Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ttu1doUmnWf8em9egHY6q-6vX8I.roa
File: ttu1doUmnWf8em9egHY6q-6vX8I.roa (raw, json)
Hash identifier: XFDGiWVypy9ZUOeqJDsRVLy1KDJDcFT2tQs5V6LH2B4=
Subject key identifier: B6:DB:B5:76:85:26:9D:67:FC:7A:6F:5E:80:76:3A:AB:EE:AF:5F:C2
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428241D3445B3DA5CB986607253FEFA77
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ttu1doUmnWf8em9egHY6q-6vX8I.roa
Signing time: Thu 02 Jan 2025 17:50:42 +0000
ROA not before: Thu 02 Jan 2025 17:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7979
IP address blocks: 130.185.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:1d:34:45:b3:da:5c:b9:86:60:72:53:fe:fa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6dbb57685269d67fc7a6f5e80763aabeeaf5fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:45:86:a6:e8:ef:b7:28:fa:cc:db:b4:25:
f6:cd:91:75:36:ad:e2:cb:ea:e1:01:9d:35:13:bf:
20:b9:e7:f2:d8:3f:9d:1f:2a:c1:87:3c:b8:eb:b8:
41:81:bc:92:88:e7:a9:a5:a1:b2:b1:e6:61:ce:3f:
3b:1c:b2:ce:1e:3f:ee:d5:51:c9:54:b9:92:54:a5:
e7:0f:55:46:7b:58:3e:8e:be:42:18:73:1b:fa:11:
82:dc:e1:2c:b7:7a:6e:f8:86:29:42:ac:8b:56:48:
c5:38:f3:54:9d:14:2b:c6:22:f6:06:7f:61:02:69:
7e:7a:d5:8c:b1:9b:13:37:14:51:12:81:63:2b:23:
52:39:5e:1a:d0:12:4a:57:77:cc:5a:89:a6:ec:54:
f7:21:e1:2d:74:8c:03:d8:2d:3d:1d:5f:84:82:a0:
89:d0:ad:cd:ce:1a:6e:f0:af:6d:8a:01:69:3b:59:
8f:de:66:a3:79:0e:f8:9b:99:65:4a:95:84:d4:b8:
19:e9:d2:31:a7:2c:a6:34:fa:73:4a:74:22:87:63:
4d:e1:6f:e1:3b:de:d1:57:39:e1:73:c3:b7:34:c1:
8d:d4:94:69:3b:ff:de:e8:3f:40:6e:55:0f:a8:0a:
b6:ea:49:7c:bf:9b:61:0d:9c:4c:20:99:34:91:91:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DB:B5:76:85:26:9D:67:FC:7A:6F:5E:80:76:3A:AB:EE:AF:5F:C2
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ttu1doUmnWf8em9egHY6q-6vX8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:27:e6:bc:38:4a:7a:52:75:41:0e:43:63:db:0e:69:e6:77:
f8:5c:35:09:5c:f0:d2:f2:2a:29:f4:8c:67:63:cb:f3:2e:f8:
d7:fe:b8:d1:5b:cd:85:b8:f5:e9:b7:6d:8e:6f:87:52:b5:15:
b9:58:09:5e:45:db:e9:86:a3:14:26:9c:c4:a5:e5:b5:a9:6f:
c6:07:2e:f6:99:b7:22:4b:e5:02:df:b8:ca:c7:ec:50:7e:44:
bb:7c:f0:dd:79:72:51:32:18:ff:72:f6:c2:b0:91:93:ea:a5:
b9:a7:0f:93:4b:93:ac:e6:6e:6d:bc:19:44:2c:b1:88:e7:f6:
f4:3c:c7:9d:d4:f2:bb:9e:5c:6d:d8:06:ba:2a:a1:2b:e9:38:
64:ad:23:f4:4c:c3:77:77:ec:0d:91:16:f1:24:6a:5f:72:8b:
03:8f:54:a3:b8:ea:39:92:de:11:61:73:71:4f:99:8b:ae:fe:
ac:09:b5:72:1e:73:39:6e:53:27:80:83:3d:6c:de:1e:d5:56:
02:6d:09:fe:06:fd:c3:16:8a:dd:57:6a:8a:4f:e0:2e:28:11:
bc:31:e1:36:ef:b5:e8:1b:85:f8:bc:21:4c:28:93:bb:e7:50:
7d:6f:12:cb:b5:f2:72:81:88:76:6d:eb:52:2e:32:0d:e2:37:
fe:00:01:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:38 2025 by rpki-client