Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa
File: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (raw, json)
Hash identifier: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=
Subject key identifier: 43:91:F8:CE:3A:68:FE:50:18:F7:51:81:0B:20:C8:31:D1:7C:31:F8
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C71532E36396AF4FA8136A3B62DB3
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213782
IP address blocks: 2a14:67c1:70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:53:2e:36:39:6a:f4:fa:81:36:a3:b6:2d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4391f8ce3a68fe5018f751810b20c831d17c31f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:fa:f6:1d:fc:51:a3:03:1a:f5:7f:51:bf:
11:28:3a:bf:f4:d6:77:a2:88:45:c4:09:39:ee:20:
9e:9d:9f:67:aa:fc:61:29:3a:de:df:34:7a:58:67:
91:b4:f5:a4:b3:7e:b0:92:4c:af:2d:cb:cc:72:d2:
92:ec:d2:f3:e1:7e:fe:6b:cb:21:f1:62:14:d4:11:
52:37:cd:b9:12:31:c3:64:a6:3d:7e:b9:a1:87:4b:
75:a1:03:7d:e8:6f:ab:50:f2:dc:c4:2a:18:27:f8:
42:38:d6:ab:76:c0:02:87:87:be:cb:85:cf:33:2c:
22:a5:35:3b:b4:d7:26:2b:2a:4c:e5:db:ee:87:81:
fe:7e:cd:2b:2e:4c:01:2f:4a:60:16:69:b5:7b:79:
50:e9:76:2e:98:76:24:bb:3b:b0:3b:5b:a0:8d:da:
4e:c4:09:c8:58:da:23:36:74:bd:25:04:e1:dd:e3:
4a:34:bc:b1:3f:51:3c:18:ec:1f:9c:84:ab:80:b2:
43:7d:b0:d9:cb:98:95:c7:31:f6:b3:4a:2b:5d:f8:
52:31:40:ba:9f:f2:d6:31:04:a0:da:f7:48:2f:76:
db:87:9d:f3:00:15:9e:a1:15:07:c3:0e:6c:07:00:
32:1e:c5:d1:d5:63:4e:d9:c4:fc:43:d9:ce:de:ac:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:91:F8:CE:3A:68:FE:50:18:F7:51:81:0B:20:C8:31:D1:7C:31:F8
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:70::/44
Signature Algorithm: sha256WithRSAEncryption
97:8e:3f:c2:f3:2b:ad:0e:73:75:38:4c:f5:2c:8c:35:6e:bb:
ae:49:57:20:d2:42:5a:f0:f5:43:dd:f6:82:45:fc:e3:29:f2:
01:bc:a6:8f:fe:e4:a2:dd:ac:82:e4:8d:a0:f1:e7:54:72:8a:
d6:00:65:e2:81:1b:a6:59:3f:21:76:0e:00:4a:d1:50:bf:6e:
fc:40:86:2c:74:e8:05:9a:5b:6e:45:95:ab:a3:72:3e:3a:d4:
90:89:55:b3:b6:b3:88:2c:70:5b:f9:4d:cb:b2:64:16:ee:30:
cd:98:76:2d:4f:9a:a2:0e:1a:4b:fd:0f:3f:5f:33:f6:66:33:
03:8b:0d:48:da:f8:f5:95:48:b0:d6:e1:80:9e:71:94:af:35:
14:cc:fd:f7:14:ce:85:8a:68:9e:a6:95:69:55:78:85:b2:e2:
1d:5f:11:ac:92:b6:9d:89:7f:54:2f:21:da:8c:58:b7:09:23:
45:e6:87:be:5a:3a:41:bc:3c:a5:f7:78:eb:9a:6c:71:d3:99:
57:95:bb:16:44:e4:82:2e:e4:d9:a5:a0:f9:69:41:97:ec:83:
9e:7f:c6:46:e8:be:8e:b8:e2:63:19:6d:f9:9d:60:f2:97:1e:
51:06:f1:7a:39:1f:4e:4c:00:27:42:f4:65:76:8a:f3:4a:38:
8a:21:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:40 2025 by rpki-client