Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rsBsc4l56Y4qOBQk3if_7k-J6BE.roa
File: rsBsc4l56Y4qOBQk3if_7k-J6BE.roa (raw, json)
Hash identifier: 4Ymg7FW6SZ0DQPOC/Bpgjr2siTVRauSckhNlr4d1Q7o=
Subject key identifier: AE:C0:6C:73:89:79:E9:8E:2A:38:14:24:DE:27:FF:EE:4F:89:E8:11
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195B42AF9931D8C5F20EE3C1F06C8A7FA9B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rsBsc4l56Y4qOBQk3if_7k-J6BE.roa
Signing time: Thu 20 Mar 2025 15:27:50 +0000
ROA not before: Thu 20 Mar 2025 15:27:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.200.0/23 maxlen: 24
79.172.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:2a:f9:93:1d:8c:5f:20:ee:3c:1f:06:c8:a7:fa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 20 15:27:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aec06c738979e98e2a381424de27ffee4f89e811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:1a:4e:74:29:95:2c:9d:7b:73:d9:bf:8a:
27:46:a9:64:ed:ca:06:34:de:9a:8f:59:f0:91:82:
96:9d:6e:5e:d3:92:a2:e7:b9:8a:a8:98:f7:6a:18:
0e:6c:e1:88:af:f2:2a:c3:4e:79:e2:3f:a5:88:8e:
93:1f:ab:af:aa:08:9e:8d:21:40:02:4a:6d:7a:75:
e6:65:83:5f:a5:db:43:cc:dc:be:88:63:0c:fc:5b:
a0:03:08:8b:22:f2:f8:7c:fc:7f:2e:f9:03:8b:4c:
c0:e9:89:ec:10:5b:e6:bf:9a:ec:6a:77:d5:23:9c:
da:be:aa:fe:f7:27:87:e7:d8:b8:b4:87:a4:30:a0:
0c:74:57:18:fb:45:1a:34:56:08:04:fe:66:78:d1:
18:f6:16:c4:58:bf:be:de:ac:47:4a:c5:79:39:9a:
88:ac:d5:3f:ce:81:ad:15:31:49:ce:47:c1:78:ee:
9e:12:6d:66:3e:b8:d9:f9:b7:57:ff:a0:eb:70:cd:
9d:8d:22:d5:9c:f8:2f:8e:81:89:c0:87:88:92:da:
71:9c:06:60:bd:a5:03:7b:fd:e8:bd:7f:47:cc:fb:
67:ae:31:69:f2:7c:0e:6c:92:df:4e:d2:ac:95:3f:
a9:99:29:f8:41:4a:d3:34:9b:fb:a7:2e:83:21:d9:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:6C:73:89:79:E9:8E:2A:38:14:24:DE:27:FF:EE:4F:89:E8:11
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rsBsc4l56Y4qOBQk3if_7k-J6BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.200.0/23
79.172.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:be:d7:30:b2:98:19:b8:ef:71:26:2b:8d:b4:82:9a:fc:ff:
2f:98:8c:d8:6e:82:40:d5:af:ce:d8:43:b4:81:47:64:d0:5e:
e5:c0:5d:d9:04:d6:53:da:c2:f7:2c:90:d0:8d:29:52:de:f3:
35:42:1f:53:bb:7f:d6:9a:31:de:3a:92:53:84:f6:05:ee:ed:
a3:8e:f2:6f:ed:65:59:7d:77:3d:d6:7a:78:c5:55:c8:ae:52:
4a:28:4b:d1:83:86:46:38:2d:87:1f:c1:8e:e3:14:65:ff:27:
cc:44:a2:f3:b2:ab:16:4c:af:ac:45:1a:29:85:78:03:60:e7:
02:4f:1c:29:2c:05:d7:24:c8:49:85:d9:55:a7:11:df:cb:73:
94:01:05:56:1e:8a:60:2e:d4:bc:2a:7d:34:b4:0e:ac:78:b1:
5b:01:f6:80:89:48:72:42:5d:28:50:f4:e4:08:ad:6b:25:ca:
9e:74:57:e6:66:57:e4:bc:a4:1d:30:78:fb:fc:5e:31:fd:1f:
cd:46:da:06:2e:42:8a:28:dc:d1:18:e6:97:1a:97:87:47:dd:
6d:f8:fa:a6:31:92:19:be:a2:e1:41:b9:65:e5:f1:97:63:95:
8b:d0:60:00:8b:d3:0e:57:b6:97:d1:e0:5b:60:2d:ae:ed:5e:
b4:75:e2:c7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZW0KvmTHYxfIO48HwbIp/qbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMzIwMTUyNzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWMwNmM3Mzg5NzllOThlMmEzODE0MjRkZTI3ZmZlZTRmODllODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3IaTnQplSyde3PZv4onRqlk7coG
NN6aj1nwkYKWnW5e05Ki57mKqJj3ahgObOGIr/Iqw0554j+liI6TH6uvqgiejSFA
AkptenXmZYNfpdtDzNy+iGMM/FugAwiLIvL4fPx/LvkDi0zA6YnsEFvmv5rsanfV
I5zavqr+9yeH59i4tIekMKAMdFcY+0UaNFYIBP5meNEY9hbEWL++3qxHSsV5OZqI
rNU/zoGtFTFJzkfBeO6eEm1mPrjZ+bdX/6DrcM2djSLVnPgvjoGJwIeIktpxnAZg
vaUDe/3ovX9HzPtnrjFp8nwObJLfTtKslT+pmSn4QUrTNJv7py6DIdmUzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK7AbHOJeemOKjgUJN4n/+5PiegRMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvcnNCc2M0bDU2WTRxT0JRazNpZl83ay1KNkJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBT6zAAwQB
T6zIAwQAT6zMMA0GCSqGSIb3DQEBCwUAA4IBAQALvtcwspgZuO9xJiuNtIKa/P8v
mIzYboJA1a/O2EO0gUdk0F7lwF3ZBNZT2sL3LJDQjSlS3vM1Qh9Tu3/WmjHeOpJT
hPYF7u2jjvJv7WVZfXc91np4xVXIrlJKKEvRg4ZGOC2HH8GO4xRl/yfMRKLzsqsW
TK+sRRophXgDYOcCTxwpLAXXJMhJhdlVpxHfy3OUAQVWHopgLtS8Kn00tA6seLFb
AfaAiUhyQl0oUPTkCK1rJcqedFfmZlfkvKQdMHj7/F4x/R/NRtoGLkKKKNzRGOaX
GpeHR91t+PqmMZIZvqLhQbll5fGXY5WL0GAAi9MOV7aX0eBbYC2u7V60deLH
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:03 2025 by rpki-client