Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa
File: A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa (raw, json)
Hash identifier: lggmut1+AIhHUFw/pa+hugHmAOGvNZ/jcOZNrQeZgUk=
Subject key identifier: 03:47:90:E9:CA:40:61:81:1F:13:7F:85:C1:BB:D7:D8:DE:D5:AB:6E
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01951CFDFED4D77508B87ED42A155621064A
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa
Signing time: Wed 19 Feb 2025 06:56:02 +0000
ROA not before: Wed 19 Feb 2025 06:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213404
IP address blocks: 2a14:67c1:a040::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:fd:fe:d4:d7:75:08:b8:7e:d4:2a:15:56:21:06:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Feb 19 06:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034790e9ca4061811f137f85c1bbd7d8ded5ab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:25:a5:f1:6b:15:57:51:e1:18:11:47:03:
70:3c:6c:34:64:17:09:5b:42:58:99:28:7c:ac:d8:
e2:c8:26:e7:c2:e4:0d:6b:4d:ed:97:52:b9:21:2e:
92:0e:1b:fd:1a:b4:2b:27:5d:72:2c:e3:76:46:8c:
5b:d6:a1:2d:49:ee:3c:c0:ea:5f:e3:3a:92:68:24:
ec:c6:50:58:6d:ae:a4:59:00:9b:69:2c:c5:dc:13:
d2:fd:03:dd:98:24:ae:4d:fc:58:81:35:d1:a9:25:
07:50:01:dd:58:52:6c:2c:6b:75:4c:12:ac:58:4b:
6c:79:29:7d:25:d0:8c:4c:ea:07:1a:3a:21:c2:c7:
a2:a0:c4:5a:3c:b5:5a:c6:56:b9:4a:eb:5a:12:1c:
fc:c0:fa:ec:8c:61:05:bc:b5:e2:d0:32:e2:d0:58:
b1:8d:79:4e:3f:19:a2:2b:df:c2:e1:c2:5f:0e:1e:
7c:b1:be:0e:c2:d4:2c:05:dd:97:30:e0:90:c1:f6:
3b:c9:f4:40:5b:d3:da:83:97:22:57:57:72:8e:a2:
72:0a:f9:e3:85:69:67:4c:a9:46:e5:48:b2:33:63:
38:73:00:6d:c0:2b:5c:2c:0f:58:ad:c7:2f:2b:34:
dd:13:5b:08:8b:98:84:6e:a2:ac:3b:10:30:32:cf:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:90:E9:CA:40:61:81:1F:13:7F:85:C1:BB:D7:D8:DE:D5:AB:6E
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a040::/44
Signature Algorithm: sha256WithRSAEncryption
b2:6a:60:00:d7:a8:1c:6a:7a:e9:34:1c:af:cf:9a:74:5c:f6:
df:3b:8d:84:fb:43:64:44:04:d0:11:71:73:7d:54:da:3c:84:
c4:09:63:c6:76:f3:fe:28:7a:ff:2e:f9:9f:81:56:07:0f:68:
f3:2a:8c:f2:a3:35:9c:74:bc:d4:eb:9c:ef:59:7d:7d:1c:ee:
9e:90:61:d8:a8:cc:80:28:1d:84:c0:b2:6c:d7:98:07:f4:09:
72:73:d0:7c:ce:7e:78:20:d6:82:13:71:99:f4:ac:40:ef:7e:
22:fa:40:2c:0a:18:a5:f5:28:28:12:3a:38:cd:ee:3c:f4:71:
c1:14:f2:24:f7:bc:b7:20:94:46:13:d4:47:c8:d8:a0:6e:ab:
77:56:b0:c8:ad:ba:fc:55:71:20:a6:aa:8d:0d:3c:cb:98:3a:
da:18:90:98:0d:d0:db:0c:21:cf:f9:23:ea:87:8e:df:0d:f3:
8a:09:30:be:b0:73:d4:94:12:e4:3f:fc:65:b7:64:96:0a:5c:
10:22:a2:7b:95:b2:b2:9f:3b:b8:5b:b1:e6:53:3c:5d:f0:7e:
54:61:34:c4:11:cb:80:5c:37:a2:79:cb:a0:37:6d:7a:49:aa:
16:60:46:d7:7f:41:94:cb:b4:e7:03:b0:26:b7:da:68:f6:df:
8a:fb:16:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZUc/f7U13UIuH7UKhVWIQZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwMjE5MDY1NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzQ3OTBlOWNhNDA2MTgxMWYxMzdmODVjMWJiZDdkOGRlZDVhYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgolpfFrFVdR4RgRRwNwPGw0ZBcJ
W0JYmSh8rNjiyCbnwuQNa03tl1K5IS6SDhv9GrQrJ11yLON2Roxb1qEtSe48wOpf
4zqSaCTsxlBYba6kWQCbaSzF3BPS/QPdmCSuTfxYgTXRqSUHUAHdWFJsLGt1TBKs
WEtseSl9JdCMTOoHGjohwseioMRaPLVaxla5SutaEhz8wPrsjGEFvLXi0DLi0Fix
jXlOPxmiK9/C4cJfDh58sb4OwtQsBd2XMOCQwfY7yfRAW9Pag5ciV1dyjqJyCvnj
hWlnTKlG5UiyM2M4cwBtwCtcLA9YrccvKzTdE1sIi5iEbqKsOxAwMs+VZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFANHkOnKQGGBHxN/hcG719je1atuMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvQTBlUTZjcEFZWUVmRTMtRndidlgyTjdWcTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaBA
MA0GCSqGSIb3DQEBCwUAA4IBAQCyamAA16gcanrpNByvz5p0XPbfO42E+0NkRATQ
EXFzfVTaPITECWPGdvP+KHr/LvmfgVYHD2jzKozyozWcdLzU65zvWX19HO6ekGHY
qMyAKB2EwLJs15gH9Alyc9B8zn54INaCE3GZ9KxA734i+kAsChil9SgoEjo4ze48
9HHBFPIk97y3IJRGE9RHyNigbqt3VrDIrbr8VXEgpqqNDTzLmDraGJCYDdDbDCHP
+SPqh47fDfOKCTC+sHPUlBLkP/xlt2SWClwQIqJ7lbKynzu4W7HmUzxd8H5UYTTE
EcuAXDeiecugN216SaoWYEbXf0GUy7TnA7Amt9po9t+K+xau
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:38 2025 by rpki-client