Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PegLLGDkYvs3XF-Lv9hiNho74dc.roa
File: PegLLGDkYvs3XF-Lv9hiNho74dc.roa (raw, json)
Hash identifier: Vpb3C6Es4ErLDrckTZZ10f34MzLAYRtZRdftTDQsoSA=
Subject key identifier: 3D:E8:0B:2C:60:E4:62:FB:37:5C:5F:8B:BF:D8:62:36:1A:3B:E1:D7
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01942068003065669D260FF8A013F649A2BB
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PegLLGDkYvs3XF-Lv9hiNho74dc.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 2a0b:3c40:10::/48 maxlen: 48
2a0c:9e06::/32 maxlen: 32
2a0e:a944::/32 maxlen: 32
2a0e:a945::/32 maxlen: 32
2a0e:a946::/32 maxlen: 32
2a0e:a947::/32 maxlen: 32
2a0f:3b80::/32 maxlen: 32
2a0f:3b81::/32 maxlen: 32
2a0f:3b82::/32 maxlen: 32
2a0f:3b83::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:00:30:65:66:9d:26:0f:f8:a0:13:f6:49:a2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3de80b2c60e462fb375c5f8bbfd862361a3be1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9b:f6:cc:81:36:c4:74:37:49:a6:64:ab:55:
75:d1:cb:f8:f4:ae:96:cf:09:94:f5:2e:03:bb:c6:
5a:b8:35:81:de:27:a9:08:b1:80:c4:2d:48:38:ea:
35:ff:a5:25:b9:6f:cc:f7:a5:2c:47:3f:eb:ef:c6:
14:5c:44:01:bb:5f:38:5c:6c:db:d5:ea:a8:74:fb:
52:10:aa:cd:6d:0e:ab:e0:f2:37:e5:da:3f:8a:cf:
89:d7:24:3b:78:19:ca:b4:26:60:ff:61:d1:86:33:
db:c1:68:31:cc:68:53:99:9c:c6:15:66:03:58:11:
a3:b2:33:1f:9e:0a:32:00:ef:ea:15:80:c2:2d:d4:
06:7f:21:dd:03:af:52:c1:27:c9:40:94:7b:b6:61:
a8:5f:d8:74:07:bb:07:30:ec:29:fe:68:58:5e:90:
e9:34:b6:a9:c8:71:c8:13:db:4f:ab:9d:21:8e:a6:
ec:48:eb:80:f7:05:7d:bf:5c:21:00:f2:b8:88:f1:
cb:ed:dd:89:44:e6:b4:6d:2a:08:62:12:c4:9b:1d:
a3:1e:6a:23:59:23:f4:fc:77:48:56:3a:32:70:41:
18:7d:37:7e:ba:a1:d1:3a:e2:cb:b0:59:27:bf:70:
5e:09:d9:87:9e:a5:47:98:65:d4:04:04:9e:27:14:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:0B:2C:60:E4:62:FB:37:5C:5F:8B:BF:D8:62:36:1A:3B:E1:D7
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PegLLGDkYvs3XF-Lv9hiNho74dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c40:10::/48
2a0c:9e06::/32
2a0e:a944::/30
2a0f:3b80::/30
Signature Algorithm: sha256WithRSAEncryption
34:0a:77:92:13:8f:3e:cf:7f:41:8e:f6:0d:8a:96:cd:51:ab:
2a:dc:e4:9b:78:2c:a5:fd:65:92:f5:24:75:2c:ea:a1:fd:38:
cf:6c:f7:d0:45:d7:ad:39:dc:86:22:4b:f0:4d:c6:f9:89:2b:
95:76:82:b4:17:c2:1f:83:33:2e:03:25:6d:c4:dc:c0:69:06:
0e:ed:0e:d6:b8:ac:a4:77:80:17:7d:ac:ab:1b:89:c1:c2:fb:
b9:71:18:65:05:e8:a6:89:bf:67:ff:d7:1f:1e:56:56:7f:c1:
d8:36:98:25:eb:9c:00:41:85:b4:00:29:3c:d6:0c:17:84:35:
f8:6c:98:84:db:c2:4c:b5:40:f7:0e:d3:20:3d:88:36:0a:68:
69:17:07:41:ca:3c:31:a0:c1:c7:c3:6d:da:ec:20:60:ae:78:
fb:30:3c:3c:d0:40:0b:12:ec:40:d4:1f:0b:ca:73:4e:d4:b7:
10:66:41:bc:28:65:f9:31:82:2c:f6:f2:e8:5d:8e:81:1d:8b:
58:c1:83:b7:51:94:5a:f6:a8:dd:69:70:6b:3c:f1:7d:63:b1:
75:52:0c:76:6d:df:11:b9:6f:9c:b5:d0:41:ff:71:28:22:bd:
4a:8b:2c:4d:61:19:d3:a8:68:db:36:9e:86:9e:ae:73:b6:4f:
4e:db:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:31 2025 by rpki-client