Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530323a3a2f33312d3332203d3e20323133343438.roa
File: 326131343a396530323a3a2f33312d3332203d3e20323133343438.roa (raw, json)
Hash identifier: 61qoqDWJ8FYsZcXh7/rWaXtP6WGq5fs9jbyLvb6s5ZE=
Subject key identifier: C0:64:A7:38:99:C1:54:4F:91:93:9D:13:61:8D:C3:D3:99:B0:2F:09
Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial: 2BBC4F13390855D42C0B5457DF292318984F76C5
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access: rsync://repo.rpki.space/repo/Netiface/3/326131343a396530323a3a2f33312d3332203d3e20323133343438.roa
Signing time: Sun 18 May 2025 16:21:48 +0000
ROA not before: Sun 18 May 2025 16:16:48 +0000
ROA not after: Sun 17 May 2026 16:21:48 +0000
asID: 213448
IP address blocks: 2a14:9e02::/31 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bc:4f:13:39:08:55:d4:2c:0b:54:57:df:29:23:18:98:4f:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Validity
Not Before: May 18 16:16:48 2025 GMT
Not After : May 17 16:21:48 2026 GMT
Subject: CN=C064A73899C1544F91939D13618DC3D399B02F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:6e:32:6b:78:b1:85:28:88:0c:63:35:6f:
8a:11:5b:96:bd:38:2d:09:72:9a:3a:79:8f:d5:06:
0c:50:38:d2:a2:eb:f2:5f:3e:89:b8:ee:31:61:a0:
1d:c9:97:ac:48:f1:1e:b7:ac:75:d2:c4:ba:12:89:
b9:02:d9:36:a4:4b:a8:40:18:5d:8e:cc:c7:a7:9b:
2c:af:6f:77:f9:b8:33:b9:28:65:a1:5b:15:a8:8f:
c5:82:9d:73:7d:af:a1:82:66:52:61:1d:d1:7c:54:
59:32:7d:25:10:d4:e1:ce:54:58:f5:95:5a:42:b2:
f0:4e:89:f9:1c:92:b7:22:d3:8e:8c:42:ae:1e:21:
b7:1d:0d:48:3d:aa:4e:bc:64:c9:73:dc:8f:c3:53:
1d:3e:8c:f2:93:19:dd:dc:14:3e:ff:64:bd:a4:91:
e4:d9:26:37:8d:94:15:c2:eb:6a:9b:ae:04:fa:95:
da:46:c4:04:a0:2f:00:eb:b8:25:04:30:2f:63:56:
9e:22:2e:59:70:95:97:ce:4e:2d:51:7b:3e:fc:48:
1d:74:ae:eb:3e:de:83:de:23:fc:da:14:3c:7e:1d:
e6:4a:49:30:41:5d:2c:60:6d:53:34:51:ee:9f:e4:
6a:9d:50:ea:5c:f9:43:3d:83:2d:06:7c:c0:c4:b2:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:A7:38:99:C1:54:4F:91:93:9D:13:61:8D:C3:D3:99:B0:2F:09
X509v3 Authority Key Identifier:
keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530323a3a2f33312d3332203d3e20323133343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e02::/31
Signature Algorithm: sha256WithRSAEncryption
5a:68:ed:7b:15:c0:6a:14:b8:f2:77:3c:68:77:70:ef:8c:dd:
4f:9f:66:0f:bb:ab:38:62:01:96:d9:2f:bb:31:3b:ba:d1:d8:
84:07:02:1b:c0:95:cd:31:eb:9f:db:c8:81:5b:aa:a0:a2:b5:
bf:9a:5d:61:f4:9e:de:e2:a8:b7:01:d6:0d:4f:96:01:63:35:
39:2f:90:8b:5f:7d:72:56:80:22:4d:89:7b:a5:c3:2c:a1:e6:
17:df:f0:c8:a7:9e:13:0c:e1:2d:35:f9:29:6f:13:64:61:02:
28:87:e2:a5:66:50:0c:49:29:7c:ad:bf:f9:20:ed:9f:25:15:
df:fe:7e:12:50:b8:8a:cb:4f:6d:7d:cc:b0:df:dc:b2:42:83:
86:ec:ce:a7:26:40:90:2d:1f:fe:6d:f7:a0:59:33:ba:b2:f5:
12:81:5d:05:ba:f0:ae:7c:28:c0:e3:f4:37:d7:73:2a:49:74:
2c:84:ba:86:8e:a9:33:41:98:00:28:0c:c9:ee:2d:bf:34:a0:
34:00:8f:9c:43:e9:24:2b:ca:51:29:c6:30:96:d4:f7:79:ab:
54:fa:d3:a2:7a:f8:ae:f3:91:87:62:73:95:ad:1c:50:82:7f:
0f:4b:40:09:8b:13:51:79:6c:58:3a:38:6f:3e:40:38:f0:73:
80:04:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:52:49 2025 by rpki-client