Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530303a343a3a2f34382d3438203d3e20323132373038.roa
File: 326131343a396530303a343a3a2f34382d3438203d3e20323132373038.roa (raw, json)
Hash identifier: K7w4WCMhsh2q/gv76WfM6/5a/3xzr5wbQe0LCCk9eSg=
Subject key identifier: FD:32:24:57:0D:AE:C7:26:EE:7A:49:E4:29:37:FC:39:88:5E:3B:CE
Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial: 1B30403918C2E7E532B323CF8A30621CCDC51D3F
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access: rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a343a3a2f34382d3438203d3e20323132373038.roa
Signing time: Tue 13 May 2025 21:05:43 +0000
ROA not before: Tue 13 May 2025 21:00:43 +0000
ROA not after: Tue 12 May 2026 21:05:43 +0000
asID: 212708
IP address blocks: 2a14:9e00:4::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:30:40:39:18:c2:e7:e5:32:b3:23:cf:8a:30:62:1c:cd:c5:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Validity
Not Before: May 13 21:00:43 2025 GMT
Not After : May 12 21:05:43 2026 GMT
Subject: CN=FD3224570DAEC726EE7A49E42937FC39885E3BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:03:21:ee:ee:21:02:96:39:3a:9f:1a:68:
39:79:34:99:b8:96:0d:d4:54:fc:47:27:5a:94:32:
6d:ee:a5:cd:b1:39:40:fe:60:7f:92:14:f9:e5:32:
a5:18:69:a3:77:05:5b:47:64:97:d0:9f:93:75:53:
4d:91:1f:4e:85:f3:a4:b8:54:3c:cd:47:ed:7a:37:
75:c1:07:21:53:d2:5e:b9:6e:7f:ae:34:15:81:10:
50:a6:6a:e3:2d:80:63:16:a9:5d:f3:0d:2c:e8:95:
14:ec:20:c4:1e:78:ca:98:a3:32:0d:00:fa:0a:e5:
fa:40:e0:de:0c:37:40:89:b7:3f:3e:46:d9:9c:6c:
0d:77:9d:73:e7:1f:7d:30:5f:22:e5:67:89:5d:c6:
f3:d5:bd:80:f5:45:88:1c:a3:1a:f0:fa:c3:41:84:
d6:38:c0:72:2a:4c:0b:0c:c4:e4:34:1d:9a:0d:8a:
7c:38:49:0c:01:bc:f4:bf:26:05:63:54:7e:3c:15:
4d:7c:bd:a5:09:07:3b:94:3d:62:32:fe:50:9c:39:
b8:28:0b:98:62:40:c7:4a:73:87:0c:71:a8:a6:0f:
0b:f6:3d:1a:d7:43:f2:44:a9:34:69:13:bc:e0:00:
a1:61:cb:3d:56:2a:00:e5:0c:26:8c:0d:53:48:ee:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:32:24:57:0D:AE:C7:26:EE:7A:49:E4:29:37:FC:39:88:5E:3B:CE
X509v3 Authority Key Identifier:
keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a343a3a2f34382d3438203d3e20323132373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00:4::/48
Signature Algorithm: sha256WithRSAEncryption
62:a1:e5:cf:0a:6f:94:13:a9:7d:39:8f:bc:a3:b2:4e:6f:09:
42:ee:08:1e:85:b1:c5:4a:65:a5:39:0e:5c:fa:34:92:3e:62:
87:0c:26:37:5b:8e:97:d2:bf:60:c4:9c:13:81:89:d8:5b:a6:
9d:8d:ff:c5:3f:c6:3e:36:76:57:e6:e1:98:bb:8f:e7:2e:3a:
7a:6a:c7:a8:65:4b:85:16:ad:48:e8:3f:84:f8:96:cf:9e:c7:
8d:97:73:dd:04:aa:e9:e9:7f:54:db:1f:ac:26:48:67:29:62:
44:60:38:19:23:f4:4c:de:14:01:02:7c:a3:f9:a1:9e:a3:90:
f4:84:d9:03:8b:c3:dc:b2:d3:03:e7:48:16:13:2a:a4:5e:de:
8a:eb:34:07:7d:2b:52:43:5c:c1:8e:11:3d:e7:45:36:75:e4:
18:77:f8:a0:d0:bb:71:b4:ad:eb:de:67:02:ed:b3:19:2a:d0:
6c:1b:1b:a8:27:db:b2:ef:50:ae:ed:ee:77:68:a1:57:c8:41:
3a:00:3f:d8:1d:ab:b8:c6:08:83:d6:fb:09:af:78:bc:4d:20:
bf:c2:1e:16:5b:1a:21:16:59:74:19:7b:e1:55:a5:bc:c0:81:
37:f1:c7:cf:47:49:ce:88:e3:a8:e3:db:54:05:2c:f8:e9:93:
38:fa:ff:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:46 2025 by rpki-client