Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/peZQPUG6EREQXk9fJ6XL9FgtEhs.roa
File: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (raw, json)
Hash identifier: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=
Subject key identifier: A5:E6:50:3D:41:BA:11:11:10:5E:4F:5F:27:A5:CB:F4:58:2D:12:1B
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019426D9954870D288B428B7EB93DB46FA65
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/peZQPUG6EREQXk9fJ6XL9FgtEhs.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48106
IP address blocks: 195.128.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:95:48:70:d2:88:b4:28:b7:eb:93:db:46:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5e6503d41ba1111105e4f5f27a5cbf4582d121b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:18:eb:cd:68:e2:3a:8a:0f:69:3d:64:b0:
fa:2c:5f:52:de:88:1c:90:97:a4:08:42:32:d1:48:
36:c6:5d:6c:e1:33:a4:03:5a:43:30:af:27:79:61:
6a:e4:56:f6:d5:05:57:31:bb:13:29:e7:0f:fd:15:
f3:59:a2:40:b3:ce:49:69:b3:36:49:8d:74:32:3d:
0c:ea:8f:df:09:6f:fb:6e:98:46:6a:74:bc:8e:99:
09:03:1d:71:04:e3:29:20:d8:b6:42:25:20:f1:01:
c7:f3:6b:52:86:c2:8a:13:51:a1:b8:73:b3:c8:51:
41:2c:59:92:34:a7:08:b0:ff:b8:b5:38:ce:33:1d:
e6:2a:20:f8:b4:b4:d8:dc:8a:eb:de:6d:7d:bb:16:
07:59:df:61:e1:15:02:cd:77:b9:7a:d1:6f:b7:e5:
a3:f5:73:d5:51:2c:1d:e8:f6:50:1e:a2:30:17:7a:
e0:6a:a5:49:5e:38:1d:09:31:85:da:83:52:dc:0c:
25:ba:89:2c:26:a7:5e:ba:56:7d:20:23:64:47:88:
a9:1e:2f:13:eb:4b:f1:13:69:de:34:a1:83:b7:10:
2c:8b:84:24:57:2b:e3:ab:30:e0:50:7c:e2:1d:4f:
2c:78:4f:99:5c:c3:37:2e:ec:d1:de:7e:84:06:8d:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:50:3D:41:BA:11:11:10:5E:4F:5F:27:A5:CB:F4:58:2D:12:1B
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/peZQPUG6EREQXk9fJ6XL9FgtEhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.27.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ae:ee:b4:9b:ed:f4:c1:18:4e:b5:70:81:e4:d1:15:1a:0d:
28:ff:f2:1d:b5:72:cc:d0:c0:92:ac:65:36:97:32:34:00:5f:
c6:5a:69:fc:90:c8:0e:8e:6b:75:13:9e:45:4d:37:cf:f8:d3:
33:7e:7a:f8:9d:f2:f7:aa:a8:64:7c:19:a5:1d:40:b5:07:43:
aa:3a:64:20:b4:97:68:40:0a:2f:28:ba:65:ed:44:68:32:43:
2c:ac:92:99:e3:26:71:ef:3e:48:33:41:eb:47:d7:2f:14:30:
9a:66:99:ae:67:2b:b1:0d:2e:8c:df:68:82:11:8d:a7:34:37:
01:b7:85:ef:88:2d:27:2c:b7:ec:93:5f:4f:23:aa:ab:ad:7d:
15:73:2a:10:e1:c1:21:56:55:b8:11:20:96:54:0a:dc:82:19:
86:7f:2b:ed:3e:a7:8d:30:74:5d:49:d9:2c:7d:7f:4f:ee:f2:
0a:c8:bd:7c:68:f9:aa:d0:4e:38:c3:c4:7f:c6:79:da:18:3e:
a9:dc:4a:8b:55:74:55:c6:c0:9c:2c:34:42:d4:4e:46:b5:87:
04:9a:bd:3d:63:9e:c8:ed:38:08:be:5a:b7:61:65:e6:48:8f:
8a:c7:86:90:bd:c2:46:b8:53:ef:e9:8c:8b:bd:70:df:c4:7e:
58:ca:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:47 2025 by rpki-client