:01:
e4:5a:ea:be:3b:56:89:42:1d:85:c3:ef:b6:62:51:2b:4f:81:
e4:c2:17:c1:9d:b0:45:c0:fb:97:80:59:fb:25:54:f9:89:9d:
72:01:5f:c9:22:cc:8d:8c:42:e9:9b:44:dc:f7:55:88:e5:8d:
d0:3b:55:07:fb:9f:95:64:e7:bc:01:79:f0:32:89:bd:e6:8a:
f8:31:83:d2:68:3f:5d:f3:d8:9c:3d:79:e0:4c:c0:1f:00:2e:
65:60:54:e5:c6:57:12:ee:fd:5a:b4:aa:f0:61:92:af:80:32:
43:88:12:06:24:a0:37:9e:f2:a3:30:c3:ee:8e:2b:b4:5a:71:
14:a0:11:eb:7c:c7:cc:29:be:57:a4:fd:af:5a:89:87:c5:53:
dc:06:4f:75:05:63:97:b6:e3:74:8c:e8:cb:40:e1:01:7b:62:
26:1f:4f:f1:20:c9:76:a4:bd:59:26:c0:11:95:de:74:1b:a7:
19:79:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net