Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: LU1t+zPhFHw3f1yREkemwxTp7nxFkJbSFT21Xp655/k=
Subject key identifier: 7B:AB:4C:C1:EF:ED:59:A0:B6:AA:00:FA:5B:3D:3C:A0:C4:C5:DC:E5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 15D18D6017099695DAEE7B2C0D17FA2CD2806AC2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
Signing time: Thu 27 Mar 2025 21:41:04 +0000
ROA not before: Thu 27 Mar 2025 21:36:04 +0000
ROA not after: Thu 26 Mar 2026 21:41:04 +0000
asID: 6079
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.124.0/22 maxlen: 22
82.22.128.0/21 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.36.0/22 maxlen: 24
82.25.0.0/22 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d1:8d:60:17:09:96:95:da:ee:7b:2c:0d:17:fa:2c:d2:80:6a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 21:36:04 2025 GMT
Not After : Mar 26 21:41:04 2026 GMT
Subject: CN=7BAB4CC1EFED59A0B6AA00FA5B3D3CA0C4C5DCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:9b:f1:44:51:aa:ea:d7:be:5e:7f:3e:20:
6a:68:1a:24:8e:51:64:cf:a2:21:b4:aa:b4:b7:e1:
b4:d2:0f:5b:6a:8f:c1:bf:2e:1d:80:48:89:0d:ec:
fe:c7:52:be:c2:77:d7:02:24:8e:38:08:a2:a4:cb:
8b:a4:50:37:8f:b1:86:02:0e:33:0f:1f:90:94:e1:
c6:5f:f8:be:10:7f:e5:59:eb:9c:d8:10:6b:e6:70:
69:cd:05:4c:da:49:ea:65:98:7a:1c:5f:08:cb:f1:
d4:73:9e:c1:f9:36:7c:02:05:04:d3:6c:49:d3:4d:
61:59:4f:27:b5:3b:ac:a8:07:e5:05:54:ce:26:15:
16:36:a7:58:a9:78:7c:28:78:e3:9c:02:97:a2:f9:
89:34:3c:44:65:eb:11:06:08:3a:57:0f:a0:7e:0c:
6f:e2:dd:62:12:3c:15:6f:34:bf:d2:e9:19:f7:dd:
1a:c7:9c:4d:ef:09:1d:80:7d:51:e4:75:2d:5a:9e:
cd:68:57:7b:f8:bf:29:95:5e:e4:07:d2:28:a0:46:
ef:da:8e:f1:69:e5:0d:15:f3:f7:ef:e1:45:81:55:
29:44:a3:ca:fb:33:b8:8a:8a:78:3a:89:17:02:17:
4a:75:37:cd:3b:44:15:4d:45:ba:06:83:03:99:57:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:4C:C1:EF:ED:59:A0:B6:AA:00:FA:5B:3D:3C:A0:C4:C5:DC:E5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.124.0-82.22.139.255
82.22.148.0-82.22.155.255
82.23.152.0/21
82.24.36.0/22
82.25.0.0/22
82.27.24.0/21
82.27.48.0/20
82.27.136.0-82.27.159.255
82.27.168.0/21
Signature Algorithm: sha256WithRSAEncryption
78:7c:56:8f:dd:9f:a0:2d:0e:1c:5d:7e:84:76:38:d5:48:a5:
bc:de:f9:3f:d1:94:61:87:5a:35:42:78:a5:db:b9:2e:20:8a:
9b:51:b9:92:69:c8:ba:f1:e2:7d:98:10:ac:13:84:69:0d:e0:
4b:2d:1d:48:e9:6a:ac:4f:53:bf:47:fb:e5:fd:a7:b9:d9:bc:
a0:d6:fd:b4:8b:70:99:1c:16:10:5e:99:20:89:ea:f6:e9:22:
3e:36:fd:ba:ee:ed:db:4f:9c:a3:91:5e:ef:e6:f8:c5:46:4f:
c2:f4:8e:0d:5e:5a:55:44:6e:e5:49:0a:5a:9d:c1:6a:3f:11:
b2:37:38:b1:52:78:16:e4:b8:a5:a5:71:b1:55:0a:ec:13:25:
a0:2f:54:1a:d8:df:c8:86:dd:e2:90:df:c9:cd:6b:58:35:d2:
6e:d2:36:8f:cd:be:12:93:c5:37:5f:ad:00:da:5e:53:08:56:
0f:f4:06:73:92:a4:ee:84:22:59:5c:86:41:6e:01:3a:ef:6f:
3e:af:f0:bc:e8:5a:d8:b6:90:d3:b4:dd:c7:36:84:07:9e:92:
4e:29:18:1f:0d:3f:2c:0b:35:3a:86:35:be:eb:39:b0:4e:9d:
cd:8a:df:5d:53:18:70:0d:7e:5f:89:7b:1e:80:ab:81:9c:c6:
7b:de:7f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:47 2025 by rpki-client