Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa
File: DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa (raw, json)
Hash identifier: JXy3wpgCmIL1KJ6V2fbPe71TEfjeAQIbVCR92SplqIo=
Subject key identifier: 0F:36:D6:74:33:42:18:83:BB:EC:DF:8E:82:2F:AA:FA:E8:EC:AE:B7
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C74BD2AAEF6F28188C78A7BACFD5F
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 48
2a14:67c0:110::/44 maxlen: 48
2a14:67c0:200::/40 maxlen: 48
2a14:67c0:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:bd:2a:ae:f6:f2:81:88:c7:8a:7b:ac:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f36d67433421883bbecdf8e822faafae8ecaeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:98:0f:c4:40:b2:03:4d:18:72:cc:fd:d9:
e2:a8:f0:d6:f0:c7:5e:13:a8:8d:07:27:78:5b:3c:
05:a2:4b:54:af:5e:e8:dc:13:af:29:2e:81:ec:b6:
80:ee:27:10:af:13:24:f4:7a:71:21:27:f7:9a:2d:
77:69:e6:4c:7f:4a:f9:ae:73:8a:4a:98:e6:f3:87:
2e:74:93:36:1b:dc:14:25:e4:8e:c9:6c:2c:d2:fe:
17:bf:f7:c9:9a:4b:0d:dc:4f:1f:59:d6:9e:0b:bd:
a0:72:f4:81:c5:51:3b:bf:29:56:bc:13:c6:1b:9a:
24:02:64:6b:37:8d:ba:d4:3d:14:cd:a1:f9:ca:ae:
38:10:7e:9e:c7:5b:30:c4:20:62:f5:8b:42:fd:ed:
db:02:d4:8b:15:70:95:ec:2a:61:94:ef:19:68:38:
3c:50:65:d7:f8:7a:9b:1a:47:18:48:55:ea:2d:a0:
01:0e:11:41:1d:37:f6:f9:e0:64:9e:02:8f:07:e5:
b2:b6:c3:46:fa:b4:9e:5d:3e:2b:e6:3f:dc:71:bf:
af:24:a2:98:b0:d2:42:2f:fa:59:8c:22:e2:82:be:
9d:a8:cb:ab:4f:8a:7f:b2:9b:c5:8a:c3:87:c3:16:
18:76:a6:b2:c3:6b:14:a2:a1:0d:e6:ea:c2:be:4c:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:D6:74:33:42:18:83:BB:EC:DF:8E:82:2F:AA:FA:E8:EC:AE:B7
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::-2a14:67c0:3ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:f7:4c:10:d0:72:91:f9:b4:5e:67:49:7e:9f:08:c0:07:84:
4c:cb:ad:a4:39:6f:c1:91:fc:36:7e:6d:e0:ea:2b:58:89:63:
d7:75:0e:50:42:19:5c:25:71:31:d3:32:4e:92:b3:0f:a1:ff:
0d:0b:7d:87:0d:fc:cb:de:d3:99:c3:af:d3:52:e9:b8:97:1c:
4a:d9:84:99:12:d1:56:bf:bc:30:c1:86:f1:12:6e:fe:f3:c8:
61:76:63:2d:7d:d4:ad:9c:c9:1a:09:67:e4:9c:fd:e2:5c:50:
b2:d4:7f:15:14:8f:cf:86:c4:3e:52:e5:e9:a5:f5:b8:68:c7:
32:f3:54:aa:2a:bc:0b:5b:6c:63:6d:7f:e2:45:c1:50:92:11:
22:0d:ae:db:3d:e9:85:ff:6d:f0:d6:d9:d5:68:c5:b2:db:0d:
92:d5:6a:ac:06:37:c1:5f:8b:33:23:04:09:7d:6a:71:46:8f:
47:e4:c0:9b:d3:49:76:a6:c2:52:ab:da:70:bc:67:76:93:e6:
06:fb:3f:aa:a3:c4:00:d9:c5:10:ba:2e:43:7a:b3:a9:46:bf:
15:de:f4:47:21:f4:ac:6d:ea:1c:03:32:83:ef:de:6c:73:76:
ae:c5:f9:ba:3c:a8:92:28:41:70:ec:89:01:19:29:07:5d:c3:
0e:33:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:30 2025 by rpki-client