Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4-YxyqPhUFOe02SEgYyRUrADEGw.roa
File: 4-YxyqPhUFOe02SEgYyRUrADEGw.roa (raw, json)
Hash identifier: BzgSygBFO6JBMF8nbeKVFMdy2LXXzo+Pz40oBu4qU+Q=
Subject key identifier: E3:E6:31:CA:A3:E1:50:53:9E:D3:64:84:81:8C:91:52:B0:03:10:6C
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C752F0AFD583C1649D6D5F1B983A2
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4-YxyqPhUFOe02SEgYyRUrADEGw.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216183
IP address blocks: 2a14:67c6::/32 maxlen: 48
2a14:67c7::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:75:2f:0a:fd:58:3c:16:49:d6:d5:f1:b9:83:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3e631caa3e150539ed36484818c9152b003106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:86:fa:93:b4:39:a7:3b:cc:1e:7a:a2:2d:
2e:a4:7e:ab:fd:cd:c3:53:be:e1:e2:38:29:14:6e:
18:19:de:a0:f9:11:b5:15:33:4e:55:24:ce:80:21:
78:0a:19:1a:4e:aa:17:3f:95:ab:e5:34:b6:6b:b5:
99:70:53:15:ab:63:39:a6:57:26:35:eb:d6:f4:99:
58:ce:c7:4a:22:6b:e1:2f:de:7b:88:d2:ce:4e:1c:
00:78:57:72:7f:8d:81:b1:f5:41:c0:66:a0:a2:cc:
c4:a9:f3:56:e9:07:90:04:d3:49:63:bf:b2:f4:3c:
63:1f:69:41:67:14:9e:74:96:1a:b3:e7:4f:af:ca:
23:3c:90:fc:33:42:98:af:00:ee:5f:54:37:17:ab:
42:83:34:fc:7c:bb:dc:da:11:98:21:77:2d:a2:be:
73:9a:1b:fb:16:cc:6c:db:a0:c1:eb:d2:60:5e:c6:
b8:0a:8b:03:72:17:7e:5d:54:e7:6f:3d:c0:5b:ac:
68:6c:06:41:41:08:60:7c:e7:7e:87:c5:e7:bb:f7:
3e:9f:ef:af:23:e9:d5:07:71:3c:98:8b:bb:13:fc:
1e:28:19:b2:eb:08:cf:83:f3:0b:41:5c:06:d1:9f:
6f:88:76:f3:f2:16:20:0d:81:eb:82:b6:b7:93:e1:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:31:CA:A3:E1:50:53:9E:D3:64:84:81:8C:91:52:B0:03:10:6C
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4-YxyqPhUFOe02SEgYyRUrADEGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c6::/31
Signature Algorithm: sha256WithRSAEncryption
10:8e:38:f6:e8:f4:16:68:57:a1:89:fa:45:1c:ca:c2:a0:37:
90:62:66:ae:5e:98:5f:54:f9:2f:4b:2d:92:fe:cd:be:69:4e:
fa:bc:ad:6c:c5:9c:e9:ed:db:72:5c:ff:8a:65:cf:df:37:fc:
f7:d8:5f:bf:55:03:91:49:92:2c:0a:08:13:ca:63:07:90:e2:
34:31:4b:83:9a:b1:93:b4:3e:f1:6e:47:d7:d5:02:68:59:9d:
32:63:05:c7:ec:b0:87:28:21:89:4b:87:d0:62:e2:72:0b:d9:
be:b9:32:75:e5:a3:37:8e:82:15:29:51:d6:d6:40:50:9a:8c:
5c:53:ea:f2:fc:04:dc:ef:bd:2c:b7:e9:ee:ba:70:44:1f:85:
86:a6:33:21:4e:84:2f:f9:a9:20:1d:52:a9:aa:d7:87:d7:51:
58:7f:1e:5f:6a:22:99:d4:32:12:30:85:25:39:2d:85:9c:22:
2f:11:ce:cd:86:f5:d0:68:35:95:6e:b9:35:6b:f1:c6:5b:4f:
8b:59:db:33:55:d3:0f:41:89:ad:e5:6e:76:a5:e0:68:3c:dd:
ff:54:11:16:50:f6:e5:24:86:83:1e:41:fd:0e:c7:64:a9:7f:
40:f8:a8:53:fb:77:fa:7f:27:ce:a8:9e:96:04:9b:4d:84:39:
3f:42:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:21 2025 by rpki-client