Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/EZFIYtcapsDAbifqmq2FXtp-Cdw.roa
File: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (raw, json)
Hash identifier: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=
Subject key identifier: 11:91:48:62:D7:1A:A6:C0:C0:6E:27:EA:9A:AD:85:5E:DA:7E:09:DC
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0194228DC68334BAC215571C3DAE99641360
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/EZFIYtcapsDAbifqmq2FXtp-Cdw.roa
Signing time: Wed 01 Jan 2025 15:48:24 +0000
ROA not before: Wed 01 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28762
IP address blocks: 94.159.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c6:83:34:ba:c2:15:57:1c:3d:ae:99:64:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11914862d71aa6c0c06e27ea9aad855eda7e09dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:bc:7f:7b:b4:a1:d4:20:29:ca:20:7f:65:
19:a3:e4:23:c7:76:d4:26:4e:c9:1b:14:46:4d:c8:
83:c1:a1:0d:b1:46:db:2e:8e:f8:1c:b4:fc:5b:5d:
2c:7a:8d:74:f4:54:0d:9f:40:b1:85:c7:6d:78:9e:
86:7a:51:43:d3:5e:e7:e6:a5:0b:11:36:9c:59:58:
ab:f9:1d:50:8b:c6:d3:a6:81:6b:60:9a:b3:bc:41:
2b:e1:cd:64:03:01:dd:7a:a4:67:02:52:09:83:d5:
bb:ab:5c:a8:49:55:46:8a:24:10:4a:3d:71:43:65:
72:85:a1:a7:bd:5d:39:99:41:99:8c:86:0b:9c:2f:
9e:9c:28:7a:99:05:38:84:c7:50:bd:75:35:53:6c:
b3:f1:46:94:2b:68:e9:60:5d:77:95:6f:3f:8e:2f:
1e:f2:60:00:bb:8f:99:21:01:87:6a:70:ed:65:2c:
06:96:5e:0a:a8:76:11:1b:03:3f:88:ce:90:da:4a:
bf:55:5b:8c:97:fb:a2:42:bd:60:3f:b3:7b:92:21:
15:ec:f3:30:42:76:60:52:cd:e0:2a:eb:f9:b7:8b:
c6:49:3c:97:26:72:88:8f:35:48:c4:2a:57:35:75:
d1:3a:e8:94:da:a9:d0:a3:08:8b:99:6c:6f:30:e6:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:48:62:D7:1A:A6:C0:C0:6E:27:EA:9A:AD:85:5E:DA:7E:09:DC
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/EZFIYtcapsDAbifqmq2FXtp-Cdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d0:c5:0b:3e:a4:a2:69:8a:bb:c6:37:75:31:ed:c5:c0:ed:
c7:2f:0e:9e:a7:d2:c1:e9:65:bf:de:8f:ce:19:52:09:1d:d9:
2d:9d:57:82:3d:9c:bd:3b:4a:af:b5:3f:db:ad:c8:cf:b1:2b:
9a:24:8b:a5:9e:de:f0:16:a0:20:ab:ea:89:50:16:70:d7:cd:
e2:76:a0:4e:71:7f:01:11:e9:83:32:8f:4e:34:9e:06:00:cd:
97:0b:81:9a:58:c1:38:80:1a:e0:2e:e7:a2:9b:e2:76:67:f8:
63:9d:73:14:bb:fd:42:72:74:83:d8:68:7d:f4:0a:fb:11:d6:
91:17:a9:84:97:46:11:44:60:71:10:59:d1:ae:a3:33:be:26:
9d:3e:f8:dd:8c:f6:41:64:d3:4d:2f:39:dd:5c:13:89:87:f2:
79:14:d5:18:b2:cc:93:1d:8e:4a:17:a0:c6:50:d2:ca:26:8c:
10:80:7c:04:5e:d0:e1:bf:1d:a6:91:f7:25:cf:4b:2e:e5:7b:
2b:a6:df:26:64:44:2a:a7:53:e9:b2:ad:8f:bb:f3:fc:e9:df:
0e:3e:4d:3c:fc:42:2e:9c:f6:06:21:71:39:70:19:97:81:2f:
dc:0e:09:0f:8c:5d:cb:96:7f:a7:22:2f:07:cc:89:28:56:e8:
f7:a5:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net