Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/0T4kYsm4csSjL8VboPiv6-n-j0A.roa
File: 0T4kYsm4csSjL8VboPiv6-n-j0A.roa (raw, json)
Hash identifier: aDj2+cGm+6rFRblQlBX3W4oDpuhRvKm1wzGVwZCxKxo=
Subject key identifier: D1:3E:24:62:C9:B8:72:C4:A3:2F:C5:5B:A0:F8:AF:EB:E9:FE:8F:40
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D65BD066AB3D07006DB8D6BDCE9DEA
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/0T4kYsm4csSjL8VboPiv6-n-j0A.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201482
IP address blocks: 81.26.156.0/24 maxlen: 24
81.26.158.0/24 maxlen: 24
81.26.159.0/24 maxlen: 24
84.47.132.0/24 maxlen: 24
84.47.133.0/24 maxlen: 24
84.47.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5b:d0:66:ab:3d:07:00:6d:b8:d6:bd:ce:9d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d13e2462c9b872c4a32fc55ba0f8afebe9fe8f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:f7:c1:cb:e8:d4:e7:b6:11:ac:45:a3:3b:
6d:04:11:9e:ee:fd:a7:d6:46:50:a6:ed:5f:b8:09:
39:4d:55:15:e8:b9:ac:d7:fa:5f:59:a8:df:b5:20:
24:02:80:c0:1a:37:aa:56:cd:27:7c:c2:52:da:98:
8b:b1:db:01:96:d4:ea:8f:5d:74:3d:4c:9e:3f:3d:
2c:41:93:98:ca:b6:5f:e6:2b:c5:a8:8d:6c:8f:7f:
7b:b8:ec:98:f0:82:44:c2:8c:77:00:de:cf:ee:20:
55:3a:ad:78:33:99:a3:46:fd:15:d6:84:71:74:94:
14:06:9f:6f:cf:cb:03:a0:6c:96:f1:bb:ee:53:6c:
c7:bb:71:88:31:dc:f3:d8:0c:07:ff:28:70:1a:6c:
86:8f:fa:d8:91:0b:a7:2c:c6:b1:44:37:34:2d:5b:
20:12:a0:ec:46:e4:d6:8e:77:00:d3:49:86:cf:d7:
bc:2b:82:9d:d3:15:32:8b:7f:a1:96:76:fb:59:b7:
1b:22:c1:49:6f:3a:0d:57:ed:b5:fd:fe:6c:3e:bb:
81:70:6d:44:11:9e:7a:e5:0e:17:ee:c5:23:70:27:
c6:c5:c0:9c:37:c4:c8:77:44:fb:e0:21:61:70:e1:
bf:5b:40:02:aa:e7:aa:3a:1c:6c:07:2d:81:92:70:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:24:62:C9:B8:72:C4:A3:2F:C5:5B:A0:F8:AF:EB:E9:FE:8F:40
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/0T4kYsm4csSjL8VboPiv6-n-j0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.156.0/24
81.26.158.0/23
84.47.132.0/23
84.47.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:00:9d:a2:05:1e:de:27:6c:60:7e:2b:4a:e1:f0:95:a5:12:
53:07:4a:24:ad:02:61:69:f4:d5:b6:e3:42:94:85:bb:ff:d1:
e3:50:d8:e5:a7:52:0f:0c:18:90:d4:30:0c:ce:d5:19:79:79:
8c:3e:ac:63:ed:d4:df:a1:f9:0d:b9:c3:b1:28:b8:e9:0e:5f:
91:c1:04:6f:49:f0:69:e3:be:58:50:b9:73:46:b0:e8:e1:f9:
e6:ee:45:f4:b1:78:dc:18:54:a3:a5:f8:d6:62:a2:f0:86:76:
ab:75:5f:88:09:b2:96:72:98:ce:54:84:c5:57:ad:e8:6c:e5:
46:f7:58:3c:09:8e:85:d1:b3:bb:00:ee:5b:7e:d2:05:70:aa:
fb:a5:1b:85:bf:9e:5e:d4:12:66:1e:9a:36:ff:f5:e3:1b:72:
7e:0d:24:b8:97:8f:68:57:58:53:6e:13:14:11:d9:fe:68:b6:
c4:72:01:f0:81:72:89:c7:b3:da:8f:cd:63:08:18:f4:87:ea:
7d:de:99:2e:ab:94:d1:2a:c0:78:bf:a0:34:cf:8b:7b:06:54:
66:91:90:cd:27:82:5d:1d:97:11:b9:27:ff:51:44:82:97:42:
c5:a9:83:bb:f9:57:1f:2d:46:2d:9d:26:e4:55:2f:fb:1e:ac:
02:e4:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:18 2025 by rpki-client