Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/7KsAM7VeKjBy5UduS8f_1K2mOzI.roa
File: 7KsAM7VeKjBy5UduS8f_1K2mOzI.roa (raw, json)
Hash identifier: dk/c5Z5K7GpW72fi6w6GOURMB6HE85VOO0UOd/bbWt0=
Subject key identifier: EC:AB:00:33:B5:5E:2A:30:72:E5:47:6E:4B:C7:FF:D4:AD:A6:3B:32
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 01961BBF1DAF78EBD072AF77A6F252262E7C
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/7KsAM7VeKjBy5UduS8f_1K2mOzI.roa
Signing time: Wed 09 Apr 2025 18:10:31 +0000
ROA not before: Wed 09 Apr 2025 18:10:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 185.147.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:bf:1d:af:78:eb:d0:72:af:77:a6:f2:52:26:2e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Apr 9 18:10:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecab0033b55e2a3072e5476e4bc7ffd4ada63b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:e1:78:a5:c1:2d:28:b7:e4:e3:07:2b:32:
27:73:96:26:06:ff:a2:df:9f:09:ff:43:e3:e2:fc:
ea:c8:85:a4:55:18:8f:d0:c1:b3:e5:07:83:84:aa:
df:94:41:eb:d2:d0:a5:bc:08:6d:83:7c:23:53:fc:
13:9f:3c:57:5d:18:e0:34:89:8b:03:db:ce:bb:be:
3f:13:87:27:df:75:55:55:1d:fd:62:94:32:e3:63:
67:ff:ba:06:48:c6:3b:9c:c1:8d:cf:f7:82:74:3b:
97:3a:bd:18:39:df:1d:9b:4a:6b:9d:63:92:e3:e5:
39:ba:19:49:be:aa:b9:b9:a6:6a:38:65:82:82:bc:
6e:ec:12:70:e5:36:61:00:6a:5a:a5:8f:e8:ed:c8:
f3:42:8d:32:39:07:9d:c7:40:5e:7a:aa:b0:32:71:
11:96:42:3c:8d:77:a1:ec:b3:33:8a:63:d8:cf:99:
a6:5d:c3:e6:cb:2d:39:4e:7a:41:47:ad:c3:a5:d1:
2a:17:af:cf:3b:d5:6c:09:89:e1:92:6e:80:24:5b:
91:c9:fa:7c:68:f8:90:af:7b:0f:70:44:16:cd:5d:
d6:5f:b7:5f:b8:b1:5e:3b:b3:77:7b:eb:71:48:bb:
d6:9b:56:28:fc:b5:b7:07:e5:66:70:f6:a4:8d:c2:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AB:00:33:B5:5E:2A:30:72:E5:47:6E:4B:C7:FF:D4:AD:A6:3B:32
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/7KsAM7VeKjBy5UduS8f_1K2mOzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:67:70:2f:77:aa:20:54:56:ab:76:13:f0:e4:f4:41:8e:8b:
05:18:6a:6a:59:e6:d9:64:c4:4a:4a:90:cf:ed:b2:7c:4b:77:
74:8e:97:13:3a:73:0d:30:92:70:8a:29:e4:bd:19:19:29:2f:
95:27:cd:f1:92:6d:82:55:26:9a:74:ba:db:47:e7:cf:1f:0b:
78:6d:b7:ff:01:91:01:ad:2a:84:82:ea:18:39:c6:03:2c:4a:
d9:b3:0c:77:0f:84:1e:f0:a3:5c:3a:2b:8b:2e:17:a4:4d:af:
65:7f:dd:5b:49:88:23:02:62:7d:4f:32:14:8f:14:26:ae:63:
3e:8a:48:b1:e2:02:26:6a:c8:6b:b3:83:15:b5:96:66:a0:16:
10:ed:06:20:14:db:98:a6:3d:a9:d7:d1:95:6a:9e:bb:a6:c6:
28:79:49:84:b8:d5:49:6d:02:a0:f7:36:d6:b0:c9:a9:e1:54:
1f:f2:ff:76:3b:d8:c4:49:f3:74:dd:bf:55:c0:14:e5:2d:7e:
b3:7a:47:83:19:59:b6:dc:c0:62:45:88:68:ae:bb:0a:89:79:
c0:82:9c:f7:e4:64:72:a4:ec:b8:3e:4c:8b:e7:56:28:93:da:
de:84:04:21:4c:74:3e:4c:1f:5a:cf:0e:9d:65:4d:68:1b:ed:
2b:b5:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net