Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/ttVoIKzTT0XKllFStzVaYvUJzr8.roa
File: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (raw, json)
Hash identifier: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=
Subject key identifier: B6:D5:68:20:AC:D3:4F:45:CA:96:51:52:B7:35:5A:62:F5:09:CE:BF
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 019427B5F655409F1F6021D826D876B1D570
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/ttVoIKzTT0XKllFStzVaYvUJzr8.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60698
IP address blocks: 193.17.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f6:55:40:9f:1f:60:21:d8:26:d8:76:b1:d5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6d56820acd34f45ca965152b7355a62f509cebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:f1:db:b7:a3:0b:75:e7:bb:ab:f1:44:b8:
f5:9b:3a:f6:b6:07:e8:ae:44:cb:a5:91:56:93:a6:
f8:a8:6f:fa:a4:a8:65:ff:d1:b0:47:50:14:86:33:
6b:3b:f1:c1:d8:13:d0:17:57:d4:71:a7:48:a9:ce:
a2:ee:e8:15:2c:da:b5:2e:d1:eb:cc:5b:33:29:9a:
50:58:d6:4f:ca:e8:6e:d2:f0:32:11:1e:81:c5:10:
ee:34:2e:ef:7f:09:54:dd:a8:97:2e:84:60:e5:35:
4b:7d:dd:7b:aa:98:9c:cd:31:cb:16:aa:5e:c2:ad:
d3:5e:1f:60:51:e4:17:a7:61:9b:6e:5c:0b:a5:a9:
cf:fb:d1:56:f4:2e:f8:5e:e3:f2:15:1a:57:fb:63:
dc:78:31:f4:79:a0:5a:e9:e0:ad:5c:0a:76:ce:c0:
80:04:f3:6f:0e:17:7c:50:26:2f:25:c8:d8:f3:61:
96:6a:0b:f5:f9:9f:d7:bc:79:24:59:e0:26:02:45:
10:9b:ca:fa:12:1b:7a:d4:47:14:08:d7:07:ca:d6:
dd:85:5e:67:95:0a:b9:9d:6e:0c:eb:3c:82:af:e2:
16:a3:ef:fb:69:02:e5:ef:52:c7:3d:1b:c4:cc:54:
d2:90:4b:63:c4:4c:02:8c:d6:02:e5:c2:cf:30:c1:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D5:68:20:AC:D3:4F:45:CA:96:51:52:B7:35:5A:62:F5:09:CE:BF
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/ttVoIKzTT0XKllFStzVaYvUJzr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9a:44:d6:8d:e2:7a:a7:04:2f:e7:32:6b:ef:0f:c4:42:b7:
81:e2:76:bb:ca:05:41:9f:20:74:23:3e:8d:d3:51:6f:81:4f:
a0:54:a8:8b:c5:f1:2e:5f:b8:1f:e9:43:0a:e1:4e:3e:f9:f7:
3b:65:bf:ca:54:a1:7a:f3:a4:ba:67:c5:02:8b:08:97:c9:cc:
0f:ea:ec:f0:f7:09:a6:1c:55:9c:ba:31:f6:4d:d1:7e:d7:82:
96:47:e0:73:b9:e5:9a:c6:ed:22:d0:e6:52:82:e8:7d:48:5f:
14:7d:4e:f7:55:f7:6c:46:e1:c4:80:6a:05:63:99:37:12:e7:
7e:ca:ed:cd:a3:b3:b0:cd:6e:ed:36:48:6f:de:b7:fc:d1:53:
07:f5:45:7c:e2:8c:4f:ac:d0:89:ae:45:f5:31:a1:85:6e:f9:
59:ed:ee:65:e7:54:75:e7:8b:5b:43:43:19:7d:f8:97:cc:62:
75:03:d4:bb:46:00:ce:df:ae:5b:c4:f5:b6:ff:da:87:0c:19:
a0:d0:83:5e:72:ec:0c:fb:cd:95:91:d4:bd:cb:37:48:14:12:
3f:6e:ef:e8:9c:51:94:4a:ad:c6:56:95:d5:f8:c7:00:f7:34:
a1:51:82:3c:54:58:d3:21:72:93:73:64:40:08:a8:df:0f:d3:
ce:f1:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:49 2025 by rpki-client