Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/ac_ZR0uyAlaCoYYTyxabMzs0ruQ.roa
File: ac_ZR0uyAlaCoYYTyxabMzs0ruQ.roa (raw, json)
Hash identifier: 2lsdqjwrAVWCJd53FIUYeMEFwheNjGGCw24m80TwAaw=
Subject key identifier: 69:CF:D9:47:4B:B2:02:56:82:A1:86:13:CB:16:9B:33:3B:34:AE:E4
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 019425FD3D33DF043F612B484168407D43A8
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/ac_ZR0uyAlaCoYYTyxabMzs0ruQ.roa
Signing time: Thu 02 Jan 2025 07:49:00 +0000
ROA not before: Thu 02 Jan 2025 07:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.0.0/16 maxlen: 16
79.106.0.0/17 maxlen: 17
79.106.0.0/19 maxlen: 19
79.106.0.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.48.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.94.0/23 maxlen: 23
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.101.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.104.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.117.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.120.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.126.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/17 maxlen: 17
79.106.128.0/19 maxlen: 19
79.106.160.0/19 maxlen: 19
79.106.162.0/24 maxlen: 24
79.106.173.0/24 maxlen: 24
79.106.176.0/21 maxlen: 21
79.106.192.0/19 maxlen: 19
79.106.194.0/23 maxlen: 23
79.106.195.0/24 maxlen: 24
79.106.196.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.228.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.230.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.240.0/21 maxlen: 21
79.106.240.0/23 maxlen: 23
79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.246.0/23 maxlen: 23
79.106.254.0/24 maxlen: 24
79.106.255.0/24 maxlen: 24
185.171.144.0/22 maxlen: 22
185.171.144.0/23 maxlen: 23
185.171.146.0/23 maxlen: 23
185.171.146.0/24 maxlen: 24
185.171.147.0/24 maxlen: 24
217.24.240.0/20 maxlen: 20
217.24.240.0/21 maxlen: 21
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/29 maxlen: 29
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc1::/32 maxlen: 32
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:3d:33:df:04:3f:61:2b:48:41:68:40:7d:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jan 2 07:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cfd9474bb2025682a18613cb169b333b34aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:4a:43:7a:ce:f1:42:83:de:a0:d6:83:d0:
c0:c3:85:d8:25:b6:29:23:d4:4f:09:bd:7d:a1:b9:
ee:25:0b:49:8d:c1:a9:13:cc:75:ff:7a:2b:3e:2c:
dc:22:37:b9:a5:8d:85:b6:e4:ce:97:69:d4:62:98:
85:ce:27:da:2d:20:86:24:45:d2:9b:ba:8a:d1:62:
ed:c2:8e:3a:e6:6f:e8:a8:38:8c:4b:7d:50:3a:4c:
b8:14:2a:54:47:72:e8:c7:18:fc:1e:00:54:d5:27:
a5:36:c5:4e:90:94:da:b6:22:21:6f:33:1a:cf:55:
4c:ab:70:20:2b:3c:4d:0b:5f:7b:9e:a5:fb:72:b2:
40:2d:cf:fc:47:ea:d7:94:b7:49:15:82:cc:df:58:
3f:26:84:5c:90:3f:2b:49:b9:66:9b:2c:c5:51:cc:
8b:1f:19:e9:37:c7:c6:b7:05:1a:b8:da:1a:2f:aa:
e0:88:c0:30:d0:0d:f4:5b:ac:79:37:97:1c:b4:84:
ba:b7:56:e1:3a:69:72:7f:42:af:b6:64:b9:b5:cc:
a4:b6:31:d8:52:b5:b8:e9:18:ff:35:1e:db:67:79:
de:bd:13:39:f5:72:49:49:5f:e0:81:81:c6:ad:bd:
0c:0f:15:6a:38:14:40:de:88:c1:33:e3:63:23:be:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CF:D9:47:4B:B2:02:56:82:A1:86:13:CB:16:9B:33:3B:34:AE:E4
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/ac_ZR0uyAlaCoYYTyxabMzs0ruQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0/22
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
af:d4:a8:50:95:68:bf:57:c0:76:37:31:13:f0:3c:c8:76:a9:
04:ab:a1:0d:70:35:46:6a:36:54:35:76:3b:0a:7e:ba:69:22:
26:3f:64:38:20:60:bc:eb:f6:a9:d5:b0:79:e4:c4:3e:e6:04:
a5:07:48:ce:a2:cb:92:53:67:00:d7:8e:d1:85:34:ff:ca:db:
af:c6:33:76:1a:be:a5:f8:71:54:6a:ab:45:bc:91:77:61:b6:
0e:12:10:e4:bb:37:ab:3a:54:52:a9:e4:ed:46:db:88:33:10:
b6:88:fb:d0:77:cd:03:18:fd:86:20:e0:62:3a:6d:02:19:43:
6c:41:9f:05:9e:1f:c5:17:82:56:5d:b0:6c:81:9a:97:02:5d:
4c:dc:d4:16:36:ec:f7:10:6d:6c:6d:8f:0d:5b:a9:e3:76:71:
27:5f:41:e7:2a:e6:e5:21:cb:c7:32:a4:87:1a:3b:45:af:0c:
a1:0e:60:46:b8:6b:19:d6:8d:f1:88:57:92:c4:d5:cd:20:b8:
8d:4d:7f:47:f8:82:9e:7b:d3:30:c6:03:e5:66:5e:ef:c0:9b:
28:17:7f:0d:d0:5e:03:51:e9:a8:24:c5:6e:de:82:89:6b:04:
17:63:09:a3:d4:0c:09:3d:aa:68:11:0f:c5:59:a1:1e:d2:3f:
f1:f4:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:33 2025 by rpki-client