Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa
File: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (raw, json)
Hash identifier: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=
Subject key identifier: 6D:3B:5F:D7:F0:BD:47:60:6D:E3:17:6F:B2:12:06:DC:E0:95:48:3D
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 01942369C64A8232011DEF2D1C13EBB79198
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196975
IP address blocks: 217.9.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c6:4a:82:32:01:1d:ef:2d:1c:13:eb:b7:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d3b5fd7f0bd47606de3176fb21206dce095483d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:40:0a:cc:2d:3f:55:72:b8:c3:0e:c6:d8:
da:4d:40:6a:be:2f:75:c7:85:b6:ba:11:b4:e0:2a:
66:d2:f3:27:be:12:28:00:8f:a9:c7:ca:20:a2:a9:
2c:57:71:87:e6:b2:9d:d9:4c:8c:71:4e:02:02:b1:
d4:8a:cf:3f:df:fa:cf:df:4d:1c:a2:67:05:b1:07:
c1:fa:a1:08:e4:f4:43:4a:de:4f:95:68:f8:04:ab:
71:14:40:04:b3:f3:5d:ef:c1:58:fc:8c:37:ec:21:
61:19:1c:bc:41:9b:a1:c0:09:f5:01:cf:97:b6:31:
e4:fd:b9:80:14:46:0f:b4:e6:8d:5d:8f:0a:d3:20:
d5:c7:d2:52:cc:6c:d4:ef:e7:44:68:b5:44:ce:d1:
46:45:6a:5d:19:f9:1c:7d:2e:e1:0f:f1:ec:d0:71:
36:54:4e:9d:7c:81:ad:53:59:7e:d3:fc:38:b5:bd:
85:28:33:61:38:5e:ff:45:7a:02:2d:de:5f:39:ec:
45:ad:ec:f9:f0:f1:d5:8f:34:69:a4:a2:85:26:e2:
c6:99:0e:e2:43:f0:bd:fb:1d:42:43:85:3d:de:9e:
c6:96:48:66:80:26:ea:af:5c:2c:44:7a:bb:b9:25:
72:26:24:51:3d:4d:53:b4:5d:08:9b:bf:e6:e6:de:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3B:5F:D7:F0:BD:47:60:6D:E3:17:6F:B2:12:06:DC:E0:95:48:3D
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
64:41:3a:0a:c3:f5:8d:d1:29:7b:a7:8e:77:8d:d5:ff:85:39:
59:10:6f:a1:5e:f0:47:f9:99:b9:5e:24:81:04:04:2b:49:ff:
c2:fd:55:77:b5:8f:85:2c:a1:b0:4a:59:85:17:78:63:f7:c6:
b1:90:ea:12:68:2d:77:c8:b7:db:11:ac:fc:24:30:fe:28:74:
4d:e4:01:ff:ef:63:75:4d:81:71:1c:ec:47:58:c7:fc:e4:37:
fb:21:39:93:f8:f9:c7:8e:89:53:4c:33:96:51:74:3e:b8:9c:
a1:89:8f:22:c7:6c:f8:ae:dc:52:62:2e:2a:67:a5:61:d6:65:
9e:cb:2e:36:89:3d:b5:69:92:69:f9:9c:e7:a7:e1:cb:8d:c2:
92:6b:e6:ff:c0:f2:be:1f:67:12:99:20:3f:bd:ab:13:9c:c8:
ff:69:3e:9d:5e:7a:f4:4e:f9:4f:2a:a1:8a:ed:7e:15:7f:e8:
0f:ff:2c:c0:1d:e5:83:79:09:e9:87:4a:6e:f5:fd:67:36:53:
29:42:a9:e1:0d:8c:c6:0f:30:73:57:0b:53:de:b7:06:2b:40:
10:f8:bf:e7:07:e7:51:42:d3:d7:da:fb:77:db:9c:c6:0a:c4:
ca:e9:2d:df:a8:e6:38:70:51:97:2a:43:e3:c5:39:d4:f7:f7:
34:f8:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:50 2025 by rpki-client