Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa
File: Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa (raw, json)
Hash identifier: Dai1lG17fGD9BnTUUlUvQILwXK5E8pX/ztfvO8UR/Sc=
Subject key identifier: 3D:EF:76:6A:C5:62:DF:E8:AF:E0:47:E4:E1:A1:29:3E:75:C4:E0:E9
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 019425FC7C36B00648DC26993A8797C6FE67
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25037
IP address blocks: 77.80.128.0/17 maxlen: 17
2a05:2242::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7c:36:b0:06:48:dc:26:99:3a:87:97:c6:fe:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3def766ac562dfe8afe047e4e1a1293e75c4e0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:e1:88:49:fa:72:c8:7c:32:0a:3e:55:16:
c2:d2:de:a0:49:a3:62:bd:35:10:44:9d:1b:2c:f9:
42:6f:2d:35:23:7f:09:87:15:41:f6:97:b2:86:ce:
e5:76:0c:e2:21:3e:06:dd:f3:26:74:a8:84:d2:a4:
1d:9b:0e:b2:b8:5c:1a:8c:13:f9:ae:a4:83:f4:98:
af:40:ec:0b:6b:d8:13:a0:38:71:db:2b:1e:03:b0:
46:d4:2b:b9:2d:a6:aa:09:01:72:ce:da:19:e0:9c:
20:a1:a1:41:9b:a1:e4:a9:f7:15:1d:2b:95:d4:48:
48:4a:45:5f:3d:60:4c:13:66:b9:47:02:d4:55:9f:
57:78:ca:f8:bb:f1:37:e5:07:0a:bb:63:a3:79:b9:
c2:a2:b1:61:60:29:40:33:cd:f7:ce:7f:33:b1:fc:
dd:0e:08:42:31:af:4e:99:cc:70:e8:7e:c7:c1:49:
3e:2b:82:8e:36:3e:bc:63:11:83:0c:a5:60:cc:4b:
f6:8a:49:32:cf:e7:ce:27:65:25:29:de:84:62:81:
21:d7:4d:40:ad:d5:0d:f8:50:10:e9:fa:18:25:29:
4d:69:89:c3:4b:c1:e9:27:7e:ac:74:d9:d2:a4:29:
8d:b2:2e:45:16:f2:3e:88:f3:cd:fb:db:c6:6e:91:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:76:6A:C5:62:DF:E8:AF:E0:47:E4:E1:A1:29:3E:75:C4:E0:E9
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.80.128.0/17
IPv6:
2a05:2242::/32
Signature Algorithm: sha256WithRSAEncryption
03:71:d0:25:33:e4:e1:e4:88:2e:27:0a:15:73:d7:e6:1d:06:
d8:31:80:d3:d6:52:7f:ab:a5:ff:1e:ec:3f:5d:1b:b3:21:c4:
33:fa:d2:96:58:1b:92:66:18:25:44:65:93:e9:28:08:d6:35:
64:24:60:73:9b:ed:66:39:7e:42:c4:96:12:17:41:e1:e4:bd:
1a:c5:47:bf:07:83:1f:a8:5d:4b:a2:24:ff:f3:bc:0a:56:23:
e7:ea:13:f9:b8:59:42:c7:cf:6c:f9:16:c6:4b:75:fe:eb:84:
ef:56:97:34:20:a1:56:5f:79:ec:b4:c8:0a:b9:46:c6:1e:a2:
65:bf:cf:a6:d7:43:70:fa:49:0f:4d:ff:f1:d5:29:40:54:14:
04:68:25:64:b3:8e:43:97:fa:33:fe:39:ba:b2:78:74:22:d9:
fa:54:e8:35:47:37:11:c7:6f:74:f7:44:34:a5:14:38:a3:01:
bc:0f:41:20:7a:db:a0:f4:db:04:04:dc:9e:5e:c2:b3:8f:39:
54:e9:f9:50:0c:98:4b:a1:10:e0:f5:09:ab:6c:b6:cf:80:74:
5c:07:00:f9:64:25:e7:a7:3c:3e:d4:56:01:f4:cb:44:d1:05:
f8:d8:a0:aa:5f:7a:ea:38:aa:a0:3b:10:e9:24:bd:5c:a0:d6:
7a:76:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:46 2025 by rpki-client