Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa
File: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (raw, json)
Hash identifier: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=
Subject key identifier: 7A:2D:80:40:56:5E:A8:47:28:62:D4:82:E5:33:77:97:03:F6:81:B3
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 019427B612E3449195F3FDA79CCBB5636339
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214230
IP address blocks: 147.234.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:12:e3:44:91:95:f3:fd:a7:9c:cb:b5:63:63:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a2d8040565ea8472862d482e533779703f681b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:2c:ec:bd:73:7c:ae:b2:be:82:c4:07:98:
8f:0a:71:55:67:85:66:1a:40:69:29:ea:02:08:5c:
21:37:57:3f:f6:98:84:c9:0c:04:ff:e9:c6:26:33:
9a:67:bb:94:7d:e2:24:cb:6e:ac:b0:3e:fb:fa:ca:
db:38:f9:b3:74:8c:f5:7c:ed:cd:39:c9:d8:a2:fb:
d1:53:a5:f6:73:6b:e4:56:87:07:6c:96:76:ad:5b:
3c:81:72:c7:99:0a:ce:2e:55:33:82:77:76:cd:cd:
88:e9:07:e5:3c:e4:8b:00:fc:a9:27:c9:7e:70:0e:
a9:a1:a5:e1:f1:44:77:f2:9b:39:1f:fb:60:85:64:
1c:0b:c0:9a:02:8d:f0:6e:b4:16:95:0b:93:18:6a:
dc:85:0d:2a:05:f8:97:f0:35:a9:6c:5a:93:d5:6c:
23:83:3c:68:5d:64:49:92:0c:87:e8:c2:e1:e9:3e:
40:26:d2:e3:af:e1:b6:39:ae:38:b2:ed:dd:82:7f:
35:d8:91:71:35:4d:eb:30:dc:80:a9:37:79:6a:d3:
bd:f6:8b:4a:d5:e1:3e:a4:0f:17:38:49:63:82:4f:
14:94:33:ba:f5:ee:fd:28:f8:dd:47:da:9c:25:7c:
87:10:f3:5d:f4:2c:a9:ed:b4:4b:5a:e5:29:2f:37:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:80:40:56:5E:A8:47:28:62:D4:82:E5:33:77:97:03:F6:81:B3
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.26.0/24
Signature Algorithm: sha256WithRSAEncryption
05:66:f5:8e:75:a5:82:72:af:6a:e8:e1:77:f2:21:2c:ac:91:
3a:5e:87:2b:ac:b6:71:09:7d:75:21:1f:a5:f3:6f:4b:4b:e1:
7d:08:fc:fd:f5:cf:e6:cc:e3:6c:c8:a7:e1:bd:b5:6e:d1:99:
f8:27:87:10:c0:07:90:76:7b:01:fa:38:a2:4f:a8:08:43:cc:
67:2d:c2:b4:70:fd:6e:39:76:26:15:45:c6:31:85:75:85:4d:
0f:db:ee:6d:72:6e:4f:ab:48:a2:b5:ea:c1:39:1c:19:50:82:
53:ee:9f:2a:6c:1e:c9:21:b0:90:ab:88:e2:83:6d:75:36:3a:
71:ce:ad:76:7d:18:b9:90:0b:9f:14:04:7a:7b:0f:0b:b2:60:
d1:ef:c3:dd:6c:60:ed:6a:4d:f0:ff:ed:d3:19:22:f9:0a:0f:
dd:9d:b2:81:67:cf:73:2a:29:bd:a9:20:67:65:4d:69:62:99:
b3:1a:5f:ee:93:97:a9:95:bf:cd:60:fa:52:6a:90:b4:c1:33:
3e:74:38:21:1b:27:d9:ec:de:9f:71:93:33:78:23:d1:1a:eb:
eb:a9:3c:d7:65:da:0f:24:50:26:59:21:50:0f:64:f4:e0:3f:
08:64:c4:60:f2:0a:21:67:c7:05:98:c4:dd:b9:51:79:9b:5b:
ec:56:05:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net