Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/EbiER1YyYwAg31JRo_4MT9hutgE.roa
File: EbiER1YyYwAg31JRo_4MT9hutgE.roa (raw, json)
Hash identifier: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=
Subject key identifier: 11:B8:84:47:56:32:63:00:20:DF:52:51:A3:FE:0C:4F:D8:6E:B6:01
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 0195699B9925AEBE1B7EDFDC4FF8A46C066A
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/EbiER1YyYwAg31JRo_4MT9hutgE.roa
Signing time: Thu 06 Mar 2025 03:59:19 +0000
ROA not before: Thu 06 Mar 2025 03:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.69.1.0/24 maxlen: 24
195.42.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:9b:99:25:ae:be:1b:7e:df:dc:4f:f8:a4:6c:06:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Mar 6 03:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11b884475632630020df5251a3fe0c4fd86eb601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:75:35:bd:a1:be:3c:c2:56:de:27:60:97:
ba:dc:3b:a5:02:1f:74:25:b2:0a:f5:d7:95:55:83:
4b:41:ca:5f:5f:89:3b:8a:66:e8:54:05:3e:ea:25:
71:d9:bb:92:fb:21:b2:0e:78:a2:52:49:ce:52:a8:
e7:7b:0e:21:e6:cf:50:b2:fd:e9:f3:c1:79:b2:e1:
fe:7c:08:a9:bc:1c:07:0c:3e:87:e5:3f:d9:92:e1:
53:9e:7a:83:dd:84:72:68:f1:9e:8a:cd:4b:ce:69:
2f:b6:78:8a:17:10:c0:c6:25:49:ef:04:53:48:5a:
1c:cf:6d:68:30:0f:95:2c:ed:e8:c4:58:c3:45:57:
24:19:b6:42:91:1f:bc:af:e6:cb:15:58:44:32:07:
87:8c:4d:f7:8b:77:c0:87:6e:d3:e6:d5:df:f3:c2:
26:95:cc:9c:90:84:a8:f7:d1:7c:14:93:4e:40:c9:
67:81:ef:f8:a5:45:3b:b1:f7:ff:27:2e:3f:46:90:
7e:0a:94:27:e5:a4:95:85:15:e2:41:04:0d:d4:83:
af:24:e6:a6:7c:cd:d8:5f:93:a7:b4:67:37:46:90:
c5:e0:76:34:76:8e:e2:0b:7f:af:9c:ff:62:66:05:
cb:d1:b5:d1:13:5a:fd:1a:42:e2:4c:6b:b1:a7:21:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:84:47:56:32:63:00:20:DF:52:51:A3:FE:0C:4F:D8:6E:B6:01
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/EbiER1YyYwAg31JRo_4MT9hutgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
195.42.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4b:2b:b2:04:fc:c3:f3:9d:c4:df:e2:bd:a2:02:b5:d4:c3:
78:4b:72:e6:5a:7e:9d:c1:5f:5a:b0:43:6d:2f:2f:c0:b7:82:
66:0a:88:75:4b:ed:9d:0b:56:2b:a8:ff:59:1c:8c:17:0d:ab:
94:85:e6:f7:b8:58:6e:e2:04:58:68:e2:bb:3f:6b:09:41:34:
8a:3e:99:94:89:e9:26:c5:7d:55:2c:9c:50:fa:71:d8:bd:ed:
6a:c8:fe:2e:9f:78:0c:7d:92:7b:28:af:ef:89:93:0c:3d:62:
e5:d0:ae:9c:5e:2e:5f:b0:00:0f:06:2a:01:de:48:05:ed:19:
cb:b9:eb:32:38:eb:85:ac:a2:01:7b:3d:fb:72:69:f1:b1:a2:
49:c1:79:b4:92:53:01:33:49:28:1c:70:84:63:d6:20:3d:38:
2a:82:1f:ea:0c:59:e4:f1:84:6e:fb:27:68:73:48:a5:b5:b4:
99:f7:73:4a:0c:48:46:f6:20:dc:75:5b:11:ee:d3:2f:2f:6b:
99:a8:43:86:0f:3b:a5:6d:02:5f:8e:00:75:55:75:c1:2b:4e:
8c:ef:8f:1b:14:c5:ec:1a:f9:b8:d8:36:5a:0b:a1:cf:27:4f:
8b:44:ef:da:41:5c:fa:32:af:ff:3b:f9:09:b8:fa:86:15:62:
74:2a:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:36 2025 by rpki-client