Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/AkCF1-KTNZ4D_71Lk3QC4KJ2PD4.roa
File: AkCF1-KTNZ4D_71Lk3QC4KJ2PD4.roa (raw, json)
Hash identifier: /kKpy8nuFDFZL2+u3/P8PPg4Kh8DRlSJoMS/Y6u/2Sc=
Subject key identifier: 02:40:85:D7:E2:93:35:9E:03:FF:BD:4B:93:74:02:E0:A2:76:3C:3E
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01936CBFCF0B0F7683A4A99F3AF669355CB2
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/AkCF1-KTNZ4D_71Lk3QC4KJ2PD4.roa
Signing time: Wed 27 Nov 2024 08:32:09 +0000
ROA not before: Wed 27 Nov 2024 08:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213809
IP address blocks: 2a14:67c1:50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:bf:cf:0b:0f:76:83:a4:a9:9f:3a:f6:69:35:5c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Nov 27 08:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=024085d7e293359e03ffbd4b937402e0a2763c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:50:34:23:49:22:ef:a4:00:51:3c:33:c8:
db:5b:b0:72:1f:18:af:aa:1c:47:0c:f7:ce:85:bb:
66:8b:26:a3:89:9d:09:db:f6:78:41:7e:9e:e6:23:
d6:b6:93:d6:a1:6d:8e:9b:71:6f:ff:4e:08:52:74:
94:01:08:94:e7:8f:02:7c:84:7e:91:c2:98:bf:56:
dc:51:3f:37:5a:d0:7e:e2:67:96:6e:1b:1d:3c:f6:
99:81:cd:0b:bd:0c:65:b7:0c:1f:b1:0c:e8:94:5e:
85:9d:32:7d:e8:47:0d:9a:3a:a3:db:68:bc:02:f3:
9d:5a:27:4d:c2:a6:74:91:a0:a7:b6:6e:8f:b8:33:
0d:53:ef:b0:c7:ad:b5:f6:b8:bb:4c:e4:dc:50:03:
84:58:07:f7:11:bb:63:a0:34:11:f2:18:78:30:88:
73:fd:ab:ca:56:27:71:a3:74:d5:fd:a7:fb:8d:de:
f9:55:8b:0d:33:3a:2e:76:fd:48:40:69:4b:d2:5f:
7e:76:5f:dc:0e:e3:42:b9:cd:80:f3:3c:84:a5:ba:
1d:a0:e3:d0:ee:ce:8e:fc:3c:da:15:7c:1d:d9:4e:
f5:57:c4:80:30:79:b2:86:d6:02:e4:dc:4d:bd:eb:
52:85:95:d6:e9:23:e5:c8:6f:e4:0c:30:4a:03:79:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:85:D7:E2:93:35:9E:03:FF:BD:4B:93:74:02:E0:A2:76:3C:3E
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/AkCF1-KTNZ4D_71Lk3QC4KJ2PD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:50::/44
Signature Algorithm: sha256WithRSAEncryption
9f:8f:e0:0d:63:e2:e3:4f:ce:cd:7a:84:3a:cd:55:8e:9b:fa:
83:90:19:e2:78:68:cc:21:f3:c3:24:1c:22:62:15:1f:1b:04:
aa:9f:ec:3d:24:df:d4:c8:66:93:35:cd:b7:49:35:e3:bb:fa:
3b:d8:b9:17:44:97:87:48:b0:11:ca:de:69:c5:3b:dc:02:68:
c5:93:f7:26:2b:3c:d8:f9:4a:b1:43:22:f7:44:07:0b:0b:2d:
bb:33:a0:a7:65:bb:f4:aa:dd:8b:97:d0:23:7d:91:f7:65:34:
29:3c:82:f9:70:29:6d:f4:b7:aa:10:fa:4a:e1:dc:cb:ac:27:
51:0d:cf:b7:70:68:bd:1f:02:50:e4:e5:42:9e:ec:2a:d2:52:
c9:89:ec:ee:79:af:ba:a3:cc:9f:6c:2c:d5:1e:fa:b8:26:9b:
3f:12:c4:0c:ad:93:37:16:56:c8:ee:68:44:e6:8f:00:4a:be:
5d:d4:21:6c:98:96:64:af:f9:ea:bb:bd:29:83:f9:c5:d4:ee:
e9:42:b7:c3:de:31:39:ed:24:85:35:6e:50:94:46:57:66:52:
3c:b6:5e:37:a6:af:63:00:bf:2f:37:2f:d8:30:fb:ae:4e:ef:
0f:cf:eb:e8:a4:5f:27:57:d1:4e:2f:76:ff:ba:38:82:cb:a5:
db:66:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:36:35 2025 by rpki-client