Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: gkyujRsOh6Nv3CePXE4I23q/wVygIwGVARIMHK/06LU=
Subject key identifier: B9:09:EA:72:F5:BD:F7:DB:3E:56:D9:CB:15:82:59:B6:35:80:B2:D2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6C22C1A6634A83ADB577BA32D4EEBE2B6FA85EAC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
Signing time: Mon 02 Dec 2024 12:38:57 +0000
ROA not before: Mon 02 Dec 2024 12:33:57 +0000
ROA not after: Mon 01 Dec 2025 12:38:57 +0000
asID: 60117
IP address blocks: 181.215.55.0/24 maxlen: 24
191.96.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:22:c1:a6:63:4a:83:ad:b5:77:ba:32:d4:ee:be:2b:6f:a8:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 2 12:33:57 2024 GMT
Not After : Dec 1 12:38:57 2025 GMT
Subject: CN=B909EA72F5BDF7DB3E56D9CB158259B63580B2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:f4:45:76:5d:af:56:9a:b3:bb:77:21:4c:
df:80:78:fe:08:84:46:70:5b:90:87:ad:0f:5f:e0:
47:e9:e7:4a:0f:a3:d3:28:e5:be:bb:63:ba:a1:46:
5c:3b:6e:d0:64:32:1e:05:11:80:e7:34:f0:da:9f:
13:83:f3:ee:43:53:1c:de:40:05:44:d2:d0:6f:1d:
e4:45:c9:c9:f7:c4:8b:97:40:94:7c:50:4d:9f:a2:
e3:8b:18:ac:70:1a:b0:2c:29:eb:42:bd:f6:fa:c1:
30:9c:00:4f:04:e2:7c:ab:d7:9b:10:86:ff:a7:22:
71:d0:e5:bd:59:a1:cc:a8:b5:e6:82:ac:02:a6:a3:
cf:4f:46:ca:41:2a:09:51:ca:d8:48:8d:3e:62:c1:
86:19:81:3b:93:84:09:bb:bc:b9:f2:45:6b:b6:e9:
82:ce:38:94:12:e9:61:7d:44:a8:7d:3c:9e:e0:28:
57:7e:f7:fd:db:5d:bc:25:67:a5:e3:03:f4:ff:08:
32:d0:47:10:99:d9:dd:fc:61:03:6c:6d:a6:61:1c:
4d:c0:19:63:65:e7:a9:15:e4:2b:64:5c:45:e6:a6:
f2:76:b1:59:66:83:8c:6b:dc:83:f8:b8:2e:0e:6a:
20:ff:d2:4a:3f:79:02:20:54:4d:38:0f:47:ae:ed:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:EA:72:F5:BD:F7:DB:3E:56:D9:CB:15:82:59:B6:35:80:B2:D2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.55.0/24
191.96.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:95:54:d1:72:ae:aa:b8:1b:46:8f:eb:e2:53:d0:e8:da:e0:
0c:99:5e:85:03:7f:cf:2a:4c:a4:cb:39:05:dd:2b:af:8b:9d:
8f:42:d2:2d:80:1a:27:d0:20:c4:3f:b8:1c:65:a5:91:a6:6b:
4d:9d:52:18:99:51:ca:7e:e2:db:3e:de:75:1b:34:cf:9e:23:
4e:66:21:e0:4e:99:7c:d7:62:c4:54:4b:2f:49:82:a5:5a:33:
8b:fe:b5:02:75:92:ba:67:ec:8a:88:e9:b8:62:31:35:68:e4:
25:3b:bb:d4:22:51:ac:58:23:ec:a1:d5:67:50:af:72:51:0c:
39:b0:90:38:78:9e:e1:9f:78:2c:a2:3d:51:29:fb:f3:b8:1f:
67:70:c5:b9:9f:62:ad:28:09:94:04:dd:79:1c:54:2b:80:11:
5d:09:3f:bf:30:94:93:03:1a:46:e9:b2:3e:0e:ce:2f:1d:04:
50:f8:89:44:cf:d0:88:45:27:cb:b3:4c:c3:4e:41:76:03:b3:
9c:c3:17:6a:ab:1c:11:e8:a2:c3:9b:bf:77:b6:29:09:6f:cb:
c5:3c:a8:0b:10:9f:d9:e6:a7:9d:2c:6e:1e:2e:9e:99:fc:bf:
ea:79:d3:83:88:ac:cb:b6:d8:fe:ff:45:3a:d1:31:98:5e:b6:
05:80:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:19 2025 by rpki-client