Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa
File: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (raw, json)
Hash identifier: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=
Subject key identifier: DB:30:46:EB:0B:F4:CC:A0:5E:D9:79:5B:1A:47:CB:2F:DA:CE:76:D6
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 0194236904F9F94FCDEFB0B9E88F34A90CCF
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 79.170.16.0/24 maxlen: 24
79.170.17.0/24 maxlen: 24
79.170.18.0/24 maxlen: 24
79.170.19.0/24 maxlen: 24
79.170.20.0/24 maxlen: 24
79.170.21.0/24 maxlen: 24
79.170.22.0/24 maxlen: 24
79.170.23.0/24 maxlen: 24
153.112.132.0/24 maxlen: 24
153.112.133.0/24 maxlen: 24
153.112.134.0/24 maxlen: 24
153.112.135.0/24 maxlen: 24
153.112.139.0/24 maxlen: 24
153.112.149.0/24 maxlen: 24
153.112.150.0/24 maxlen: 24
153.112.151.0/24 maxlen: 24
153.112.160.0/24 maxlen: 24
153.112.161.0/24 maxlen: 24
153.112.162.0/24 maxlen: 24
153.112.163.0/24 maxlen: 24
153.112.164.0/24 maxlen: 24
153.112.165.0/24 maxlen: 24
153.112.166.0/24 maxlen: 24
153.112.167.0/24 maxlen: 24
153.112.173.0/24 maxlen: 24
153.112.176.0/24 maxlen: 24
153.112.177.0/24 maxlen: 24
153.112.178.0/24 maxlen: 24
153.112.179.0/24 maxlen: 24
153.112.180.0/24 maxlen: 24
153.112.181.0/24 maxlen: 24
153.112.182.0/24 maxlen: 24
153.112.183.0/24 maxlen: 24
153.112.184.0/24 maxlen: 24
153.112.185.0/24 maxlen: 24
153.112.186.0/24 maxlen: 24
153.112.187.0/24 maxlen: 24
153.112.188.0/24 maxlen: 24
153.112.189.0/24 maxlen: 24
153.112.190.0/24 maxlen: 24
153.112.191.0/24 maxlen: 24
153.112.208.0/24 maxlen: 24
153.112.209.0/24 maxlen: 24
153.112.240.0/24 maxlen: 24
153.112.241.0/24 maxlen: 24
192.138.109.0/24 maxlen: 24
192.138.110.0/24 maxlen: 24
192.138.111.0/24 maxlen: 24
192.138.116.0/24 maxlen: 24
192.138.117.0/24 maxlen: 24
192.157.8.0/24 maxlen: 24
192.157.9.0/24 maxlen: 24
192.157.10.0/24 maxlen: 24
192.157.11.0/24 maxlen: 24
2a02:f784:20::/48 maxlen: 48
2a02:f784:30::/48 maxlen: 48
2a02:f784:8000::/48 maxlen: 48
2a02:f784:8001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:04:f9:f9:4f:cd:ef:b0:b9:e8:8f:34:a9:0c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db3046eb0bf4cca05ed9795b1a47cb2fdace76d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:d0:97:9e:3e:54:1b:f2:2d:fc:f6:7e:43:
ff:b4:6a:e6:91:11:dc:da:07:af:01:e5:89:63:ec:
e1:17:b8:73:4e:68:7e:67:b2:b4:ae:91:c6:36:1f:
9c:aa:b6:fd:5c:7e:dd:5f:dc:e1:d7:85:27:eb:69:
17:8e:22:f6:c6:a5:a2:4b:ae:18:1f:01:09:6e:73:
ce:c4:18:d6:7d:43:70:09:61:13:25:39:cf:cf:1b:
ee:70:d0:33:d0:17:f6:da:be:c4:10:38:0c:b2:e7:
d9:96:a8:ae:2b:49:80:0a:0a:42:0e:17:69:48:75:
fe:19:57:72:84:72:82:52:d8:36:a7:3a:65:eb:ef:
30:50:ef:7d:5e:42:2c:0e:81:c4:a8:ae:3c:bc:e5:
92:ef:0b:fd:fa:3a:ef:46:c8:0c:a9:35:9b:3f:87:
56:f1:63:3d:26:a9:a2:f9:39:f3:04:12:92:87:74:
57:3a:8c:08:ea:da:1d:12:27:22:41:89:26:52:22:
96:56:3d:02:6d:a7:3a:90:d3:b1:93:2e:34:18:fa:
23:7f:db:df:20:3d:c4:4c:a6:3b:43:e4:26:81:5c:
48:ed:4a:32:a2:20:c7:18:6a:79:aa:9a:27:26:5c:
13:56:4a:1a:cf:e6:0b:07:a0:55:4a:5b:5a:b4:3b:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:30:46:EB:0B:F4:CC:A0:5E:D9:79:5B:1A:47:CB:2F:DA:CE:76:D6
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.16.0/21
153.112.132.0/22
153.112.139.0/24
153.112.149.0-153.112.151.255
153.112.160.0/21
153.112.173.0/24
153.112.176.0/20
153.112.208.0/23
153.112.240.0/23
192.138.109.0-192.138.111.255
192.138.116.0/23
192.157.8.0/22
IPv6:
2a02:f784:20::/48
2a02:f784:30::/48
2a02:f784:8000::/47
Signature Algorithm: sha256WithRSAEncryption
31:d8:1d:a5:8a:9d:a8:e3:64:fb:0a:32:ce:7e:b6:fd:9e:0d:
81:4c:a7:86:53:14:c1:74:0a:cf:a6:82:92:2e:fc:14:9c:2f:
36:59:c6:ec:76:b9:23:0d:a1:fe:f8:04:f8:26:2c:9c:a8:32:
4f:1c:25:91:45:cd:c8:34:fc:11:c4:c7:e5:c5:49:89:07:c8:
ab:55:7c:65:9f:20:42:23:6b:fb:b8:0b:c7:e4:92:de:5e:89:
ac:61:63:d3:a4:77:d6:c0:1a:72:08:b9:e1:77:ec:d6:50:99:
e3:75:d7:ce:96:df:ca:14:82:06:75:d0:43:67:67:71:d1:f5:
1b:77:2d:bd:00:cd:82:04:8b:a8:fd:10:5a:9a:8f:63:94:e2:
f7:6c:2f:21:14:3d:96:ce:4e:19:cf:28:d2:ce:19:1a:da:35:
1e:a8:37:86:47:4f:db:15:3f:08:db:c3:1b:20:ac:3e:a1:49:
41:4b:f4:5e:3d:fd:e9:38:42:5d:f2:76:57:e5:d7:e8:f6:90:
b7:9f:95:49:ca:15:48:e0:39:cb:ca:88:b6:66:28:fb:82:f5:
b1:07:59:1e:ff:61:58:f6:75:bf:bc:a5:b5:54:3e:2e:ac:57:
78:de:e8:df:90:44:87:ec:4b:6e:bc:cc:09:2b:b0:6a:8f:2e:
0f:7e:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:49 2025 by rpki-client