Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa
File: 5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa (raw, json)
Hash identifier: 9aHvAui4+yZdhtJErGw75MAtLb8+QGjtqwMfMZbFd3M=
Subject key identifier: E7:35:0A:99:19:BE:C1:5A:93:BA:71:76:B5:3F:BB:0A:AB:3F:39:6B
Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial: 019421446AF7517DCBB7CFC82541BEA2CCC1
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42459
IP address blocks: 79.134.48.0/20 maxlen: 32
79.134.56.0/21 maxlen: 24
193.32.0.0/23 maxlen: 23
193.32.4.0/23 maxlen: 23
212.45.64.0/20 maxlen: 32
212.45.64.0/21 maxlen: 24
212.45.65.0/24 maxlen: 24
212.45.67.0/24 maxlen: 24
212.45.72.0/21 maxlen: 24
2a02:2660::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6a:f7:51:7d:cb:b7:cf:c8:25:41:be:a2:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7350a9919bec15a93ba7176b53fbb0aab3f396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:30:82:dc:2b:9c:ec:9b:fd:6f:18:44:92:
45:3b:bb:1b:c3:a9:54:bb:e6:14:b1:a5:30:2d:7b:
08:71:09:47:61:56:c5:f2:df:f7:1b:bf:09:7b:95:
0a:a7:7f:6d:46:ab:86:e1:db:23:95:ce:3b:16:03:
31:d1:b6:38:2d:46:20:63:7d:6c:9c:de:7c:6f:fa:
3b:a7:74:62:64:0b:2f:95:73:92:ee:11:c8:ff:8f:
fc:d6:8d:38:dc:d7:91:cf:3c:ff:6f:a0:6d:75:db:
e2:9e:1c:80:a8:74:21:df:9b:e0:47:67:d4:65:ba:
54:92:c9:66:fb:76:7b:9d:56:38:a7:37:3c:af:76:
3f:05:e2:c8:be:c5:ed:74:14:8f:c3:72:db:44:32:
7e:9f:ed:26:87:de:91:4c:cb:60:67:21:e3:af:20:
60:5b:7f:68:6d:c8:0a:c2:f7:5a:b2:88:1e:4e:c1:
25:f1:b8:fc:65:ec:d2:f8:6b:9e:d0:3b:5a:7e:35:
d3:a6:85:94:26:f2:d4:9b:d4:10:eb:77:52:7d:4b:
b9:2f:45:bb:65:9e:c6:0c:a1:f4:95:e6:8b:59:34:
f8:99:a2:34:41:08:db:80:b4:9d:37:39:c9:7c:04:
37:f2:61:a8:80:3f:fe:6f:35:8a:a1:6d:d0:94:52:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:0A:99:19:BE:C1:5A:93:BA:71:76:B5:3F:BB:0A:AB:3F:39:6B
X509v3 Authority Key Identifier:
keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.48.0/20
193.32.0.0/23
193.32.4.0/23
212.45.64.0/20
IPv6:
2a02:2660::/32
Signature Algorithm: sha256WithRSAEncryption
85:1b:41:9b:b3:c3:bf:62:eb:ca:04:0b:46:95:3a:32:d4:98:
71:36:4b:c7:ac:4c:a2:9e:6d:08:ec:52:f8:15:01:89:36:3f:
8d:5a:fa:a4:48:25:50:69:c0:41:1e:b5:0a:e1:a0:c6:e6:c3:
8a:9e:c9:ab:62:db:01:ea:5d:d3:4f:9d:a9:a6:c7:79:f8:88:
6c:a2:52:86:38:96:cb:bd:bd:ce:a4:8a:37:c7:79:48:79:8c:
ae:a5:73:a6:f8:dd:ad:d6:f8:0b:c1:70:c3:1a:62:ab:85:66:
a9:14:da:0f:3d:a1:07:83:5e:04:b4:cf:ec:ce:10:b1:12:c8:
87:52:27:5b:29:eb:a6:41:92:f3:63:ff:bd:7e:1b:42:16:1f:
b2:fe:4d:48:24:e1:84:4d:8c:07:42:47:6c:56:00:0d:93:e8:
e2:07:52:c6:82:bb:dd:05:b0:11:57:b8:90:29:58:cd:d8:76:
02:cf:d2:d2:65:d8:d0:c1:6a:a2:80:03:98:fb:1a:5c:2f:ae:
bd:73:b7:0d:be:8c:4c:fe:ab:2b:f5:2e:bc:2e:df:67:56:d9:
4e:cf:7b:22:f9:5c:6e:73:d7:c4:78:f4:e1:92:23:e4:94:a2:
1f:4e:f7:13:94:3e:c7:99:6f:2e:d7:3c:a1:fe:36:2f:d2:b6:
b2:65:98:b8
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQhRGr3UX3Lt8/IJUG+oszBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmMwZDYwYmQzYTkwYmQ1ZTMxNTA5ZGVhZGY0NDcwNzZi
MDc4ZDgwHhcNMjUwMTAxMDk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzM1MGE5OTE5YmVjMTVhOTNiYTcxNzZiNTNmYmIwYWFiM2YzOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtywwgtwrnOyb/W8YRJJFO7sbw6lU
u+YUsaUwLXsIcQlHYVbF8t/3G78Je5UKp39tRquG4dsjlc47FgMx0bY4LUYgY31s
nN58b/o7p3RiZAsvlXOS7hHI/4/81o043NeRzzz/b6BtddvinhyAqHQh35vgR2fU
ZbpUkslm+3Z7nVY4pzc8r3Y/BeLIvsXtdBSPw3LbRDJ+n+0mh96RTMtgZyHjryBg
W39obcgKwvdasogeTsEl8bj8ZezS+Gue0DtafjXTpoWUJvLUm9QQ63dSfUu5L0W7
ZZ7GDKH0leaLWTT4maI0QQjbgLSdNznJfAQ38mGogD/+bzWKoW3QlFLMPwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOc1CpkZvsFak7pxdrU/uwqrPzlrMB8GA1UdIwQY
MBaAFOu8DWC9OpC9XjFQnerfRHB2sHjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMt
YTZiOTU5OTFjZDJjLzEvNXpVS21SbS13VnFUdW5GMnRULTdDcXNfT1dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMtYTZiOTU5OTFjZDJj
LzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQET4YwAwQB
wSAAAwQBwSAEAwQE1C1AMA0EAgACMAcDBQAqAiZgMA0GCSqGSIb3DQEBCwUAA4IB
AQCFG0Gbs8O/YuvKBAtGlToy1JhxNkvHrEyinm0I7FL4FQGJNj+NWvqkSCVQacBB
HrUK4aDG5sOKnsmrYtsB6l3TT52ppsd5+IhsolKGOJbLvb3OpIo3x3lIeYyupXOm
+N2t1vgLwXDDGmKrhWapFNoPPaEHg14EtM/szhCxEsiHUidbKeumQZLzY/+9fhtC
Fh+y/k1IJOGETYwHQkdsVgANk+jiB1LGgrvdBbARV7iQKVjN2HYCz9LSZdjQwWqi
gAOY+xpcL669c7cNvoxM/qsr9S68Lt9nVtlOz3si+Vxuc9fEePThkiPklKIfTvcT
lD7HmW8u1zyh/jYv0rayZZi4
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:10 2025 by rpki-client