Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/PEGZ0SKUsOWnLFwvjMMZSMnM6Hc.roa
File: PEGZ0SKUsOWnLFwvjMMZSMnM6Hc.roa (raw, json)
Hash identifier: sSrvpC0+Fkk6apGOBb4rC6bIthPXh3eQNtaxSxpLd8I=
Subject key identifier: 3C:41:99:D1:22:94:B0:E5:A7:2C:5C:2F:8C:C3:19:48:C9:CC:E8:77
Certificate issuer: /CN=2a34723b4034fdb79f3698bfd3f71887eb9c37de
Certificate serial: 01E164
Authority key identifier: 2A:34:72:3B:40:34:FD:B7:9F:36:98:BF:D3:F7:18:87:EB:9C:37:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjRyO0A0_befNpi_0_cYh-ucN94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/PEGZ0SKUsOWnLFwvjMMZSMnM6Hc.roa
Signing time: Wed 04 May 2022 11:38:30 +0000
ROA not before: Wed 04 May 2022 11:38:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197518
IP address blocks: 194.104.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123236 (0x1e164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a34723b4034fdb79f3698bfd3f71887eb9c37de
Validity
Not Before: May 4 11:38:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c4199d12294b0e5a72c5c2f8cc31948c9cce877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:4b:bc:f2:d3:62:9f:9f:9a:87:12:b4:e7:
c1:f0:a1:4c:25:54:27:b2:f5:ef:05:0d:e1:62:51:
ea:0d:1f:a5:f8:ab:2b:d9:14:19:56:e9:42:b2:65:
c1:4c:a0:be:00:3f:06:26:73:76:41:85:39:f1:9c:
47:fd:38:bf:20:d7:33:e3:9c:a9:d2:61:d3:8e:89:
84:15:71:ee:d3:3e:21:c8:42:e1:4f:3a:9b:ee:08:
5e:f9:be:0c:75:dd:7b:1a:ee:c4:03:cc:fc:12:cf:
44:3c:75:1a:02:6a:ee:35:9f:a6:06:09:ca:b0:69:
74:b1:95:ee:f1:9f:d5:d9:13:9d:69:e0:58:90:fb:
44:f5:fb:e2:9c:df:86:cc:c0:b0:d3:ec:25:c2:d6:
3b:2a:6f:db:ec:26:71:9f:15:9e:fb:6e:9c:d1:8f:
80:48:29:5b:98:be:74:ce:e2:e5:c6:0b:9d:6f:4c:
64:f5:02:fd:62:1a:36:a4:b0:61:b5:63:a1:3f:a1:
c3:dc:e8:c1:02:88:39:9a:22:dd:76:11:94:86:b0:
86:93:af:3d:4f:16:8f:63:67:88:69:4c:f8:fe:d5:
42:75:62:c2:32:b2:0f:7c:f4:a0:5f:20:d2:ec:b2:
b9:79:2a:03:ab:ab:0f:7d:f1:13:d0:1e:b9:3d:ac:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:99:D1:22:94:B0:E5:A7:2C:5C:2F:8C:C3:19:48:C9:CC:E8:77
X509v3 Authority Key Identifier:
keyid:2A:34:72:3B:40:34:FD:B7:9F:36:98:BF:D3:F7:18:87:EB:9C:37:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjRyO0A0_befNpi_0_cYh-ucN94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/PEGZ0SKUsOWnLFwvjMMZSMnM6Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/KjRyO0A0_befNpi_0_cYh-ucN94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.141.0/24
Signature Algorithm: sha256WithRSAEncryption
50:35:06:06:2e:2c:7b:2b:90:92:e1:f0:c2:9b:b0:72:e4:45:
52:95:11:53:8e:89:07:f3:7d:9c:1c:23:36:89:c3:02:6c:80:
a1:20:05:43:92:16:f9:36:dc:3b:ff:13:53:0f:e5:69:33:4a:
b9:c4:aa:9c:24:cf:31:57:84:6d:28:0b:13:00:6f:89:46:66:
37:d0:bd:70:3f:46:8b:cc:8e:3f:13:62:5a:11:0e:0f:91:43:
ef:68:d6:46:a4:05:e3:b6:1c:b7:a4:11:d8:4d:96:76:9c:75:
d3:3e:4d:84:f7:ca:5e:91:7f:2d:f4:9f:a7:e4:90:05:b0:99:
f7:0f:1a:16:10:4d:8d:af:b0:07:99:ee:df:ee:a9:b3:94:1d:
1d:58:72:40:d5:eb:e2:ed:b5:4e:e6:05:5f:68:f9:99:64:89:
a3:42:ce:2c:79:6d:03:88:08:d2:d2:7e:77:2e:cc:4b:7b:06:
83:d6:df:33:b1:28:32:fc:c7:8d:56:b1:fa:51:1c:13:b1:b2:
56:6d:f0:d5:1c:c1:cd:d4:13:6d:df:be:83:bd:f4:4e:8f:ef:
dd:66:93:a5:96:f7:1b:b2:0c:41:56:29:f6:5d:00:84:a8:be:
66:9f:cc:85:c6:ea:2c:5b:6f:e2:f7:ba:22:8b:4b:9c:52:84:
06:ed:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:37:54 2025 by rpki-client