Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: lKBjUMVw/GqWD6Zs4IECVCxcuFa5KHQpgZlKttNE0wM=
Subject key identifier: 00:92:D1:1E:95:1F:AA:98:68:FD:D1:DD:BB:18:AC:A5:86:03:C6:CF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7AA021D3BDF2BACE0EFBA52A3D920C056619A6B4
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time: Thu 27 Mar 2025 19:39:34 +0000
ROA not before: Thu 27 Mar 2025 19:34:34 +0000
ROA not after: Thu 26 Mar 2026 19:39:34 +0000
asID: 6079
IP address blocks: 95.135.173.0/24 maxlen: 24
95.135.178.0/24 maxlen: 24
95.135.179.0/24 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.221.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a0:21:d3:bd:f2:ba:ce:0e:fb:a5:2a:3d:92:0c:05:66:19:a6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 27 19:34:34 2025 GMT
Not After : Mar 26 19:39:34 2026 GMT
Subject: CN=0092D11E951FAA9868FDD1DDBB18ACA58603C6CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:30:f5:b3:61:37:83:e1:b4:d2:22:99:58:
ef:25:f3:de:8c:78:4a:bc:e4:cb:be:56:8a:67:a9:
c1:92:af:9f:16:df:31:9e:c7:52:31:a4:d1:50:6d:
5f:20:95:c0:e8:ac:e8:c5:41:d5:51:5c:5a:38:a1:
29:de:f8:43:9e:fd:dc:db:ef:11:32:e5:ec:9a:23:
31:02:75:c3:4b:7c:a8:50:6c:50:34:00:19:30:ae:
1e:6c:0a:c6:74:f1:bc:da:5c:59:c2:8b:62:97:66:
a9:26:aa:02:d9:86:1d:b9:8a:d1:af:b2:7c:da:fa:
91:be:46:d8:01:02:c1:5e:6c:a8:a0:62:c9:de:ca:
e1:91:f6:92:c2:de:34:66:03:06:15:f8:82:9c:b3:
fc:ed:d0:e9:49:ce:93:d1:13:96:2d:30:05:db:10:
c9:6c:05:de:2e:53:06:87:d5:51:d5:45:d7:bd:89:
55:03:4e:af:76:ee:ad:df:bc:e6:65:d7:e2:bd:35:
51:ca:0b:2b:0c:1d:69:10:da:18:4b:69:fd:54:49:
7e:af:3b:b8:14:04:2e:14:93:f7:3a:82:4f:06:b8:
54:7e:48:52:2e:da:f9:4a:ce:49:ba:4b:31:41:b7:
b3:0b:3d:b1:41:b0:5c:ba:35:71:ff:03:b5:6f:78:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:92:D1:1E:95:1F:AA:98:68:FD:D1:DD:BB:18:AC:A5:86:03:C6:CF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.173.0/24
95.135.178.0/23
95.135.210.0/24
95.135.221.0/24
95.135.228.0/24
95.135.230.0/24
95.135.233.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d9:62:f2:6b:af:07:64:90:07:10:f4:be:97:f0:a3:9d:9c:
7f:ee:98:ae:82:f5:90:93:0d:2d:ae:d2:dd:c3:ae:8e:bc:d4:
c8:15:91:4f:bc:ed:7f:17:88:61:b8:29:7a:fe:d1:f4:74:45:
3a:ad:1b:66:1d:7f:14:24:bf:70:2e:39:ec:f1:9e:d4:0b:ec:
60:99:e7:9c:f3:0f:fe:1c:a3:ce:0e:3e:e6:60:92:5c:02:9a:
4a:07:e3:12:e0:33:2f:52:b5:f8:54:d3:24:97:72:f7:e1:0f:
19:63:ca:4a:60:aa:3d:97:98:d1:10:df:b9:67:8f:08:f5:78:
c7:b3:92:e3:af:3d:ef:dc:b0:e2:74:ea:0a:74:fc:6e:2e:c9:
26:56:d1:1c:80:f4:de:d8:67:69:c0:1d:e1:89:70:89:2e:8e:
24:58:c7:76:39:2c:9e:78:60:ef:2e:23:0a:17:62:e2:05:26:
a1:ea:9e:63:e9:e0:28:31:bb:29:94:6b:6e:81:89:92:f7:6e:
e3:09:6e:51:40:a4:4f:d9:a7:ee:6f:8c:bc:42:3a:ee:45:aa:
41:45:8c:e3:35:c4:cb:58:cf:51:48:df:03:5b:1c:0f:8d:8f:
ea:b8:15:52:e8:b6:b3:84:7a:15:4b:9f:8f:01:d2:bc:6a:ac:
86:3f:0c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:46 2025 by rpki-client