Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/v3SWv1n837zLkNGdleDKsMBQDv0.roa
File: v3SWv1n837zLkNGdleDKsMBQDv0.roa (raw, json)
Hash identifier: O8MJh8aunH8A9IiDr50FU3GzSB/FL6Wl7jBlBla6VVI=
Subject key identifier: BF:74:96:BF:59:FC:DF:BC:CB:90:D1:9D:95:E0:CA:B0:C0:50:0E:FD
Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial: 0194214469CEE19869EEBC796A3B370E7124
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/v3SWv1n837zLkNGdleDKsMBQDv0.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25076
IP address blocks: 79.134.48.0/21 maxlen: 24
79.134.58.0/23 maxlen: 24
212.45.72.0/23 maxlen: 23
212.45.74.0/24 maxlen: 24
212.45.75.0/24 maxlen: 24
212.45.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:69:ce:e1:98:69:ee:bc:79:6a:3b:37:0e:71:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf7496bf59fcdfbccb90d19d95e0cab0c0500efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:f9:ba:f9:7b:f3:54:44:c1:4f:9e:74:b4:
3b:bc:1b:90:83:34:69:89:0c:ea:e7:5a:8f:e9:58:
ce:03:4c:e6:5f:7d:e4:3c:a9:b6:92:21:52:7c:47:
02:aa:19:f3:f8:9a:ca:9a:ea:cd:91:4a:2e:41:6e:
38:e0:92:70:6a:f9:dd:b9:3f:40:68:f8:23:20:c8:
c7:b1:0e:c6:95:55:33:92:2d:c1:0e:30:d8:07:13:
bf:3c:d5:6b:8b:e5:65:2c:8e:a5:57:c7:98:7e:e6:
76:20:71:00:c2:a7:f3:b8:5a:2c:32:6a:28:59:aa:
ff:c5:63:0e:9d:76:a2:f9:7a:d8:be:ca:d2:df:94:
1b:ff:11:bf:39:7e:0e:e4:15:c6:89:4c:a2:b8:45:
5c:f2:5c:4a:dd:50:0e:a7:45:12:95:40:85:af:62:
ef:06:d3:4d:47:80:3e:8c:f5:90:32:fd:95:74:17:
1d:c7:52:96:3a:45:fc:98:51:c3:00:90:5f:37:dc:
4f:b4:d0:0a:67:dc:fd:64:ed:4f:db:b3:d9:d9:a6:
e1:10:0b:fd:2a:15:9a:b8:eb:b0:9a:3f:60:2e:96:
fc:5a:bf:ca:b8:e4:e7:fe:c6:c6:2b:6e:4f:d2:63:
38:64:1e:03:28:06:31:76:e5:0e:3b:2b:71:54:d2:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:96:BF:59:FC:DF:BC:CB:90:D1:9D:95:E0:CA:B0:C0:50:0E:FD
X509v3 Authority Key Identifier:
keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/v3SWv1n837zLkNGdleDKsMBQDv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.48.0/21
79.134.58.0/23
212.45.72.0/21
Signature Algorithm: sha256WithRSAEncryption
96:d5:db:d6:67:30:17:c0:ad:22:84:a1:f2:59:95:d0:d4:75:
45:1c:fd:95:83:78:44:7f:3f:d3:66:3b:05:16:44:20:d5:07:
51:fd:a7:5d:24:75:cf:ef:c4:09:38:dd:a3:79:1b:48:cc:ab:
ff:06:b0:a4:64:ea:f9:18:cb:42:ee:5e:54:3f:29:2a:a6:9c:
f3:f3:4a:94:8f:9c:a0:b1:4f:ef:f5:e9:d2:af:80:c0:f0:f4:
b0:cc:37:77:5b:62:a9:60:3c:6f:0a:cc:53:9e:8a:35:70:c8:
ec:76:2c:26:fb:8a:09:eb:2a:07:94:4b:32:f4:50:21:b8:81:
dd:d3:7d:2b:2c:53:e3:21:d9:ff:ce:f8:aa:52:ae:1e:71:7c:
f7:57:db:62:bc:ac:cf:64:30:d7:ef:31:80:97:e4:ed:da:44:
88:33:9c:c0:80:f0:69:54:fc:f9:77:f7:13:6d:25:66:e7:70:
7c:ae:f8:88:96:9a:05:5a:16:57:b7:0f:6c:1c:6c:c9:60:c8:
bf:67:71:db:d7:49:21:9c:b0:d6:fc:2e:6b:06:07:6f:16:c8:
99:88:77:27:b3:90:ec:90:f6:c6:49:8a:fd:0f:5a:68:d2:41:
00:cd:02:84:74:40:33:50:a9:c4:17:20:ec:52:76:17:d0:ed:
5f:03:13:c1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhRGnO4Zhp7rx5ajs3DnEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmMwZDYwYmQzYTkwYmQ1ZTMxNTA5ZGVhZGY0NDcwNzZi
MDc4ZDgwHhcNMjUwMTAxMDk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjc0OTZiZjU5ZmNkZmJjY2I5MGQxOWQ5NWUwY2FiMGMwNTAwZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE75uvl781REwU+edLQ7vBuQgzRp
iQzq51qP6VjOA0zmX33kPKm2kiFSfEcCqhnz+JrKmurNkUouQW444JJwavnduT9A
aPgjIMjHsQ7GlVUzki3BDjDYBxO/PNVri+VlLI6lV8eYfuZ2IHEAwqfzuFosMmoo
War/xWMOnXai+XrYvsrS35Qb/xG/OX4O5BXGiUyiuEVc8lxK3VAOp0USlUCFr2Lv
BtNNR4A+jPWQMv2VdBcdx1KWOkX8mFHDAJBfN9xPtNAKZ9z9ZO1P27PZ2abhEAv9
KhWauOuwmj9gLpb8Wr/KuOTn/sbGK25P0mM4ZB4DKAYxduUOOytxVNK9vwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL90lr9Z/N+8y5DRnZXgyrDAUA79MB8GA1UdIwQY
MBaAFOu8DWC9OpC9XjFQnerfRHB2sHjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMt
YTZiOTU5OTFjZDJjLzEvdjNTV3YxbjgzN3pMa05HZGxlREtzTUJRRHYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMtYTZiOTU5OTFjZDJj
LzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDT4YwAwQB
T4Y6AwQD1C1IMA0GCSqGSIb3DQEBCwUAA4IBAQCW1dvWZzAXwK0ihKHyWZXQ1HVF
HP2Vg3hEfz/TZjsFFkQg1QdR/addJHXP78QJON2jeRtIzKv/BrCkZOr5GMtC7l5U
Pykqppzz80qUj5ygsU/v9enSr4DA8PSwzDd3W2KpYDxvCsxTnoo1cMjsdiwm+4oJ
6yoHlEsy9FAhuIHd030rLFPjIdn/zviqUq4ecXz3V9tivKzPZDDX7zGAl+Tt2kSI
M5zAgPBpVPz5d/cTbSVm53B8rviIlpoFWhZXtw9sHGzJYMi/Z3Hb10khnLDW/C5r
BgdvFsiZiHcns5DskPbGSYr9D1po0kEAzQKEdEAzUKnEFyDsUnYX0O1fAxPB
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:59 2025 by rpki-client on console.sobornost.net