Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/Pe3pszkM2CU3Aqq2LsSWnRdpMXY.roa
File: Pe3pszkM2CU3Aqq2LsSWnRdpMXY.roa (raw, json)
Hash identifier: 7KOR6sFk9qGqJSuGUx84Vcqp+ySqoAEsvIAFZWSMqGg=
Subject key identifier: 3D:ED:E9:B3:39:0C:D8:25:37:02:AA:B6:2E:C4:96:9D:17:69:31:76
Certificate issuer: /CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
Certificate serial: 019423D6D4D8FC328F77AE0C0EAAF4F27C28
Authority key identifier: E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/Pe3pszkM2CU3Aqq2LsSWnRdpMXY.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48220
IP address blocks: 217.198.64.0/21 maxlen: 21
217.198.72.0/21 maxlen: 21
2a00:1de8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d4:d8:fc:32:8f:77:ae:0c:0e:aa:f4:f2:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dede9b3390cd8253702aab62ec4969d17693176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:88:4a:e4:76:b5:36:e0:43:83:83:31:5a:5e:
eb:60:16:b3:85:6c:4a:4d:2b:ef:1f:10:13:6e:22:
88:20:5e:d5:d5:e4:24:1f:0d:57:32:5a:fd:3f:43:
20:8b:64:be:ce:41:de:6e:11:de:87:c2:29:98:c1:
6f:51:50:d8:1c:6c:09:0d:34:6f:ab:4e:1a:dc:dc:
32:65:46:a3:d0:2d:97:ff:15:1a:40:fe:a7:e3:d5:
c6:5e:bf:61:b7:e6:18:7c:5b:99:1c:1b:b9:87:1e:
6e:d9:80:fb:e2:01:f0:72:19:94:a6:50:3d:33:d3:
13:6f:f9:90:2a:e2:4b:e1:4c:c2:ae:08:5b:ad:3c:
1d:f2:ef:e2:e8:dc:f0:dd:7b:f3:54:3b:b1:89:26:
90:74:2c:b7:c2:18:90:bd:b4:35:41:47:f2:9c:21:
80:85:70:d8:70:31:26:d7:ab:be:f4:a1:7e:f0:e3:
68:46:d3:0c:c6:96:46:4e:df:24:45:80:9e:f8:59:
be:bf:cb:80:55:9d:13:cc:e1:eb:cb:1b:a9:61:10:
66:67:22:4b:81:c1:ef:cc:1d:a4:1f:7b:ea:59:5a:
e5:e3:fc:03:b6:13:72:22:d7:82:4e:d7:69:ae:a0:
88:5c:66:a8:34:ea:c8:e8:db:3d:9c:6f:6c:69:e5:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:E9:B3:39:0C:D8:25:37:02:AA:B6:2E:C4:96:9D:17:69:31:76
X509v3 Authority Key Identifier:
keyid:E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/Pe3pszkM2CU3Aqq2LsSWnRdpMXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.64.0/20
IPv6:
2a00:1de8::/32
Signature Algorithm: sha256WithRSAEncryption
04:52:64:69:69:72:91:61:5d:49:d3:23:ef:f8:14:61:1d:19:
ff:ff:78:a4:70:9d:cc:89:da:de:2b:f9:f0:45:4d:db:48:39:
84:b4:aa:44:6d:32:a2:94:c9:a4:4b:0c:40:bd:c9:43:14:6a:
5b:e9:3c:80:48:74:dc:7d:94:62:7e:2b:92:d6:48:19:09:c8:
35:86:ac:4f:78:43:9a:b4:95:24:f0:18:b2:e0:01:b4:5e:e6:
ac:ff:ef:6d:fd:04:be:78:4a:43:f2:1f:7f:d6:8b:a8:1d:ea:
9b:c4:91:58:37:37:3d:fa:51:ae:59:2a:9b:08:20:4a:be:43:
cf:18:74:50:99:86:1c:83:18:89:51:c2:be:4d:c7:a5:d9:6b:
f5:06:e2:13:bf:9f:0b:e4:45:a9:71:9a:64:a6:41:bd:90:49:
6b:0d:30:15:ac:f9:58:0d:61:4e:83:6b:0e:bb:1a:a9:4f:61:
39:65:51:50:45:fd:a3:3f:01:ad:9d:d8:8c:b6:ae:86:e4:8e:
db:58:9c:60:79:59:11:ea:29:34:cf:ce:f9:d9:db:25:fa:a3:
52:25:32:4c:98:38:8c:ee:00:91:be:fd:6a:35:2d:00:44:e3:
0f:52:a9:bd:7c:b6:73:65:2f:3b:71:bf:dd:17:9b:7b:f5:32:
41:69:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:40 2025 by rpki-client