Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa
File: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (raw, json)
Hash identifier: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=
Subject key identifier: 11:B6:E2:E0:46:D6:CB:2A:CF:89:D8:09:45:1A:7A:F2:F3:8B:E0:1B
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019423D6CE0B55D19717AAA1AFC30A191785
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 194.147.196.0/22 maxlen: 24
194.147.200.0/21 maxlen: 24
2001:67c:2ec0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ce:0b:55:d1:97:17:aa:a1:af:c3:0a:19:17:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11b6e2e046d6cb2acf89d809451a7af2f38be01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:2b:dc:9e:51:66:a3:69:2a:61:5d:d0:e0:
6b:ae:69:23:12:f9:45:00:ba:44:73:72:21:b6:bb:
9e:ae:bd:09:07:a2:ad:41:65:a3:06:4a:ac:30:52:
14:6a:df:ca:b8:e9:4d:c1:30:25:07:1c:c2:f7:89:
07:3a:aa:16:c7:52:4e:d3:ee:2e:f8:ed:19:6f:86:
a4:8c:ed:4b:5b:45:47:78:d7:2a:55:1d:2a:8e:e7:
36:0b:9c:85:ff:1e:15:42:81:98:3c:79:59:79:3d:
12:7f:4e:75:85:a3:61:ac:aa:8e:19:35:fb:af:38:
1a:c9:51:fa:4b:01:51:2e:91:61:e9:87:19:73:b7:
99:e6:a5:a9:c5:f2:a2:06:7b:b8:5d:70:6f:dd:1b:
95:6d:c8:16:be:c4:f6:2b:dc:a7:a1:e8:06:b6:b1:
98:2e:91:b8:85:2a:d5:2c:49:68:80:03:cb:b5:a2:
79:d3:a1:3f:12:5f:9b:84:55:d9:d8:52:be:87:3b:
3f:02:9d:a4:1b:73:9b:31:fe:2c:1c:e5:c1:e0:5a:
c5:cf:c9:c4:18:2b:f8:49:82:7d:e3:3d:cf:80:62:
64:38:8e:44:cc:f9:05:78:ff:cc:f2:ae:49:18:cb:
b3:75:a1:c0:7d:56:b4:bf:2d:dd:70:bf:19:59:a5:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:E2:E0:46:D6:CB:2A:CF:89:D8:09:45:1A:7A:F2:F3:8B:E0:1B
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.196.0-194.147.207.255
IPv6:
2001:67c:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
95:5a:16:56:f1:00:fd:dd:02:53:bf:59:ac:3e:e8:7f:9f:cb:
e5:30:c7:c9:f6:6b:8c:a4:02:cb:29:27:04:b3:ca:d2:92:cf:
95:5b:f2:df:b6:32:3d:ec:ab:ec:1f:ff:89:ea:3b:c4:73:8b:
60:3b:1b:71:a4:d5:5d:6b:49:e5:73:5d:f2:45:2b:3a:7f:a1:
a1:c8:98:9c:f6:ca:69:62:e1:61:58:2d:de:e9:db:31:ca:bd:
8a:01:0d:50:df:4b:63:79:81:4a:c7:a8:7e:69:5f:9e:3e:05:
22:48:bf:57:95:b3:81:c8:6a:37:91:ff:34:bf:1c:21:18:72:
a0:6a:b3:79:90:65:42:ad:c1:ec:1b:17:7f:8f:32:3f:10:06:
29:5d:fd:1d:46:79:4f:8f:29:e0:bd:4e:e2:f8:9b:06:4b:ec:
58:44:79:fc:9d:f1:68:39:17:eb:a0:ad:53:d7:7d:d8:26:92:
58:d8:3a:d6:db:7a:6e:ab:07:2c:f0:3d:ff:33:f7:68:09:4e:
1a:fc:90:04:f5:46:13:6c:44:13:6d:cd:c8:bc:e5:69:c4:e5:
c4:f6:1b:a1:86:71:c4:54:85:6e:a9:fb:2e:6d:14:48:5b:01:
40:e2:b2:c2:72:45:62:87:31:6c:f4:ea:15:d2:f5:4e:25:6f:
83:22:c7:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQj1s4LVdGXF6qhr8MKGReFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjUwMTAxMjE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWI2ZTJlMDQ2ZDZjYjJhY2Y4OWQ4MDk0NTFhN2FmMmYzOGJlMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSEr3J5RZqNpKmFd0OBrrmkjEvlF
ALpEc3Ihtruerr0JB6KtQWWjBkqsMFIUat/KuOlNwTAlBxzC94kHOqoWx1JO0+4u
+O0Zb4akjO1LW0VHeNcqVR0qjuc2C5yF/x4VQoGYPHlZeT0Sf051haNhrKqOGTX7
rzgayVH6SwFRLpFh6YcZc7eZ5qWpxfKiBnu4XXBv3RuVbcgWvsT2K9ynoegGtrGY
LpG4hSrVLElogAPLtaJ506E/El+bhFXZ2FK+hzs/Ap2kG3ObMf4sHOXB4FrFz8nE
GCv4SYJ94z3PgGJkOI5EzPkFeP/M8q5JGMuzdaHAfVa0vy3dcL8ZWaVIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG24uBG1ssqz4nYCUUaevLzi+AbMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEvRWJiaTRFYld5eXJQaWRnSlJScDY4dk9MNEJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBALCk8QD
BATCk8AwDwQCAAIwCQMHACABBnwuwDANBgkqhkiG9w0BAQsFAAOCAQEAlVoWVvEA
/d0CU79ZrD7of5/L5TDHyfZrjKQCyyknBLPK0pLPlVvy37YyPeyr7B//ieo7xHOL
YDsbcaTVXWtJ5XNd8kUrOn+hociYnPbKaWLhYVgt3unbMcq9igENUN9LY3mBSseo
fmlfnj4FIki/V5WzgchqN5H/NL8cIRhyoGqzeZBlQq3B7BsXf48yPxAGKV39HUZ5
T48p4L1O4vibBkvsWER5/J3xaDkX66CtU9d92CaSWNg61tt6bqsHLPA9/zP3aAlO
GvyQBPVGE2xEE23NyLzlacTlxPYboYZxxFSFbqn7Lm0USFsBQOKywnJFYocxbPTq
FdL1TiVvgyLHgw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:04 2025 by rpki-client