Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/RcQh5FZ5-5AQ4TisTXaL-uRtE-o.roa
File: RcQh5FZ5-5AQ4TisTXaL-uRtE-o.roa (raw, json)
Hash identifier: t68WHndClr6ydaRaZibMcns5SKHrzpeAYXYiGQ1tSlo=
Subject key identifier: 45:C4:21:E4:56:79:FB:90:10:E1:38:AC:4D:76:8B:FA:E4:6D:13:EA
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01937D5172ACF64074E100876683A59A19D3
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/RcQh5FZ5-5AQ4TisTXaL-uRtE-o.roa
Signing time: Sat 30 Nov 2024 13:45:10 +0000
ROA not before: Sat 30 Nov 2024 13:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 48
2a14:67c0:110::/44 maxlen: 48
2a14:67c0:200::/40 maxlen: 48
2a14:67c0:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:51:72:ac:f6:40:74:e1:00:87:66:83:a5:9a:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Nov 30 13:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45c421e45679fb9010e138ac4d768bfae46d13ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:fc:5c:22:4b:57:7d:4d:f0:ae:02:86:13:
8a:68:28:ef:a7:6c:bf:58:96:d8:4d:b1:f1:37:3d:
56:d6:5b:39:07:ce:17:30:e6:83:11:28:b0:02:cf:
6e:99:3e:24:1a:ea:ed:8b:43:8a:fa:e7:ff:2b:63:
bb:76:92:c8:73:33:c5:23:bf:4c:c2:02:8d:2b:9b:
b0:ac:49:57:6c:32:09:c6:34:73:d4:d4:9a:1f:cf:
0c:cb:51:b1:cd:45:2d:42:63:7d:a0:76:70:40:db:
a9:a5:d6:23:18:e6:1e:2b:45:f1:2f:4a:7d:7d:a3:
d3:c3:49:2c:5d:4c:6a:a4:f1:9e:c1:df:0c:83:c1:
f9:e6:72:6e:8f:97:c0:13:9b:9a:07:c3:2d:58:e5:
09:3f:e7:9e:93:ec:a5:05:f4:a0:05:ab:ad:d5:ce:
a3:2e:04:b7:a7:c9:8e:1e:54:86:13:bc:ac:d7:57:
b3:94:5c:00:ce:6b:3b:58:af:20:bd:f2:24:ae:3a:
49:04:b8:7c:c5:b8:7c:b7:7e:01:67:52:77:58:e4:
31:36:91:de:06:f3:66:06:b5:a6:2f:4d:a5:45:bc:
33:c2:ec:29:9a:7e:e7:99:97:ed:c8:c1:e4:05:93:
21:05:19:fd:22:31:0e:07:6a:16:47:68:b2:4d:90:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C4:21:E4:56:79:FB:90:10:E1:38:AC:4D:76:8B:FA:E4:6D:13:EA
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/RcQh5FZ5-5AQ4TisTXaL-uRtE-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::-2a14:67c0:3ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:fc:af:ae:ec:4a:34:a5:85:04:b0:a7:af:9e:a7:82:73:b1:
66:0c:d9:5d:be:82:84:5b:83:fe:2c:69:bf:db:fd:dc:ab:dc:
38:a5:7c:be:6a:92:e7:46:bd:37:28:67:e0:42:14:89:47:3a:
45:24:22:47:65:07:64:25:27:a2:8c:a0:99:66:d0:00:11:d4:
6a:ec:04:2f:cd:b2:f8:1e:bc:8d:ce:d5:4d:90:4c:8c:a5:e7:
54:99:85:8a:db:5c:ca:ca:17:1e:42:42:f9:94:b0:1e:37:ea:
5b:19:8f:7d:00:03:10:b5:1b:b5:b6:49:d1:d5:e1:07:a9:ae:
1d:d2:eb:c7:00:26:c9:26:c9:6a:83:7b:8c:2f:a4:ff:3d:38:
95:78:8a:02:8e:b1:47:e0:ed:f5:70:74:d0:53:b2:53:19:db:
31:d7:10:7a:14:88:4a:04:d5:5d:a9:48:00:3b:c6:8a:70:a6:
7f:95:b6:c5:97:96:a4:2e:e9:a0:86:01:bb:ac:98:e3:5a:4b:
6f:0e:db:59:e1:3c:05:4a:74:8e:59:06:e4:83:9e:4e:a7:da:
90:a7:16:59:47:7a:ca:fb:18:53:aa:62:b4:f8:73:fb:29:6f:
92:b8:e7:b2:4e:a8:fd:19:4d:21:78:92:40:37:a1:b3:70:f9:
6c:48:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:40 2025 by rpki-client