Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/PEL_AvncwuI3bMf6SUAfKJq-Izo.roa
File: PEL_AvncwuI3bMf6SUAfKJq-Izo.roa (raw, json)
Hash identifier: 0hDESf4tEy1aF6YGMAd5P4WhIH+z7fiQXUkr28riJ6M=
Subject key identifier: 3C:42:FF:02:F9:DC:C2:E2:37:6C:C7:FA:49:40:1F:28:9A:BE:23:3A
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 01942143B368B7D4B1F1317040D7552CA06D
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/PEL_AvncwuI3bMf6SUAfKJq-Izo.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 80.93.220.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b3:68:b7:d4:b1:f1:31:70:40:d7:55:2c:a0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c42ff02f9dcc2e2376cc7fa49401f289abe233a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:1b:3c:77:9c:77:dd:66:26:11:6c:36:c3:
b9:bd:88:56:c9:cc:65:5b:39:b3:96:4f:39:89:c1:
99:cc:f4:39:15:28:56:50:07:8a:0c:db:83:17:85:
8d:6d:db:75:14:54:79:64:16:99:60:03:8c:08:d9:
47:ff:7f:f3:a1:97:98:ca:14:13:d8:23:02:8b:ae:
30:ee:26:ab:e1:6f:fe:24:8d:29:65:b8:a1:ce:b8:
86:80:99:5a:55:82:7e:04:32:b2:14:06:6c:01:1a:
e5:87:bf:4f:6b:28:25:62:25:24:30:a1:04:ef:09:
f0:01:78:aa:7d:b0:8d:89:bd:b4:12:26:87:19:2d:
d9:72:2e:5d:4d:c2:38:9c:41:83:73:6b:a1:ff:b7:
b3:6b:0a:58:78:41:e7:94:7e:8c:cd:da:95:92:22:
7f:f1:3f:54:bc:20:ba:c5:fb:c2:5a:49:53:60:f2:
7e:fe:f1:8d:41:a2:0b:b9:08:b9:f5:23:4c:7a:04:
55:18:da:e5:bf:21:ab:f2:eb:e1:5b:a0:92:79:ed:
43:b6:3e:58:7f:ef:99:48:aa:a3:40:2a:ba:ca:b5:
1b:eb:06:14:60:1e:9a:dd:ec:3e:77:1f:68:b3:7f:
6d:73:8d:24:e5:27:f7:17:02:e4:76:dd:0a:ee:f5:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:FF:02:F9:DC:C2:E2:37:6C:C7:FA:49:40:1F:28:9A:BE:23:3A
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/PEL_AvncwuI3bMf6SUAfKJq-Izo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:35:33:43:0e:6d:a7:9f:e5:39:61:b8:83:e9:da:d4:bd:28:
7a:b3:d9:2f:09:94:d0:df:53:cc:73:94:f8:d0:16:4a:72:03:
69:d1:73:80:94:e1:dc:77:7c:11:83:07:a0:3b:e6:b9:d0:e9:
94:10:fb:33:5b:a0:b4:45:51:00:d5:b0:44:b3:74:35:43:4a:
e4:76:ce:b4:bf:06:c9:48:18:45:58:c2:b8:d3:4c:97:2b:2e:
e3:60:49:6b:ca:2c:b0:8c:e0:7c:00:16:f4:d0:e2:8e:67:b9:
47:3a:e9:a0:a3:12:66:20:44:d1:79:a7:60:12:a8:4f:ba:e6:
b7:34:10:cc:37:1e:9a:0a:dd:c8:9e:b2:41:5d:99:b0:e9:77:
8a:c4:7a:25:4c:a7:da:f3:a9:79:7c:78:96:50:08:cc:bb:0e:
9d:68:3d:fd:32:3a:dc:65:47:9f:ab:48:78:9a:22:8b:c6:22:
c7:c3:ae:22:37:9a:4d:23:95:f8:d2:ba:f9:d1:90:9d:09:3b:
05:0d:f6:74:ae:5d:52:51:0d:61:dd:2f:24:43:75:02:f9:55:
43:c7:a5:b9:e0:b4:6b:0b:e0:24:bb:c4:4a:9f:4e:39:3e:09:
38:45:97:b4:5f:d6:ef:0d:e4:e0:28:b9:b2:ec:ee:07:22:b6:
56:bf:c8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:37 2025 by rpki-client