Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KAhw8GKEjPLJhlJPYAdG_dd3lD4.roa
File: KAhw8GKEjPLJhlJPYAdG_dd3lD4.roa (raw, json)
Hash identifier: 6hCZikVNRPQvE3l69yFQMgSP3eM5hZ2B+hCdig9IRpk=
Subject key identifier: 28:08:70:F0:62:84:8C:F2:C9:86:52:4F:60:07:46:FD:D7:77:94:3E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0195478D0A74681577A1E579143CF040955A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KAhw8GKEjPLJhlJPYAdG_dd3lD4.roa
Signing time: Thu 27 Feb 2025 13:16:20 +0000
ROA not before: Thu 27 Feb 2025 13:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61302
IP address blocks: 194.147.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:8d:0a:74:68:15:77:a1:e5:79:14:3c:f0:40:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 27 13:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=280870f062848cf2c986524f600746fdd777943e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:56:8e:24:8a:7e:b1:50:7a:f3:06:a2:28:
fa:4c:83:74:66:bf:09:55:02:fa:4a:b5:47:8e:43:
a1:a4:49:71:88:a4:ae:3f:1d:df:7f:95:96:79:cf:
22:71:3a:27:ab:ae:a9:b7:3e:ce:a3:ee:8d:91:9b:
d4:53:f5:35:66:74:0b:a9:c9:82:49:4a:41:39:ab:
37:4f:30:50:b6:37:b0:79:13:51:a5:93:90:7c:d2:
6a:78:2d:e9:1f:42:52:44:1c:d1:87:b9:64:7c:65:
6f:b5:cb:65:66:17:b3:a1:4f:41:53:2c:3a:4d:e3:
4c:24:63:c4:66:82:a9:e0:2c:b3:80:79:e1:db:67:
d4:55:11:25:12:0a:bd:15:e1:d7:d1:d1:c0:50:f5:
57:fc:55:a6:4f:c5:3f:a4:36:49:a8:c3:29:00:21:
42:1e:36:75:a3:48:ff:29:63:4d:ef:95:4d:af:92:
ba:a1:b8:8e:07:59:e7:be:f9:7d:d2:ee:29:40:4c:
14:e0:a7:b4:d2:ad:bc:46:be:05:74:c8:82:4f:e8:
72:18:7c:fa:9a:d4:b6:9f:7f:0e:e7:c6:b1:f3:0a:
54:12:ec:be:30:5e:c7:28:56:25:91:e9:cd:1d:81:
25:e2:73:0f:b1:5d:74:1f:02:fc:85:9c:28:a4:6a:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:70:F0:62:84:8C:F2:C9:86:52:4F:60:07:46:FD:D7:77:94:3E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KAhw8GKEjPLJhlJPYAdG_dd3lD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.78.0/24
Signature Algorithm: sha256WithRSAEncryption
00:13:af:3e:fd:c6:10:5b:45:49:63:39:cb:8c:92:31:f0:81:
31:5d:2e:27:09:73:e4:2c:4f:5f:d9:74:60:cb:8e:9e:5c:9c:
85:9c:e8:b1:93:06:af:4f:c2:9c:fa:ab:6c:af:4b:e8:76:19:
a5:33:5c:30:9a:cf:78:d9:5c:fe:67:d9:8a:65:2f:46:e7:5e:
04:5a:1c:d3:ac:3d:e5:2e:9d:df:0e:e6:96:04:a6:e2:a9:49:
ea:ef:18:5b:e4:a7:d6:7d:8a:2a:dd:ff:fc:ad:a0:d5:5b:10:
3b:92:54:b5:aa:45:c3:e4:23:83:33:79:85:81:62:83:1b:69:
ec:7b:32:99:6a:eb:25:a4:58:71:06:96:7c:f0:24:4e:24:05:
ea:e9:b9:1a:b7:dc:3f:d4:9d:e9:ce:21:12:07:95:07:22:5c:
64:eb:9d:20:1d:e0:75:ab:82:ee:7d:5e:9e:1e:53:39:2a:73:
f5:cf:5c:15:5f:96:e8:b6:4a:a8:c5:b5:50:49:16:d1:ce:76:
d5:3d:22:df:b5:7b:4c:d8:cf:20:f6:a2:fa:60:b5:14:cd:2d:
b0:06:c4:43:04:3d:fb:d5:64:7a:7a:5b:54:be:c2:f6:11:18:
6f:10:13:d7:bb:36:c7:ca:db:7e:26:57:a7:7a:58:d6:5e:c1:
51:40:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:54 2025 by rpki-client on console.sobornost.net