Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa
File: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (raw, json)
Hash identifier: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=
Subject key identifier: D1:B4:86:D4:66:D0:4A:BD:C9:3F:63:3D:05:6D:80:EB:35:84:99:64
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 0195D7416F01E549EC24CE671121A4EC57D6
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa
Signing time: Thu 27 Mar 2025 10:59:04 +0000
ROA not before: Thu 27 Mar 2025 10:59:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39378
IP address blocks: 79.132.130.0/24 maxlen: 24
79.132.131.0/24 maxlen: 24
79.132.134.0/24 maxlen: 24
91.241.93.0/24 maxlen: 24
185.90.162.0/24 maxlen: 24
185.158.251.0/24 maxlen: 24
185.212.44.0/24 maxlen: 24
185.212.45.0/24 maxlen: 24
185.212.46.0/24 maxlen: 24
185.212.47.0/24 maxlen: 24
185.219.220.0/23 maxlen: 23
185.219.222.0/24 maxlen: 24
185.219.223.0/24 maxlen: 24
194.76.226.0/24 maxlen: 24
2a07:fc00::/48 maxlen: 48
2a0b:7140::/48 maxlen: 48
2a0b:7140:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:41:6f:01:e5:49:ec:24:ce:67:11:21:a4:ec:57:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Mar 27 10:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b486d466d04abdc93f633d056d80eb35849964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:48:2c:7b:20:04:77:12:73:f7:a7:7d:8f:
01:b8:fd:76:9a:ea:f2:f6:36:d9:e2:a0:ff:d4:2c:
d5:fe:5d:09:35:fb:61:12:46:fa:d1:24:9b:99:4e:
d7:02:da:44:76:14:b0:cd:f2:0b:9f:1d:9b:8a:49:
20:4f:2b:2e:f3:b1:41:d4:1e:8d:ef:3b:4b:4d:81:
3a:d8:22:f3:02:7c:73:52:fa:7a:bf:c4:12:91:bd:
88:90:42:0a:f1:0f:02:08:8f:83:c7:bf:a8:35:60:
32:27:97:c1:1b:c8:33:2b:f0:77:94:2e:3f:16:20:
09:29:af:58:9a:d1:b7:fb:40:01:86:54:6b:bd:96:
09:c9:b6:07:6f:4f:18:8a:57:81:e0:f5:61:f0:0a:
e9:52:f2:0d:f7:78:cf:3b:8d:d5:1b:f5:fe:c2:68:
6b:03:25:bc:b3:25:c0:d1:29:f0:f3:32:0f:1a:b5:
39:56:90:af:4f:68:fd:1c:fb:8d:e7:d1:57:7f:82:
f1:60:27:07:f8:64:05:05:14:47:d9:02:56:d5:4a:
2a:66:b1:12:03:c5:04:3a:9a:f5:b5:3b:95:af:bd:
31:e7:c7:ff:36:8d:b0:36:bd:e3:4f:a0:32:68:aa:
8f:ea:c8:75:e0:92:66:32:1f:a6:92:91:20:ae:94:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:86:D4:66:D0:4A:BD:C9:3F:63:3D:05:6D:80:EB:35:84:99:64
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.130.0/23
79.132.134.0/24
91.241.93.0/24
185.90.162.0/24
185.158.251.0/24
185.212.44.0/22
185.219.220.0/22
194.76.226.0/24
IPv6:
2a07:fc00::/48
2a0b:7140::/48
2a0b:7140:5::/48
Signature Algorithm: sha256WithRSAEncryption
01:bc:40:ee:7d:35:1b:70:3b:c8:55:3c:8e:7b:fd:7b:22:81:
3a:d7:9f:d0:87:5a:6f:66:57:0b:4c:8a:85:75:a2:d8:0e:3e:
11:c4:3c:44:13:69:06:a3:3c:25:54:ed:e2:ff:9a:46:84:49:
55:72:b4:7f:3a:72:86:b4:f7:23:4d:21:18:e0:68:98:9c:5a:
e5:ba:b2:b5:b9:db:47:c4:80:7e:ec:05:d2:bc:1e:87:e9:39:
2d:8f:87:1b:82:1d:07:e7:3d:f0:b7:8c:65:72:ea:17:07:f2:
03:1d:f3:e5:fe:c8:18:5a:8b:ce:9c:b2:4e:96:45:dc:71:ae:
c8:12:76:ae:5d:5c:f7:91:15:03:66:d5:28:51:bc:05:30:16:
ac:45:e2:9c:66:8a:57:1f:c8:74:84:42:95:b1:7d:f4:4e:c4:
17:ac:10:4d:ff:7d:da:5a:f0:38:0d:cb:ed:ad:10:fd:5a:f1:
63:70:45:93:6f:3b:88:53:0b:0b:79:5b:1e:63:e6:01:15:78:
dd:82:70:0f:ae:5a:19:c2:b3:ea:d1:86:8f:73:24:c5:71:85:
0e:21:1f:c5:3f:09:2b:f7:85:aa:c3:41:b9:00:a0:9b:43:7b:
56:ee:9d:fe:b1:12:2d:71:16:3c:ec:e7:24:39:9d:1f:6f:45:
12:7f:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:25 2025 by rpki-client