Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/T8igE61i7-8nEQ3GPuNmcwV2Y6s.roa
File: T8igE61i7-8nEQ3GPuNmcwV2Y6s.roa (raw, json)
Hash identifier: mnbaUsYkze4mxq77NlpZJCqVBddws9D7m+dIPgTDsy4=
Subject key identifier: 4F:C8:A0:13:AD:62:EF:EF:27:11:0D:C6:3E:E3:66:73:05:76:63:AB
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 019425FDE039B912DFAC65D16CB1F6DC627E
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/T8igE61i7-8nEQ3GPuNmcwV2Y6s.roa
Signing time: Thu 02 Jan 2025 07:49:42 +0000
ROA not before: Thu 02 Jan 2025 07:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13045
IP address blocks: 81.14.128.0/17 maxlen: 17
89.182.0.0/15 maxlen: 16
185.93.136.0/22 maxlen: 22
193.254.18.0/24 maxlen: 24
212.59.32.0/19 maxlen: 19
2a02:560::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e0:39:b9:12:df:ac:65:d1:6c:b1:f6:dc:62:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc8a013ad62efef27110dc63ee36673057663ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:b8:c3:08:c8:2b:c1:99:a0:4f:93:17:5c:
89:39:f5:5b:bc:c0:7e:3b:ea:d9:81:c5:4a:dc:38:
51:d9:05:0a:ab:89:12:c6:ff:1b:e0:42:2e:c0:24:
78:ea:37:f2:12:b1:93:1a:48:d3:67:32:dd:e0:4a:
79:93:a6:ac:ea:e9:93:9c:87:07:d8:49:1e:3a:ef:
ad:90:df:80:59:74:00:5d:33:ad:5b:ee:29:39:73:
5d:04:c0:a3:ee:2e:57:28:0c:13:cd:47:43:62:cd:
13:7e:bc:88:7d:c5:26:c2:17:48:ee:c5:2d:de:9f:
b5:cf:9b:d7:cf:bf:dd:a3:4d:7d:1a:18:80:1c:25:
ca:5b:83:12:39:a1:5f:37:d9:68:38:c7:37:ec:e7:
35:37:1a:d9:74:e5:dd:ee:57:e6:d4:44:0a:d3:2a:
58:09:77:da:25:9c:b9:fb:fb:84:93:ea:f9:96:07:
6c:06:11:b5:8a:e8:21:09:b1:6f:97:7e:c3:a3:12:
b2:f6:51:3e:97:d5:a3:be:09:96:fa:2a:bd:d6:f9:
5e:77:6d:0b:d8:9b:da:3e:51:f2:cc:18:62:fa:55:
37:4c:22:d1:1d:13:37:a1:24:cc:d4:cb:00:c4:d6:
47:33:2e:2f:ca:7d:28:e8:70:57:43:cb:72:34:02:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:A0:13:AD:62:EF:EF:27:11:0D:C6:3E:E3:66:73:05:76:63:AB
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/T8igE61i7-8nEQ3GPuNmcwV2Y6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.14.128.0/17
89.182.0.0/15
185.93.136.0/22
193.254.18.0/24
212.59.32.0/19
IPv6:
2a02:560::/32
Signature Algorithm: sha256WithRSAEncryption
6a:1f:bf:f6:07:4c:e9:e8:f9:1c:76:01:0c:8a:e9:65:b6:25:
ba:5a:c4:06:ed:dd:c5:9d:8d:8c:2c:21:c5:16:46:f3:2a:45:
91:e5:19:83:e0:ae:cb:f6:ae:49:75:73:36:25:6e:e0:bf:59:
b9:68:e6:b9:c4:b1:42:4d:a5:b8:c0:45:3b:42:f6:3c:f0:93:
12:7f:69:13:ad:42:91:6d:b4:94:5a:7d:b7:bc:48:85:78:6a:
cf:f0:a3:44:00:ab:1e:21:58:bd:68:0c:96:31:8f:03:7d:28:
53:8b:69:34:65:a1:b1:c1:c0:ab:ad:18:18:cb:0a:fb:2d:fc:
46:ca:be:a3:e3:33:12:86:86:33:42:eb:34:82:e6:d2:7f:26:
0a:0a:ba:fd:49:4c:4a:2b:23:6a:d1:e4:ef:02:d7:1f:3f:1b:
de:b5:1b:6e:30:ee:68:b2:40:cd:37:b9:43:8e:8a:8c:94:3f:
30:ea:d9:e6:00:27:62:95:12:dd:6c:e7:64:75:fb:cc:83:86:
ca:a9:15:f3:2c:99:4e:10:ea:94:b1:20:d6:3e:79:52:5e:da:
ed:99:69:9a:c8:fe:16:e9:10:0c:29:e9:f1:75:8d:c8:8d:4c:
54:f2:1f:61:01:83:c3:e8:e3:62:75:3b:d9:50:ca:79:1c:34:
83:cc:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net