Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/EGlVEH0t1gc2k3CbZYwnROsYmlo.roa
File: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (raw, json)
Hash identifier: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=
Subject key identifier: 10:69:55:10:7D:2D:D6:07:36:93:70:9B:65:8C:27:44:EB:18:9A:5A
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019425FDA4509968A087525440AF1B48BF2B
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/EGlVEH0t1gc2k3CbZYwnROsYmlo.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43845
IP address blocks: 79.170.200.0/24 maxlen: 24
79.170.201.0/24 maxlen: 24
79.170.202.0/24 maxlen: 24
79.170.203.0/24 maxlen: 24
79.170.204.0/24 maxlen: 24
79.170.205.0/24 maxlen: 24
79.170.206.0/24 maxlen: 24
79.170.207.0/24 maxlen: 24
2a09:6c80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:50:99:68:a0:87:52:54:40:af:1b:48:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=106955107d2dd6073693709b658c2744eb189a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:f3:b2:13:a8:62:54:76:75:7c:8d:d8:b8:
5a:60:fd:99:49:ef:04:f0:ae:a4:41:6f:e9:1e:93:
9a:73:dd:ea:bc:12:a0:e8:89:ff:45:95:69:47:bd:
ab:d2:1b:97:05:6b:c7:be:0a:99:50:86:86:bb:00:
4d:07:bf:89:cf:3c:8c:fe:2c:34:37:de:cf:65:fe:
7f:fe:f8:f2:eb:46:e5:5c:a4:8a:a6:34:7c:c1:0e:
45:b9:c6:20:25:33:47:cb:18:12:82:53:a1:b3:df:
14:8a:ad:eb:1d:89:b7:62:4f:4f:42:9b:f5:e7:d7:
a2:d3:2f:45:bb:0f:23:1c:dd:61:9a:64:9d:8e:80:
c4:9c:32:2f:05:79:de:cc:67:15:18:a4:57:6d:07:
fd:d9:d1:28:1c:4f:33:a4:92:db:82:3e:ce:26:6b:
87:57:1b:c2:6f:30:03:0b:40:60:59:d3:1d:46:26:
21:78:35:cf:c6:eb:76:e3:df:36:c0:df:c1:ad:f6:
da:c5:01:ad:95:60:82:81:e4:6c:d7:ac:ae:cc:36:
4b:c1:1c:95:0c:e1:7f:87:18:06:7f:e3:3d:7a:d6:
32:5d:71:8f:58:16:b9:fc:60:bb:5c:57:22:6c:0b:
e0:1d:db:2c:a6:d4:cf:7d:e2:d0:95:3d:25:d2:c9:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:55:10:7D:2D:D6:07:36:93:70:9B:65:8C:27:44:EB:18:9A:5A
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/EGlVEH0t1gc2k3CbZYwnROsYmlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.200.0/21
IPv6:
2a09:6c80::/32
Signature Algorithm: sha256WithRSAEncryption
87:de:58:6d:7d:36:e9:6a:ec:15:53:41:b7:f9:ac:84:0d:f8:
87:03:87:39:fe:2c:e9:84:78:5a:75:ac:45:25:a6:39:b4:d6:
28:53:bc:b6:a4:89:15:1a:64:11:b2:b4:6a:92:d9:44:dd:5b:
f5:7c:9f:67:38:7e:f1:98:2d:9d:42:75:82:b1:2b:22:63:03:
cd:ff:67:4a:e2:d5:62:d0:9c:38:4f:40:f6:94:c1:37:77:53:
83:47:8f:46:41:30:2d:c7:d9:b8:c4:67:2b:03:4f:02:a4:6a:
81:48:a4:16:f0:51:7a:50:bc:50:c1:8f:4b:d1:c3:4d:9c:9a:
7d:eb:f3:15:a0:c8:0f:62:80:dc:74:6c:a1:dd:01:37:82:ea:
e5:63:8c:78:dc:b3:fc:8e:a5:39:f6:f4:0e:84:66:3e:8c:bd:
84:72:9f:00:60:05:42:3b:82:15:da:2b:5c:ff:7b:f4:7d:91:
f2:b1:88:8c:d9:64:86:55:c2:7c:94:27:84:f5:86:8d:4e:db:
0d:b3:b7:48:27:35:7c:cf:39:1d:10:2a:eb:94:8a:03:f7:8b:
66:66:85:f0:61:04:3f:15:3f:0b:04:f7:24:05:45:a1:a7:50:
41:8f:1c:76:8b:18:81:24:64:22:9b:b3:e7:b1:22:66:21:ed:
1d:53:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net