Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/ebpSJwwODthJSAtEhWxsuE5jmWc.roa
File: ebpSJwwODthJSAtEhWxsuE5jmWc.roa (raw, json)
Hash identifier: DHoxuM9A5djnyMyGDG3UGPu6tBxqwYzj6AbU5sL1Pg4=
Subject key identifier: 79:BA:52:27:0C:0E:0E:D8:49:48:0B:44:85:6C:6C:B8:4E:63:99:67
Certificate issuer: /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial: 019420D596E66FB20ED666486EE087ECBFA5
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/ebpSJwwODthJSAtEhWxsuE5jmWc.roa
Signing time: Wed 01 Jan 2025 07:47:35 +0000
ROA not before: Wed 01 Jan 2025 07:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29130
IP address blocks: 195.47.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:96:e6:6f:b2:0e:d6:66:48:6e:e0:87:ec:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Validity
Not Before: Jan 1 07:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79ba52270c0e0ed849480b44856c6cb84e639967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:00:ce:85:a7:ef:69:03:e8:ed:ee:4c:0a:
78:3b:36:84:dc:f5:cc:ac:48:3a:9b:5a:20:53:1f:
12:be:20:01:00:c5:83:a7:0e:17:01:aa:b2:81:34:
83:52:52:17:c0:f0:26:6e:97:a3:29:91:94:b9:84:
3e:4d:7e:d8:c1:27:e9:8e:4d:5a:fb:ed:4f:55:bc:
81:07:ba:9e:fd:ac:19:43:5b:dc:ba:07:04:eb:c0:
e6:a8:56:49:e3:8a:ac:ac:92:89:c7:0f:c5:46:a5:
d0:98:d8:a4:69:9e:23:f6:84:d0:b8:79:62:f6:83:
5a:14:b1:44:98:2f:36:38:4f:32:2f:3c:50:e8:e9:
de:e0:be:98:fb:97:ba:92:60:85:18:34:50:27:79:
11:5b:79:a8:07:b5:3c:43:63:11:f4:31:fe:d9:ba:
9c:56:59:b8:aa:a2:50:08:c5:e8:86:02:86:19:ac:
38:e1:b9:8a:d1:9c:44:b2:2e:7a:df:8c:52:ce:68:
0c:7d:d9:73:22:a5:56:78:7e:68:a4:d2:90:d6:0d:
3b:ea:b9:1c:ef:a6:0d:80:15:20:c0:4e:55:fd:5c:
8b:44:d4:a5:35:cc:4d:2f:e2:1a:4d:27:f0:db:70:
4c:f5:30:2c:8a:ab:3a:dc:cd:c2:20:11:ee:b9:2e:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:52:27:0C:0E:0E:D8:49:48:0B:44:85:6C:6C:B8:4E:63:99:67
X509v3 Authority Key Identifier:
keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/ebpSJwwODthJSAtEhWxsuE5jmWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3c:8b:4f:be:0a:4b:2b:06:45:74:92:f1:ea:c6:99:14:01:
12:98:9d:f7:d9:b1:dd:6b:f1:8e:ff:6a:4a:51:f4:26:80:21:
39:6d:80:ab:34:cd:22:0f:51:f1:f4:53:5e:80:2e:e8:4c:af:
2c:9c:c3:c6:ea:5c:8b:fc:b2:19:63:3c:65:9f:0e:70:ff:57:
38:57:45:c9:56:c4:93:77:e5:3e:74:76:b2:3a:b2:9d:5a:bc:
04:29:55:28:8a:1b:b9:0b:c2:e0:85:b8:48:2c:74:97:fd:ff:
6c:83:47:65:9b:d0:76:1a:4b:f0:e9:bd:a2:04:9d:a9:e9:31:
74:8f:e9:3d:51:49:c2:13:59:27:9a:f7:ed:f8:68:b2:a6:f9:
11:df:3b:99:4b:fe:ce:30:0f:d4:1c:a0:be:08:88:f9:92:cd:
69:0f:83:bc:29:ba:88:05:12:c0:04:1d:44:55:f8:f1:2f:b9:
5c:5f:54:39:d5:ba:02:27:ed:f5:38:b2:4e:bd:20:ba:a6:02:
2d:c2:e8:3b:5b:7d:36:d1:96:42:ae:bc:97:d0:3a:16:a9:66:
3e:bd:1c:41:1d:8f:29:a7:91:2b:cf:5d:7c:22:8e:fb:3c:ae:
7f:a5:34:ba:e9:49:09:70:65:36:97:cb:5c:d1:2c:61:3c:65:
f6:b9:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net