Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/PEJYOS_vVNkG3PT0lDgVcUmmsls.roa
File: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (raw, json)
Hash identifier: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=
Subject key identifier: 3C:42:58:39:2F:EF:54:D9:06:DC:F4:F4:94:38:15:71:49:A6:B2:5B
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 01942747FF80D7D160A55E80EAAD46A94EE9
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/PEJYOS_vVNkG3PT0lDgVcUmmsls.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.133.0/24 maxlen: 24
192.136.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ff:80:d7:d1:60:a5:5e:80:ea:ad:46:a9:4e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c4258392fef54d906dcf4f49438157149a6b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:94:2b:69:2b:87:15:2f:28:fe:2c:4b:79:
d3:9c:b9:3d:5e:db:21:e1:a7:cd:b8:8e:2c:d3:a0:
7d:b4:23:5d:ba:d9:23:c1:f2:0f:1d:b8:2f:1f:5e:
89:a1:a7:68:62:9c:59:d8:c8:01:07:c1:91:c3:75:
5f:79:56:93:7b:71:23:24:80:36:b0:b2:8e:14:dc:
d9:15:5e:39:0c:02:66:1b:8a:4f:48:c0:8e:f3:5b:
5b:75:e9:42:67:85:55:34:c9:56:68:32:d1:3c:8e:
2e:d3:08:4b:53:1d:a2:2d:0c:06:05:95:cc:aa:5e:
1b:53:00:3b:39:31:23:3b:b3:1c:44:2e:7f:24:72:
c4:cb:f8:b9:52:22:72:88:40:cf:b4:ae:6a:8f:8a:
30:6d:50:c5:27:08:de:a7:a5:76:c6:ef:00:dd:77:
89:f7:6b:8d:05:b1:b8:ad:77:d7:2b:38:ee:46:e6:
a3:7f:cc:21:57:b9:4f:a6:24:2f:ab:0c:b1:29:09:
d2:24:59:d8:cd:be:9e:2c:d2:05:0c:9a:15:80:0d:
76:71:3e:9c:1d:6e:07:c8:ef:cd:00:0b:cb:35:36:
c9:a6:67:f1:2e:2a:52:cb:b6:be:da:ec:2a:04:55:
96:4f:57:da:f3:33:32:2b:eb:d3:46:13:9e:78:3d:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:58:39:2F:EF:54:D9:06:DC:F4:F4:94:38:15:71:49:A6:B2:5B
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/PEJYOS_vVNkG3PT0lDgVcUmmsls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.133.0/24
192.136.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:95:3f:33:e6:97:09:5c:54:69:2e:fd:23:ce:bb:86:59:d2:
91:94:eb:74:ff:cc:98:8a:36:9a:70:32:82:50:1e:5c:4e:b1:
d4:5c:99:4f:c3:9c:4f:24:e7:1d:c6:b1:01:ce:f4:35:52:cc:
9b:37:59:10:8a:b7:b3:15:39:79:86:0b:bc:2c:b1:17:6d:ee:
9f:78:7a:d3:23:39:b8:1f:42:d4:ea:f0:99:ff:bb:f1:a2:5f:
3d:ce:09:94:98:ac:0b:19:de:1d:a9:0e:46:a9:73:7a:95:a3:
9e:49:95:5c:4a:c3:ab:48:37:a3:03:17:c9:6b:74:fd:ff:e2:
4e:82:7d:c0:db:a7:c8:c0:ba:f6:2c:8f:f0:c0:a7:4c:ce:ea:
3b:f4:70:eb:75:eb:fc:a7:a1:69:4f:19:e1:0a:f0:bf:66:0d:
b1:ee:34:98:8e:b0:4e:95:86:c0:00:0f:56:dd:d0:01:55:2c:
8e:94:08:be:15:5d:18:a2:cc:9a:f2:04:e3:f4:39:08:49:16:
3a:ca:04:92:15:51:d7:0e:17:b5:7c:23:77:62:e6:41:e0:60:
4f:61:8f:03:fa:e8:c5:ae:08:94:6b:93:d1:50:64:59:d7:bf:
25:12:4d:d6:a0:e7:7d:d4:0a:9e:cf:d6:1a:2d:f3:df:9c:3b:
8a:05:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:45 2025 by rpki-client