Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: Jp7lUWNSESkiVnB1+Q/LCRoUaw4GckGTMGFb4nxexos=
Subject key identifier: CF:8B:9C:B5:B9:2D:9D:E2:FB:03:19:F2:29:E6:A6:BB:15:6A:11:50
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 03835DD55F93A9C3B834F58190F614EE3C235CF0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time: Fri 11 Apr 2025 03:54:16 +0000
ROA not before: Fri 11 Apr 2025 03:49:16 +0000
ROA not after: Fri 10 Apr 2026 03:54:16 +0000
asID: 6079
IP address blocks: 46.203.173.0/24 maxlen: 24
95.134.48.0/21 maxlen: 24
95.134.64.0/21 maxlen: 24
95.134.96.0/21 maxlen: 24
95.134.168.0/22 maxlen: 24
95.134.172.0/22 maxlen: 24
95.135.173.0/24 maxlen: 24
95.135.178.0/24 maxlen: 24
95.135.179.0/24 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.221.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:83:5d:d5:5f:93:a9:c3:b8:34:f5:81:90:f6:14:ee:3c:23:5c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 11 03:49:16 2025 GMT
Not After : Apr 10 03:54:16 2026 GMT
Subject: CN=CF8B9CB5B92D9DE2FB0319F229E6A6BB156A1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:34:18:fb:d5:5f:cd:75:fd:89:4b:1c:04:
95:ad:ad:23:05:85:ec:37:ef:82:e2:6e:bd:c5:5b:
f9:35:b0:4a:cd:4e:ce:21:a7:88:9e:a7:9b:63:a2:
83:f0:18:57:a4:b7:29:ac:5c:e5:11:7f:34:11:3e:
09:bf:7f:94:c2:a9:f3:fb:5e:24:93:d3:f9:0c:4f:
ed:d9:ef:aa:97:21:fe:35:43:29:f6:5e:b0:34:50:
4a:e7:5a:91:35:d5:28:84:e3:0e:de:7c:30:02:11:
18:71:09:9a:cb:9f:eb:e6:33:c5:29:29:a9:3f:ee:
65:1c:db:c0:2d:2b:6e:50:89:4e:95:33:f3:15:63:
53:a4:af:50:c5:73:b6:7a:16:3d:d3:a6:22:3e:f6:
91:d7:ce:9e:84:d6:22:19:80:b9:29:0f:b5:20:2c:
c6:99:c1:78:75:e4:74:98:a1:bb:e4:0c:cd:3a:08:
ab:70:a6:2d:11:f2:e0:f5:1c:94:ff:54:34:d4:84:
df:15:97:4f:53:8b:3f:6a:1b:b1:c7:6d:55:f0:a7:
cc:2e:e1:17:b3:44:b1:80:ab:ac:0b:12:08:88:ef:
4b:31:eb:db:79:b3:9a:54:c4:bb:c1:d9:c6:73:1c:
24:5b:7d:b8:10:68:f7:f0:94:71:0d:93:10:3f:7a:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:9C:B5:B9:2D:9D:E2:FB:03:19:F2:29:E6:A6:BB:15:6A:11:50
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.173.0/24
95.134.48.0/21
95.134.64.0/21
95.134.96.0/21
95.134.168.0/21
95.135.173.0/24
95.135.178.0/23
95.135.210.0/24
95.135.221.0/24
95.135.228.0/24
95.135.230.0/24
95.135.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:96:1b:1f:b5:c3:43:1b:f2:ac:1d:f6:d2:63:c8:6e:c1:18:
3e:0c:54:44:9d:a5:cf:2e:80:12:e3:39:b5:a8:ee:76:85:ce:
b9:73:6b:d8:79:3b:1f:e8:d9:1e:45:68:24:81:72:67:de:30:
14:37:25:8a:4b:55:8d:54:a0:d7:cc:f3:62:d9:47:c0:64:b7:
95:13:b1:36:ad:45:2b:53:76:29:49:15:15:47:07:bd:03:99:
94:dc:39:13:df:66:24:7b:48:76:ec:71:f4:92:34:08:51:cb:
53:9b:87:ab:92:3e:c4:15:2e:c0:f1:13:bb:76:30:50:e3:b4:
07:e4:e7:f6:7c:11:4e:08:38:c6:c5:c0:9b:04:ee:0d:ec:28:
b0:b8:81:b1:74:c3:a7:7d:ae:ec:fa:b3:17:f7:23:73:04:41:
d6:e7:51:ab:00:5a:c7:37:3b:53:c8:d8:70:27:44:fc:ea:00:
7c:28:e0:27:da:2d:ce:5e:c6:aa:32:06:cc:f4:f3:16:64:08:
75:26:65:cf:89:1b:fb:17:11:a7:51:94:02:0b:af:71:ef:91:
45:89:ba:78:af:e4:9c:2a:8b:d8:24:7d:7a:27:4e:4c:1a:48:
26:1c:ce:f0:59:cc:9a:d6:bf:0c:28:39:6a:0a:88:9c:22:ea:
5d:34:aa:ab
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUA4Nd1V+TqcO4NPWBkPYU7jwjXPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA0MTEwMzQ5MTZaFw0yNjA0MTAwMzU0MTZaMDMxMTAvBgNV
BAMTKENGOEI5Q0I1QjkyRDlERTJGQjAzMTlGMjI5RTZBNkJCMTU2QTExNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyTQY+9VfzXX9iUscBJWtrSMF
hew374Libr3FW/k1sErNTs4hp4iep5tjooPwGFektymsXOURfzQRPgm/f5TCqfP7
XiST0/kMT+3Z76qXIf41Qyn2XrA0UErnWpE11SiE4w7efDACERhxCZrLn+vmM8Up
Kak/7mUc28AtK25QiU6VM/MVY1Okr1DFc7Z6Fj3TpiI+9pHXzp6E1iIZgLkpD7Ug
LMaZwXh15HSYobvkDM06CKtwpi0R8uD1HJT/VDTUhN8Vl09Tiz9qG7HHbVXwp8wu
4RezRLGAq6wLEgiI70sx69t5s5pUxLvB2cZzHCRbfbgQaPfwlHENkxA/em3/AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUz4uctbktneL7AxnyKeamuxVqEVAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBhBggrBgEFBQcBBwEB/wRSMFAwTgQCAAEwSAMEAC7LrQME
A1+GMAMEA1+GQAMEA1+GYAMEA1+GqAMEAF+HrQMEAV+HsgMEAF+H0gMEAF+H3QME
AF+H5AMEAF+H5gMEAF+H6TANBgkqhkiG9w0BAQsFAAOCAQEAPJYbH7XDQxvyrB32
0mPIbsEYPgxURJ2lzy6AEuM5tajudoXOuXNr2Hk7H+jZHkVoJIFyZ94wFDcliktV
jVSg18zzYtlHwGS3lROxNq1FK1N2KUkVFUcHvQOZlNw5E99mJHtIduxx9JI0CFHL
U5uHq5I+xBUuwPETu3YwUOO0B+Tn9nwRTgg4xsXAmwTuDewosLiBsXTDp32u7Pqz
F/cjcwRB1udRqwBaxzc7U8jYcCdE/OoAfCjgJ9otzl7GqjIGzPTzFmQIdSZlz4kb
+xcRp1GUAguvce+RRYm6eK/knCqL2CR9eidOTBpIJhzO8FnMmta/DCg5agqInCLq
XTSqqw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net