Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/egOZu2jbCB5vGm66RKPryBgqhKI.roa
File: egOZu2jbCB5vGm66RKPryBgqhKI.roa (raw, json)
Hash identifier: fVhU+F5+/caMniDi827r5WVr+nuoxGYl2xTfL2DLMZA=
Subject key identifier: 7A:03:99:BB:68:DB:08:1E:6F:1A:6E:BA:44:A3:EB:C8:18:2A:84:A2
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 0194221FAE92ED6EBFB11E6B4E2BD85F09D6
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/egOZu2jbCB5vGm66RKPryBgqhKI.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41435
IP address blocks: 79.110.128.0/20 maxlen: 20
79.110.128.0/22 maxlen: 22
79.110.132.0/22 maxlen: 22
91.193.32.0/22 maxlen: 22
176.104.0.0/18 maxlen: 18
194.9.36.0/23 maxlen: 23
213.109.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ae:92:ed:6e:bf:b1:1e:6b:4e:2b:d8:5f:09:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a0399bb68db081e6f1a6eba44a3ebc8182a84a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:fe:ca:54:43:ed:ff:b9:6f:7a:ba:94:54:
45:63:96:3a:33:2a:03:71:1c:8f:f4:14:43:dd:54:
ac:e4:f0:5e:1f:95:c7:9f:37:e9:cb:6a:6d:94:3a:
58:b9:3b:20:4c:af:f7:62:02:de:d5:73:b9:d2:91:
7b:a1:12:53:c1:79:36:e7:e9:33:2d:b7:07:42:22:
b5:0e:30:61:2c:4e:c4:60:5c:b6:ce:b7:8b:0f:c8:
8e:bf:c5:48:ce:32:ab:ad:10:e6:e1:e6:43:47:ae:
e7:3e:f9:1c:33:93:ce:a8:65:d9:90:b8:35:9a:ed:
86:b9:50:3a:85:da:d4:1a:1d:80:b2:6a:3c:dd:a9:
24:81:c5:a9:5b:2d:c6:0a:b5:fd:8d:a9:d5:88:92:
b1:e5:26:fd:d7:4c:16:c8:fe:f8:43:7c:49:bc:f2:
be:76:a5:13:5b:4c:82:e8:8f:57:9a:e9:34:ae:ee:
fd:68:d2:12:50:f7:a0:c2:f2:26:49:05:5a:50:80:
48:df:01:56:6b:9e:19:66:11:04:1a:6d:a4:34:db:
85:11:be:ad:99:07:c0:ed:51:b9:25:d4:f7:45:63:
ee:e4:8c:0f:e3:08:89:9b:3d:b1:0f:54:28:39:ff:
69:8c:89:ab:6d:c8:43:00:6f:df:f7:96:24:5a:5e:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:03:99:BB:68:DB:08:1E:6F:1A:6E:BA:44:A3:EB:C8:18:2A:84:A2
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/egOZu2jbCB5vGm66RKPryBgqhKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.128.0/20
91.193.32.0/22
176.104.0.0/18
194.9.36.0/23
213.109.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:21:1c:1f:ee:58:4e:84:9c:bc:1b:27:51:45:fc:11:93:b8:
d4:0f:4d:05:1b:58:f2:e4:44:08:ee:f7:8b:f6:44:f9:37:13:
4b:de:eb:bd:7e:2f:de:01:24:5f:ec:5c:7c:89:e0:6b:c0:01:
02:11:22:53:34:9f:92:b2:af:28:6a:31:a7:3c:40:96:94:c0:
2d:8f:35:8e:06:61:92:f2:30:a5:7c:46:3b:1b:a0:03:e4:2c:
e7:e2:38:94:ea:cb:b1:a3:c2:ee:de:4f:53:b6:dd:06:1c:31:
7b:9b:e4:cd:90:7b:32:4d:48:3d:1f:54:1f:c7:74:87:ba:b4:
ac:1d:e1:ae:3f:c2:66:04:d8:ca:b6:ba:00:65:a1:b4:57:f8:
7d:c2:db:9d:c6:74:40:96:5d:ce:9e:a9:1d:82:3a:56:12:e4:
be:9c:dd:48:37:03:17:26:1c:87:12:ee:ee:43:50:87:3e:d7:
cc:c6:35:dc:f9:a4:14:29:51:b9:86:cc:cd:24:ba:5e:f1:25:
6c:85:30:da:27:7b:d5:78:65:37:40:d0:d3:18:a6:94:e0:b4:
2f:7c:e2:db:e5:45:ed:df:0e:d2:81:78:19:1b:7b:39:a9:82:
80:9c:23:de:7f:fa:d9:6e:99:99:4d:ad:9d:90:a0:37:eb:4d:
e4:b8:aa:86
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQiH66S7W6/sR5rTivYXwnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGMzYTZjNWNiZmYwNzM5ZTQzOGQwNTc0NDQwNWIxNjE5
N2IxNWIwHhcNMjUwMTAxMTM0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTAzOTliYjY4ZGIwODFlNmYxYTZlYmE0NGEzZWJjODE4MmE4NGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n+ylRD7f+5b3q6lFRFY5Y6MyoD
cRyP9BRD3VSs5PBeH5XHnzfpy2ptlDpYuTsgTK/3YgLe1XO50pF7oRJTwXk25+kz
LbcHQiK1DjBhLE7EYFy2zreLD8iOv8VIzjKrrRDm4eZDR67nPvkcM5POqGXZkLg1
mu2GuVA6hdrUGh2Asmo83akkgcWpWy3GCrX9janViJKx5Sb910wWyP74Q3xJvPK+
dqUTW0yC6I9Xmuk0ru79aNISUPegwvImSQVaUIBI3wFWa54ZZhEEGm2kNNuFEb6t
mQfA7VG5JdT3RWPu5IwP4wiJmz2xD1QoOf9pjImrbchDAG/f95YkWl5KlwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHoDmbto2wgebxpuukSj68gYKoSiMB8GA1UdIwQY
MBaAFICMOmxcv/BznkONBXREBbFhl7FbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUt
NjE4MTljNDgwY2JlLzEvZWdPWnUyamJDQjV2R202NlJLUHJ5QmdxaEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUtNjE4MTljNDgwY2Jl
LzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQET26AAwQC
W8EgAwQGsGgAAwQBwgkkAwQE1W1QMA0GCSqGSIb3DQEBCwUAA4IBAQAbIRwf7lhO
hJy8GydRRfwRk7jUD00FG1jy5EQI7veL9kT5NxNL3uu9fi/eASRf7Fx8ieBrwAEC
ESJTNJ+Ssq8oajGnPECWlMAtjzWOBmGS8jClfEY7G6AD5Czn4jiU6suxo8Lu3k9T
tt0GHDF7m+TNkHsyTUg9H1Qfx3SHurSsHeGuP8JmBNjKtroAZaG0V/h9wtudxnRA
ll3OnqkdgjpWEuS+nN1INwMXJhyHEu7uQ1CHPtfMxjXc+aQUKVG5hszNJLpe8SVs
hTDaJ3vVeGU3QNDTGKaU4LQvfOLb5UXt3w7SgXgZG3s5qYKAnCPef/rZbpmZTa2d
kKA3603kuKqG
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:43:25 2025 by rpki-client on console.sobornost.net