Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa
File: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (raw, json)
Hash identifier: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=
Subject key identifier: EF:83:DC:F9:DD:5C:20:30:76:70:9C:0F:C0:C6:4A:44:2D:92:1E:56
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01958E5CEECFDC3539F3FCF4CE501C24F5AA
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa
Signing time: Thu 13 Mar 2025 07:16:49 +0000
ROA not before: Thu 13 Mar 2025 07:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.0.0/16 maxlen: 16
79.106.0.0/17 maxlen: 17
79.106.0.0/19 maxlen: 19
79.106.0.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.48.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.94.0/23 maxlen: 23
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.101.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.104.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.117.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.120.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.126.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/17 maxlen: 17
79.106.128.0/19 maxlen: 19
79.106.160.0/19 maxlen: 19
79.106.162.0/24 maxlen: 24
79.106.173.0/24 maxlen: 24
79.106.176.0/21 maxlen: 21
79.106.192.0/19 maxlen: 19
79.106.194.0/23 maxlen: 23
79.106.195.0/24 maxlen: 24
79.106.196.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.225.0/24 maxlen: 24
79.106.226.0/24 maxlen: 24
79.106.228.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.230.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.240.0/21 maxlen: 21
79.106.240.0/23 maxlen: 23
79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.246.0/23 maxlen: 23
79.106.254.0/24 maxlen: 24
79.106.255.0/24 maxlen: 24
185.171.144.0/22 maxlen: 22
185.171.144.0/23 maxlen: 23
185.171.146.0/23 maxlen: 23
185.171.146.0/24 maxlen: 24
185.171.147.0/24 maxlen: 24
217.24.240.0/20 maxlen: 20
217.24.240.0/21 maxlen: 21
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/29 maxlen: 29
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc1::/32 maxlen: 32
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:5c:ee:cf:dc:35:39:f3:fc:f4:ce:50:1c:24:f5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Mar 13 07:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef83dcf9dd5c203076709c0fc0c64a442d921e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:04:40:04:46:6f:8f:82:95:5c:56:43:19:
89:2c:a0:36:e7:32:61:d8:4a:5a:c0:65:db:94:2c:
c5:9c:27:a8:2b:48:a6:c7:48:38:17:bb:a3:08:ad:
a7:8b:96:2b:a6:a7:09:01:97:c5:41:17:b7:eb:8c:
c7:ed:4a:ef:15:eb:92:49:ed:27:66:5a:01:d9:bd:
05:21:5c:aa:f1:04:ec:d4:d9:b2:45:cb:00:6d:62:
30:4d:ca:65:1e:8b:70:6b:a7:40:8b:78:98:ce:34:
c7:ca:17:f2:15:2d:84:8e:48:38:cd:97:1d:e4:90:
ff:3c:46:11:29:a4:8c:87:42:61:6b:c8:86:00:44:
93:d6:d3:af:29:50:85:58:49:e7:7a:74:2d:75:f4:
9b:cd:65:f8:a2:f2:76:0d:74:2d:82:c4:e6:b0:a2:
7e:e9:37:65:8f:1e:0c:17:f4:a3:e9:8c:6d:74:24:
dc:fe:39:b7:e4:bb:41:2a:27:9c:2b:d6:67:6c:20:
7c:93:c5:af:75:45:0f:a9:cb:ab:a3:c4:67:5e:3d:
3b:65:19:98:63:4d:b7:41:69:b0:c8:f7:13:62:05:
2e:a8:6c:f1:65:a4:ca:59:09:62:a9:fd:54:a1:bc:
4f:62:4c:72:99:4d:4d:86:97:e8:df:73:0e:1a:8a:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:DC:F9:DD:5C:20:30:76:70:9C:0F:C0:C6:4A:44:2D:92:1E:56
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0/22
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
08:19:94:c9:62:4f:20:19:eb:48:fa:63:29:cf:e8:62:33:5d:
31:7b:86:da:fd:8a:16:1c:0a:02:1f:1a:21:7f:2f:e9:f4:88:
6f:3d:53:e9:d8:7f:01:71:6a:2d:4d:21:75:d6:c7:bc:07:d7:
d7:69:23:26:e8:55:67:1e:41:5e:2b:08:e2:6f:03:8e:cb:a7:
f6:98:c7:8f:53:f0:e4:c7:54:f5:f2:e0:03:4a:16:8e:19:c0:
7d:95:77:84:b8:01:39:12:e1:ec:9c:e8:c5:db:46:66:31:52:
2b:2a:98:4f:4b:6c:00:c6:2f:9b:2d:fa:61:d6:5c:b8:ca:65:
6c:45:fb:2f:14:9a:cc:77:bd:ee:81:ab:1d:9a:ba:cb:25:d1:
8d:c9:41:19:1d:e5:b5:9a:c7:27:17:a0:50:45:51:4f:e0:3c:
41:05:89:ab:0b:94:02:62:cc:1d:ec:8a:1e:f1:b5:41:ec:6d:
55:ac:c5:28:a7:41:be:b3:a6:e7:39:dc:ae:ab:e5:e1:4e:56:
f8:ff:e2:f4:c7:95:a6:d9:b5:13:59:7e:e5:47:92:cd:42:35:
31:19:b7:89:d4:39:01:dd:f2:a7:c8:07:44:4e:5b:8a:40:4d:
bb:a2:31:df:8a:69:5c:d0:93:4b:68:4b:e7:df:6f:f8:0c:38:
f6:70:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net