Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4hKWXc341yGRbgY71r-rjLvZxko.roa
File: 4hKWXc341yGRbgY71r-rjLvZxko.roa (raw, json)
Hash identifier: JcoNJqdYddBpRaltBGAaTp5GJenczgY/x0msZ8Eil+4=
Subject key identifier: E2:12:96:5D:CD:F8:D7:21:91:6E:06:3B:D6:BF:AB:8C:BB:D9:C6:4A
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 0193977335223AC5344EF24EE45CC3660582
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4hKWXc341yGRbgY71r-rjLvZxko.roa
Signing time: Thu 05 Dec 2024 15:32:10 +0000
ROA not before: Thu 05 Dec 2024 15:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201482
IP address blocks: 81.26.156.0/24 maxlen: 24
81.26.158.0/24 maxlen: 24
81.26.159.0/24 maxlen: 24
84.47.132.0/24 maxlen: 24
84.47.133.0/24 maxlen: 24
84.47.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:73:35:22:3a:c5:34:4e:f2:4e:e4:5c:c3:66:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Dec 5 15:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e212965dcdf8d721916e063bd6bfab8cbbd9c64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:dc:39:dd:c7:42:4f:8a:72:b7:d4:9b:13:
6e:21:f6:63:78:03:49:31:2a:6a:9d:72:0a:6f:d8:
8b:71:35:40:1c:a7:13:21:4f:06:49:13:cf:f1:25:
26:2a:1e:83:48:c6:a7:26:91:01:44:f0:9d:c8:18:
99:ed:60:f5:9d:30:ec:54:47:f8:a8:a1:f3:38:b1:
a1:a6:16:d6:1a:a1:92:fc:b5:bc:04:0e:f3:c3:cc:
a3:47:25:c1:f5:e5:cb:0e:12:10:17:58:60:c6:fd:
08:15:2c:cf:e1:7d:98:44:eb:27:c4:f3:4b:ba:c9:
4f:60:b9:a3:0a:bc:f6:62:79:76:ef:30:3e:07:c1:
7c:64:f7:ef:ff:6a:72:23:89:1b:37:d7:8e:45:1c:
eb:9a:be:e4:82:ed:96:df:0f:d4:1d:23:67:18:67:
10:72:70:26:22:c8:6c:cc:6a:67:01:68:be:42:9b:
fe:cf:6c:49:21:dc:3d:00:49:1f:8e:ba:74:94:9d:
ca:c1:48:1e:ce:86:6e:7c:c7:8a:9c:83:16:f6:9f:
62:56:7b:69:57:08:97:aa:b9:02:0d:5b:c5:0c:ba:
31:3a:6b:04:ad:86:7c:52:8d:fd:c2:fe:8d:69:c8:
66:15:00:65:ec:91:6b:36:4d:7d:5e:92:76:a7:96:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:12:96:5D:CD:F8:D7:21:91:6E:06:3B:D6:BF:AB:8C:BB:D9:C6:4A
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4hKWXc341yGRbgY71r-rjLvZxko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.156.0/24
81.26.158.0/23
84.47.132.0/23
84.47.179.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7b:1e:2d:ed:87:72:77:2d:0a:6f:76:4c:96:de:b5:07:e9:
2a:52:be:78:60:b6:5b:fa:a0:ee:80:19:7f:64:1f:a4:ae:16:
6e:76:c9:a5:e4:f8:dd:69:57:0f:e3:d9:4d:93:f9:ee:df:fc:
26:bb:bd:08:0b:7b:80:c2:44:53:27:74:b1:f8:ca:5e:1f:b7:
a3:2a:63:e2:44:e6:8f:eb:75:ac:ee:a3:61:b8:ac:48:9b:76:
87:07:06:d7:4b:b5:27:06:9f:38:3d:ed:f8:ec:8d:54:8f:39:
40:85:12:88:70:3f:5d:39:dc:93:cb:21:93:91:d9:1d:4c:7d:
65:7a:0b:2c:fe:b3:c1:a3:5b:1f:23:50:ec:7b:ba:bf:d3:7a:
cb:d6:52:ec:96:2a:fd:2b:a7:cc:36:f2:3a:71:a7:d4:73:4a:
96:2c:f4:71:7b:d1:ef:47:cd:b5:bd:2e:d3:a5:b1:0b:1b:cb:
6c:0c:ed:60:7b:99:f8:01:7e:53:2d:e9:ff:71:88:24:5a:15:
07:50:ec:ac:ec:48:d0:0d:6d:cb:01:85:e6:48:1e:87:ed:9c:
72:b8:98:ef:8d:00:3f:95:b0:74:45:71:17:40:57:9a:ea:46:
1b:64:85:9e:8b:c5:e7:c3:5a:11:b9:6f:e8:9d:59:a2:43:e1:
2e:30:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:42 2024 by rpki-client on console.sobornost.net