Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/peAC0jemS44LL9eAMtnnvfhl0QQ.roa
File: peAC0jemS44LL9eAMtnnvfhl0QQ.roa (raw, json)
Hash identifier: M7HBy7+sXugALnAMwzpYlFnUldtIuCHef9Q+Yk5qLvo=
Subject key identifier: A5:E0:02:D2:37:A6:4B:8E:0B:2F:D7:80:32:D9:E7:BD:F8:65:D1:04
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 0194258F542C9042D14DD465309A198762FB
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/peAC0jemS44LL9eAMtnnvfhl0QQ.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21057
IP address blocks: 80.84.128.0/22 maxlen: 22
80.84.137.0/24 maxlen: 24
80.84.138.0/23 maxlen: 23
80.84.139.0/24 maxlen: 24
80.84.140.0/23 maxlen: 23
80.84.140.0/24 maxlen: 24
80.84.141.0/24 maxlen: 24
80.84.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:54:2c:90:42:d1:4d:d4:65:30:9a:19:87:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5e002d237a64b8e0b2fd78032d9e7bdf865d104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:3c:4b:e4:cb:dc:66:16:b8:ac:c5:9f:6b:
20:1e:7e:b4:76:92:e2:c7:d0:3b:97:cb:dc:89:48:
33:3a:75:3e:70:80:c8:7c:aa:e2:b5:eb:99:f4:86:
ce:4e:93:10:94:52:36:82:c9:15:cf:6a:97:3a:b0:
55:dc:44:1e:5a:ae:e1:21:e4:61:17:c5:7a:bb:1a:
10:ed:f4:e7:b7:2e:c0:38:ad:9a:b6:01:77:58:73:
ed:ab:5b:ca:79:67:2c:42:3a:ce:da:bc:3c:05:6d:
4a:12:41:6a:ab:6a:58:b1:1c:0c:c6:8f:96:96:ab:
60:a7:ca:70:7f:49:c7:d4:6d:3d:51:8b:5a:e5:86:
53:ba:0a:8b:17:9f:f0:52:7e:81:26:bd:e3:00:60:
6a:bf:15:a2:f2:be:5a:d4:97:d1:a4:6c:50:09:12:
7c:98:fb:d3:7c:b1:07:01:d0:32:83:1a:38:fd:eb:
3b:93:96:73:07:6e:0a:f1:49:7e:d9:8f:fc:1b:be:
2e:06:25:c0:3c:27:ae:ba:2d:29:32:b2:f8:5e:a8:
16:9d:05:69:6f:e7:b6:c1:9a:58:03:e7:e7:54:cf:
7e:e8:85:12:68:38:c0:3c:3f:31:32:05:c2:c5:d0:
70:75:d4:9e:e0:29:60:5c:57:7a:0a:fb:df:ef:34:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:02:D2:37:A6:4B:8E:0B:2F:D7:80:32:D9:E7:BD:F8:65:D1:04
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/peAC0jemS44LL9eAMtnnvfhl0QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.128.0/22
80.84.137.0-80.84.141.255
80.84.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:72:2f:8a:8c:11:c3:64:31:55:31:b5:02:0b:df:fd:b3:44:
cc:ac:6a:45:45:63:93:40:58:91:fa:3c:92:ca:fd:82:b5:05:
5f:e9:2a:a4:45:31:f8:8b:3f:66:4b:9d:e0:ed:e9:8c:75:8f:
b5:99:d5:50:0a:16:2a:13:a1:9e:17:1d:5d:23:e6:16:7b:92:
00:67:42:f3:70:14:3b:2f:c8:54:48:16:72:49:e2:ab:1d:d9:
0d:5e:fb:fb:a1:25:08:a3:a9:60:23:d0:9d:1f:8a:f6:0c:cb:
ee:a1:f4:d8:11:34:fc:94:f1:72:4c:00:48:e5:fd:c3:c4:3a:
9c:f7:e1:65:02:c6:0b:b0:25:b1:eb:4a:0a:eb:53:50:03:68:
21:60:1c:1e:69:1d:ae:0f:5e:e3:48:3d:2d:c8:c6:ab:0f:c3:
1d:d4:b1:7e:fd:66:53:6c:15:ec:4e:ef:33:88:81:e6:b1:fc:
24:bb:ff:ef:27:ff:1b:19:51:81:96:74:1f:1e:cb:4a:85:dd:
7e:cc:37:ae:fd:6b:2f:81:e7:4e:61:3d:19:dc:cb:5e:14:f7:
1f:36:aa:5d:26:61:05:ac:88:46:0f:5c:ee:4a:cb:d8:b4:e0:
8e:39:3e:b8:ba:ed:5a:d8:57:63:82:94:f8:14:a9:4f:ab:8f:
c0:86:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:51 2025 by rpki-client