Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u_MON0uhc7wK0vfrNNxoX_D_7H0.roa
File: u_MON0uhc7wK0vfrNNxoX_D_7H0.roa (raw, json)
Hash identifier: kSHcXFftxlw5c9WWpAU1iW4d89AjVulBJzDCaM7hHEc=
Subject key identifier: BB:F3:0E:37:4B:A1:73:BC:0A:D2:F7:EB:34:DC:68:5F:F0:FF:EC:7D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247F23588107637A75F2351529C6FC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u_MON0uhc7wK0vfrNNxoX_D_7H0.roa
Signing time: Thu 02 Jan 2025 17:51:07 +0000
ROA not before: Thu 02 Jan 2025 17:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44851
IP address blocks: 31.13.196.0/24 maxlen: 24
93.123.120.0/21 maxlen: 21
93.123.120.0/22 maxlen: 22
93.123.120.0/24 maxlen: 24
93.123.121.0/24 maxlen: 24
93.123.122.0/24 maxlen: 24
93.123.123.0/24 maxlen: 24
93.123.124.0/22 maxlen: 22
93.123.124.0/24 maxlen: 24
93.123.125.0/24 maxlen: 24
93.123.126.0/24 maxlen: 24
93.123.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7f:23:58:81:07:63:7a:75:f2:35:15:29:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbf30e374ba173bc0ad2f7eb34dc685ff0ffec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:0b:e1:3c:60:48:41:6a:59:a6:2c:78:d1:
7f:3c:a9:91:9b:7b:50:37:04:5f:99:69:68:7e:ac:
a2:9c:f2:b3:dd:4b:2d:14:d0:da:04:d6:cc:57:b4:
9c:45:74:ac:c0:ad:5e:2a:b3:de:a9:fa:e1:13:fd:
1a:c1:b5:f8:c8:3f:2a:24:e9:ee:d7:d3:bc:8f:f3:
d9:e6:63:87:49:b5:41:9f:cb:ab:ff:17:74:bd:c1:
67:97:3d:3a:30:ea:ac:19:0c:d3:6d:f2:82:9c:df:
ac:7d:95:f0:ee:7c:85:b8:15:8f:28:c6:87:1c:8b:
d2:f0:b7:0e:7b:ab:77:09:44:29:22:e6:3c:b5:b2:
a5:6a:31:cd:00:f0:74:f9:32:4d:43:9b:72:e0:cd:
c1:e5:44:40:eb:16:d0:33:85:a3:5e:72:e6:c2:73:
a6:db:7d:b3:41:21:f3:60:cd:8b:a9:1c:9c:9f:99:
7f:a6:a2:dd:01:9e:2a:49:c3:23:c0:89:05:50:99:
5b:6f:d7:03:a8:14:24:38:fb:88:5d:6c:ce:4d:f7:
86:d2:57:20:46:c3:76:40:a4:e7:82:e4:b2:94:61:
d8:e2:79:cc:e9:61:c4:47:4c:d8:3c:a4:aa:90:75:
54:ef:e5:50:51:fe:be:1d:88:c3:d4:70:9b:08:19:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:0E:37:4B:A1:73:BC:0A:D2:F7:EB:34:DC:68:5F:F0:FF:EC:7D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u_MON0uhc7wK0vfrNNxoX_D_7H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.196.0/24
93.123.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:91:a5:8e:a9:3d:56:47:45:f5:c4:7d:9c:a0:55:4b:c1:ca:
29:38:1c:3d:6b:eb:bd:9f:99:6e:e9:fb:52:1f:4f:b2:59:5a:
36:94:e7:26:ed:b9:88:f1:da:1f:77:18:c8:3b:27:fe:50:6c:
f0:e9:a6:cc:5e:ea:c4:40:8a:3a:33:de:46:a6:14:17:9b:73:
53:77:3d:68:c4:bc:8e:4d:74:30:d6:98:7d:79:c1:39:56:7e:
58:c9:ce:59:7e:b9:4a:12:3f:ca:bc:20:a3:11:45:16:2b:86:
02:02:ff:e1:03:38:15:b9:0b:89:41:b9:aa:79:60:80:4f:82:
6f:19:92:9a:ae:f1:cd:37:43:fd:df:e9:94:02:95:c9:b9:2b:
0c:f0:67:11:6d:80:45:1b:42:74:5f:5e:fb:ad:7a:ca:f1:a5:
8c:82:fc:6a:3d:83:db:62:fb:69:2d:d0:45:da:bd:96:56:0f:
87:bc:91:49:fd:c8:3a:53:f8:ac:1d:d9:a5:4c:4a:74:0e:e4:
49:73:5a:2f:06:e5:92:3c:ed:f7:c4:de:a6:c2:a3:08:b8:f9:
46:44:d6:cd:98:07:26:1e:53:c1:42:3c:7f:6e:17:07:60:b3:
15:d0:e0:85:af:16:62:52:a8:c5:8d:97:00:7e:77:ba:6f:e1:
c5:ed:21:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:17:28 2025 by rpki-client