Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/P2monXRAbaekTqMpsgjv-NA_c0c.roa
File: P2monXRAbaekTqMpsgjv-NA_c0c.roa (raw, json)
Hash identifier: YRKmvWfQ7Giv6vI3eApcQ7ysx1pVg21OtLZSP69E8ww=
Subject key identifier: 3F:69:A8:9D:74:40:6D:A7:A4:4E:A3:29:B2:08:EF:F8:D0:3F:73:47
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC231B27A7D82CC04458148D99499B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/P2monXRAbaekTqMpsgjv-NA_c0c.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209982
IP address blocks: 91.239.59.0/24 maxlen: 24
194.35.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:23:1b:27:a7:d8:2c:c0:44:58:14:8d:99:49:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f69a89d74406da7a44ea329b208eff8d03f7347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:93:d0:32:90:75:6b:eb:3c:63:17:93:03:
19:bd:e4:83:43:6f:a2:ca:39:aa:66:51:0a:4b:2d:
d7:60:3b:37:94:b6:37:8d:ed:14:03:eb:cd:f5:c9:
bf:0b:9f:53:dc:0d:1e:73:c8:46:98:4f:d2:97:d3:
2c:3b:74:29:1c:8c:9b:7d:0c:12:da:fd:68:b5:ff:
2c:10:7c:95:c3:52:43:83:43:aa:a5:bc:a2:ef:48:
14:23:2f:bf:e6:a7:b1:93:54:06:51:20:ef:dd:f8:
15:d6:ae:23:76:b9:ed:f4:fa:75:36:dd:f3:87:55:
40:ee:f8:1f:d1:52:4c:2b:64:13:db:9d:72:e6:52:
c5:e2:ed:b5:f7:ab:30:ae:2c:b7:d2:09:9f:8d:12:
c6:6e:c2:93:d8:93:7f:6f:ce:a2:fb:2b:bb:9a:ba:
82:66:d9:22:0d:ac:89:b3:7a:90:bc:11:0d:bd:48:
cc:1d:f8:ee:aa:c2:a1:9e:92:76:f5:56:55:38:d3:
50:77:57:88:1a:fe:ba:d9:e4:3a:c9:53:96:66:38:
ea:73:d0:4d:14:b1:04:a2:2a:5d:d3:66:52:32:9e:
e6:d7:68:85:b7:ee:f0:0e:0c:5f:9f:59:49:17:41:
30:49:f4:2e:7c:e9:30:3f:34:64:5c:7a:8d:b1:12:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:69:A8:9D:74:40:6D:A7:A4:4E:A3:29:B2:08:EF:F8:D0:3F:73:47
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/P2monXRAbaekTqMpsgjv-NA_c0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.59.0/24
194.35.52.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:6d:c1:f1:da:b0:e1:c3:9d:56:de:e3:4b:3f:b0:bf:92:2f:
bd:27:39:90:64:9b:f0:dc:cf:2f:e4:ad:0a:2e:c0:59:83:55:
0a:e6:b6:13:95:c6:dd:47:f7:45:f6:29:7b:a5:ca:ee:79:cc:
d4:ec:6d:13:a8:f4:55:e3:e9:2b:fe:bf:9e:2d:b8:31:9e:94:
48:42:23:04:e8:52:da:6d:aa:f4:a2:f9:5d:7f:26:0a:a9:03:
61:7c:e7:db:4d:4a:8e:fb:85:52:96:31:b7:a6:66:76:10:61:
ed:b7:95:b2:f0:50:ba:68:a8:2c:6a:bc:44:ee:dc:a5:10:40:
18:66:e2:06:3b:f2:cb:21:d5:b3:f0:24:8f:35:3f:c7:a2:96:
fd:b6:08:f3:b2:ce:2a:a3:8c:9a:33:23:e6:cc:d6:7e:30:c4:
b3:ee:40:d8:11:40:ca:3e:ba:07:c9:c3:22:51:7a:87:9a:cb:
f7:01:b3:47:40:59:4b:8e:d5:23:f3:fd:0b:70:4b:b6:3b:e6:
94:01:b6:82:e4:a5:bd:3c:2d:4d:36:fe:66:05:d6:39:0c:2d:
4d:0b:5a:07:bd:49:88:b3:9c:a6:4f:d8:d7:7c:16:41:38:fd:
6d:01:23:2c:a3:3f:90:92:a2:27:d5:a6:90:5a:f9:62:30:76:
d1:72:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:38 2025 by rpki-client