Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/IrBZbjh9bN6sX88jSCcr0jSDjf8.roa
File: IrBZbjh9bN6sX88jSCcr0jSDjf8.roa (raw, json)
Hash identifier: 4rxNfDiQKwVlFDVfgBPRO7cwVcJtlUjG/xAc+wH5P2Q=
Subject key identifier: 22:B0:59:6E:38:7D:6C:DE:AC:5F:CF:23:48:27:2B:D2:34:83:8D:FF
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01957C2034811DA55C30C54A803DF43257E5
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/IrBZbjh9bN6sX88jSCcr0jSDjf8.roa
Signing time: Sun 09 Mar 2025 18:17:20 +0000
ROA not before: Sun 09 Mar 2025 18:17:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213891
IP address blocks: 2a14:67c1:a060::/44 maxlen: 48
2a14:67c1:b000::/40 maxlen: 48
2a14:67c1:b100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7c:20:34:81:1d:a5:5c:30:c5:4a:80:3d:f4:32:57:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Mar 9 18:17:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b0596e387d6cdeac5fcf2348272bd234838dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:a1:19:b9:c8:ea:aa:38:a6:23:9c:58:a5:
51:2f:b2:9c:af:9f:1d:31:90:cc:57:fa:10:a7:be:
70:7d:c5:a4:71:71:89:d7:20:c0:4a:fb:87:e1:20:
01:c2:01:ea:94:bd:24:77:2a:b4:d4:b7:38:37:12:
71:de:cb:a0:90:c3:3b:72:14:7a:1c:8d:52:a3:3f:
2d:8e:f3:59:6c:98:c5:3a:e4:a0:5d:af:c4:c9:0d:
7a:9d:ea:79:30:80:76:33:93:d7:fc:eb:fb:51:ed:
dc:a4:d6:00:08:7f:a0:35:e0:5f:c9:dc:e3:7d:3a:
39:71:68:3f:57:23:b9:cf:ed:73:80:38:cf:71:5f:
94:fa:8b:33:ef:07:ce:2b:62:c8:a2:89:6e:12:9b:
a8:e6:68:c9:9a:af:d1:c7:a4:97:ac:c1:2d:2d:12:
fc:99:d9:e7:de:dd:69:80:38:cb:b9:d6:5d:3e:0d:
1f:63:6e:67:e5:10:c5:91:38:ba:ce:a8:65:6a:35:
fa:da:da:1f:49:8d:97:26:4b:a8:9b:78:66:32:33:
e8:5a:2c:9c:39:5f:8c:63:36:37:97:00:ea:4b:36:
2b:13:3b:b2:c3:d2:53:2f:cd:a8:b6:43:01:0d:ae:
1b:52:89:f6:58:5c:5e:52:72:d2:a8:75:66:7f:dc:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B0:59:6E:38:7D:6C:DE:AC:5F:CF:23:48:27:2B:D2:34:83:8D:FF
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/IrBZbjh9bN6sX88jSCcr0jSDjf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a060::/44
2a14:67c1:b000::-2a14:67c1:b100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:ba:e7:a6:0a:e2:68:0e:8c:19:dd:49:0d:20:57:08:4c:b5:
d0:69:f9:34:20:1d:25:d2:e8:99:4c:db:ff:48:07:79:5e:1e:
ca:2c:f3:6e:d4:e4:81:0f:75:57:bd:71:ff:76:81:cc:79:04:
57:be:0a:67:65:c8:b7:a2:dc:c5:92:d9:39:5e:37:27:37:06:
43:3c:fc:a6:e1:63:9e:14:4f:37:d7:cc:f8:8b:09:2f:ef:09:
89:0d:b8:07:22:7e:f9:ce:5c:13:1f:1b:d5:78:7d:91:25:d2:
48:0c:80:b7:0d:b2:ff:c5:66:62:55:02:6c:5f:ac:9a:16:a3:
38:ce:da:34:d3:8e:b4:6e:91:0b:40:a2:d5:f2:8b:c8:28:bc:
5b:7c:a5:0f:2d:8b:f2:a6:a8:f8:fa:ea:7a:09:af:5c:47:cc:
bf:72:d1:b6:b2:0c:da:00:56:3a:94:8b:99:3a:cc:24:d9:3c:
7d:ad:62:75:e2:27:b1:6b:5e:6f:5b:ae:2d:5f:e0:e0:a3:f3:
1c:21:83:9a:aa:07:f6:0b:b0:e4:be:40:15:72:bf:2e:d7:35:
e8:e1:60:a5:48:db:f3:39:96:f3:a6:d5:4d:0a:46:37:33:a7:
f9:38:55:1d:fe:5f:88:21:34:93:d3:81:48:f1:97:07:e6:1b:
7a:df:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:37 2025 by rpki-client