Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530303a383a3a2f34382d3438203d3e20323132373038.roa
File: 326131343a396530303a383a3a2f34382d3438203d3e20323132373038.roa (raw, json)
Hash identifier: gkQb5vwT4FTbu1vlWQoKqksEAkrPgYNqY9cfyVmBRJo=
Subject key identifier: 31:7B:6A:EF:54:04:09:EB:40:0A:E3:F5:93:5B:95:E2:F0:3D:6D:CF
Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial: 20F34D8E7DFBA9C87B4EFC8116A1B2A1E865272E
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access: rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a383a3a2f34382d3438203d3e20323132373038.roa
Signing time: Tue 13 May 2025 21:05:33 +0000
ROA not before: Tue 13 May 2025 21:00:33 +0000
ROA not after: Tue 12 May 2026 21:05:33 +0000
asID: 212708
IP address blocks: 2a14:9e00:8::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f3:4d:8e:7d:fb:a9:c8:7b:4e:fc:81:16:a1:b2:a1:e8:65:27:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Validity
Not Before: May 13 21:00:33 2025 GMT
Not After : May 12 21:05:33 2026 GMT
Subject: CN=317B6AEF540409EB400AE3F5935B95E2F03D6DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:1d:1a:85:eb:ad:a2:5e:f3:e4:fe:74:43:
21:38:7c:b6:77:5e:81:09:32:da:22:68:27:ab:48:
c0:10:bd:01:4c:ef:84:bf:9b:d6:bd:7f:c3:6e:58:
e0:92:28:c8:e1:68:c9:89:89:de:3e:9d:61:15:b9:
5e:59:28:91:c9:65:aa:40:3e:b2:68:f9:ef:3c:4f:
3f:0a:d3:1d:86:17:3e:53:fc:1b:e6:a4:3b:89:56:
08:27:6c:1d:38:b4:fc:22:33:90:d9:6d:fd:aa:68:
4d:15:b1:d6:e3:94:be:bc:a6:1f:c8:c7:c7:f2:e8:
48:b6:2a:57:5c:cc:36:b2:14:56:42:11:2f:a1:40:
7b:12:57:d3:46:d7:bb:9a:75:d5:52:ba:c3:f5:8f:
b2:a8:60:bb:be:38:90:64:ae:4c:b0:d7:6f:d3:7a:
7f:e7:19:6b:3b:1a:64:d3:d6:c2:f2:28:b2:8b:80:
f2:76:a3:cb:8f:e3:5f:11:34:5f:05:0f:bb:24:28:
c3:98:4e:0e:47:d3:34:fb:10:4d:6e:37:90:07:ee:
89:84:32:ef:75:d0:49:e5:eb:99:44:f2:6f:7e:40:
17:a3:32:39:81:ca:88:6a:71:41:57:29:f5:b6:e5:
ea:a2:a8:94:00:fc:42:76:66:19:58:5b:a6:46:1f:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:6A:EF:54:04:09:EB:40:0A:E3:F5:93:5B:95:E2:F0:3D:6D:CF
X509v3 Authority Key Identifier:
keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a383a3a2f34382d3438203d3e20323132373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00:8::/48
Signature Algorithm: sha256WithRSAEncryption
7e:29:0c:8f:21:50:87:c9:55:69:56:ec:c4:01:10:b0:1e:98:
00:c6:25:ef:0b:fc:af:58:db:7b:47:8e:d4:12:22:a7:ce:1f:
2a:be:4f:bc:96:16:f8:ad:d1:31:6e:b2:d3:0d:89:f6:4e:38:
00:87:da:0b:f7:56:1b:48:97:cb:80:af:05:92:38:32:30:00:
42:b6:88:92:ee:0b:43:d6:fb:1a:fb:05:71:09:5d:ce:4b:99:
87:1e:52:1e:76:29:2d:0d:89:48:7c:35:9b:98:09:37:36:23:
bd:45:2a:cf:97:b2:a6:18:31:e6:10:b2:d7:0c:32:71:25:6e:
d1:ce:c2:d3:08:4a:6d:c4:84:cb:f4:34:9f:80:fd:75:f2:e4:
9c:02:43:6b:a7:d6:03:a5:2c:05:dd:28:9e:d0:1c:e0:1a:75:
9c:c0:db:06:32:16:a7:5e:82:5f:a5:22:8f:8b:d7:7f:52:79:
07:eb:a7:d2:36:64:2c:f1:3c:3b:b6:2b:b3:6c:3a:f4:39:25:
c4:02:48:56:82:c7:d2:bd:4b:f7:c8:6a:e4:71:bb:59:f5:94:
82:8d:a7:cb:8b:2e:dd:e9:22:33:79:77:b4:6d:23:fc:c7:4f:
62:25:1b:38:14:48:ac:67:19:79:a0:c9:5f:d7:60:22:5a:62:
0d:df:61:02
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUIPNNjn37qch7TvyBFqGyoehlJy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTY0MGFhNjFmMWQ2MmI5Yzk0MDQ1OTgwNGFlMTFiZTk5
YWQ0Mzg0MjAeFw0yNTA1MTMyMTAwMzNaFw0yNjA1MTIyMTA1MzNaMDMxMTAvBgNV
BAMTKDMxN0I2QUVGNTQwNDA5RUI0MDBBRTNGNTkzNUI5NUUyRjAzRDZEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4x0aheutol7z5P50QyE4fLZ3
XoEJMtoiaCerSMAQvQFM74S/m9a9f8NuWOCSKMjhaMmJid4+nWEVuV5ZKJHJZapA
PrJo+e88Tz8K0x2GFz5T/BvmpDuJVggnbB04tPwiM5DZbf2qaE0VsdbjlL68ph/I
x8fy6Ei2KldczDayFFZCES+hQHsSV9NG17uaddVSusP1j7KoYLu+OJBkrkyw12/T
en/nGWs7GmTT1sLyKLKLgPJ2o8uP418RNF8FD7skKMOYTg5H0zT7EE1uN5AH7omE
Mu910Enl65lE8m9+QBejMjmByohqcUFXKfW25eqiqJQA/EJ2ZhlYW6ZGH1xPAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUMXtq71QECetACuP1k1uV4vA9bc8wHwYDVR0j
BBgwFoAUpkCqYfHWK5yUBFmASuEb6ZrUOEIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh
Y2UvMy9BNjQwQUE2MUYxRDYyQjlDOTQwNDU5ODA0QUUxMUJFOTlBRDQzODQyLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcGtDcVlmSFdLNXlVQkZtQVN1RWI2WnJV
T0VJLmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3Jl
cG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzMvMzI2MTMxMzQzYTM5NjUzMDMw
M2EzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjM3MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoUngAACDANBgkqhkiG9w0BAQsFAAOCAQEAfikMjyFQh8lVaVbsxAEQsB6Y
AMYl7wv8r1jbe0eO1BIip84fKr5PvJYW+K3RMW6y0w2J9k44AIfaC/dWG0iXy4Cv
BZI4MjAAQraIku4LQ9b7GvsFcQldzkuZhx5SHnYpLQ2JSHw1m5gJNzYjvUUqz5ey
phgx5hCy1wwycSVu0c7C0whKbcSEy/Q0n4D9dfLknAJDa6fWA6UsBd0ontAc4Bp1
nMDbBjIWp16CX6Uij4vXf1J5B+un0jZkLPE8O7Yrs2w69DklxAJIVoLH0r1L98hq
5HG7WfWUgo2ny4su3ekiM3l3tG0j/MdPYiUbOBRIrGcZeaDJX9dgIlpiDd9hAg==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:39 2025 by rpki-client