Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/P2nym14bXf7-o3TKnA8wqlQINc0.roa
File: P2nym14bXf7-o3TKnA8wqlQINc0.roa (raw, json)
Hash identifier: BvMnx8gB03E4RRWOX7ePyO4fuU7mD1CMfMsL+iFDUsM=
Subject key identifier: 3F:69:F2:9B:5E:1B:5D:FE:FE:A3:74:CA:9C:0F:30:AA:54:08:35:CD
Certificate issuer: /CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Certificate serial: 0194206853E9C163F6C03DE3243FAEDF5848
Authority key identifier: 9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/P2nym14bXf7-o3TKnA8wqlQINc0.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44705
IP address blocks: 81.91.189.0/24 maxlen: 24
185.175.128.0/22 maxlen: 22
188.124.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:e9:c1:63:f6:c0:3d:e3:24:3f:ae:df:58:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f69f29b5e1b5dfefea374ca9c0f30aa540835cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:30:49:06:66:60:87:c4:14:f1:dd:2c:10:
2e:ad:8f:ea:0a:cd:7d:c5:e9:d5:c7:07:97:55:45:
63:4c:21:94:3a:78:49:ba:c2:ed:07:d2:50:e5:53:
e2:7f:48:9c:f6:4c:86:73:7d:08:1d:9f:2f:3d:5d:
65:1a:13:52:3d:33:73:2b:77:17:32:39:24:38:f0:
4b:f2:e0:92:23:2d:13:21:bd:7d:f9:0a:94:81:57:
36:63:26:6b:2d:53:22:1a:38:1a:4f:1b:17:a4:6d:
d1:f3:11:21:59:ec:22:2d:35:5d:d1:b5:ec:ce:b4:
32:8c:d2:59:bc:56:82:71:12:d0:41:81:5c:3d:0a:
a6:a8:c7:a9:c8:13:1d:50:0f:5d:9a:02:7c:43:d0:
ef:11:4e:64:ea:ff:b3:b5:61:29:91:85:08:f1:61:
f6:d8:dd:81:19:4b:c8:13:14:e2:5d:8f:ae:5b:7d:
ef:13:7a:c4:1d:25:be:a5:0a:09:c9:f9:fa:e6:c8:
1b:4b:7e:52:aa:b3:d2:d0:17:ed:6b:fc:41:fa:c9:
f4:9a:a6:e1:8d:13:f5:28:f4:a3:fe:72:6e:1d:26:
ca:c1:d2:c9:c5:33:42:be:ae:e2:79:0a:33:d5:59:
2a:b3:42:43:df:c9:83:3e:5a:e0:77:f6:70:9c:b3:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:69:F2:9B:5E:1B:5D:FE:FE:A3:74:CA:9C:0F:30:AA:54:08:35:CD
X509v3 Authority Key Identifier:
keyid:9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/P2nym14bXf7-o3TKnA8wqlQINc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.189.0/24
185.175.128.0/22
188.124.240.0/22
Signature Algorithm: sha256WithRSAEncryption
02:0a:81:f3:c3:e7:57:93:e6:0b:9e:46:66:71:fe:65:05:57:
9b:47:07:2a:41:fb:9c:a2:04:c5:9a:ad:78:ca:59:90:21:61:
61:39:59:b0:57:75:f3:36:9d:c7:01:2d:28:a7:73:3a:e0:66:
35:af:a0:76:cf:2b:8b:d2:aa:80:68:01:49:4c:99:a4:ec:e8:
c2:cf:f0:b4:31:78:d6:53:3a:dd:d9:05:95:5e:cb:a4:a4:a8:
7f:82:0a:2e:fe:89:fa:4a:3a:d1:7f:2b:3c:6f:f8:9a:64:aa:
07:75:9b:f8:7c:76:f3:bb:82:57:36:1f:12:87:1c:4a:c5:07:
b6:22:82:55:97:bf:04:b5:9a:5f:bc:44:c5:f5:4b:4d:f1:53:
39:17:7d:5b:2b:14:45:80:41:34:da:ca:38:e8:35:8d:62:03:
29:4d:3e:03:88:06:e8:b9:f4:10:8a:2d:8b:c1:8f:43:ae:95:
7c:51:65:da:b7:8d:83:bf:11:2e:d1:b0:ec:32:a5:14:f5:10:
97:db:92:ab:de:57:df:b7:65:5e:ca:a1:5e:3a:de:4f:39:02:
bf:95:cf:f4:d4:86:c3:4f:96:87:5a:53:33:39:c0:f8:6d:56:
65:42:e8:5c:94:eb:e2:30:40:e1:4a:2c:e9:0b:5f:c9:de:6a:
c2:81:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:20 2025 by rpki-client