Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aBAcpt-NbSIhhNI8k3la6pjGmxY.roa
File: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (raw, json)
Hash identifier: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=
Subject key identifier: 68:10:1C:A6:DF:8D:6D:22:21:84:D2:3C:93:79:5A:EA:98:C6:9B:16
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C7385A6CFEE868368703512DFEA77
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aBAcpt-NbSIhhNI8k3la6pjGmxY.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214601
IP address blocks: 2a14:67c0:400::/44 maxlen: 48
2a14:67c1:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:85:a6:cf:ee:86:83:68:70:35:12:df:ea:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68101ca6df8d6d222184d23c93795aea98c69b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:c7:b1:51:15:c3:2c:95:59:90:c3:69:55:
fe:c4:cb:b9:d3:98:41:18:d5:1b:16:2c:8d:32:eb:
9e:3b:9f:dc:13:a9:50:a1:9d:aa:85:ad:eb:f6:de:
7a:7b:bb:19:1b:e0:1e:68:6c:da:23:e1:48:e2:d4:
63:9c:98:93:9d:53:33:3f:18:79:ef:d0:20:9e:f8:
08:af:6d:12:2c:a5:03:db:5b:f7:5d:d8:e1:16:d9:
ec:94:c6:25:3a:c4:25:08:f0:63:55:92:e3:d2:e5:
3b:86:23:f6:b0:f0:a0:e5:38:b5:59:36:2c:66:e5:
2b:e6:56:b1:32:ef:c3:72:39:68:f4:fa:e9:e1:52:
ff:fc:4a:c8:f4:c6:56:02:af:e5:1d:ce:a6:f0:a2:
ff:cd:f1:5d:ac:7a:e9:55:91:28:a1:1e:4b:6a:34:
79:94:28:e6:6c:46:12:c5:06:7a:c2:51:86:34:c1:
1c:c8:93:f1:c2:a3:dc:c0:cd:d2:a4:d7:19:16:ce:
34:2c:0c:d5:a3:c0:19:8f:86:0e:6f:61:b7:9a:ef:
b1:d1:0e:5b:5d:16:2e:06:ba:8d:2d:44:75:ba:08:
65:e9:23:4a:95:c4:83:dd:42:87:33:65:2b:66:1c:
e6:38:ca:6f:44:40:f1:a1:59:27:01:83:be:8d:69:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:1C:A6:DF:8D:6D:22:21:84:D2:3C:93:79:5A:EA:98:C6:9B:16
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aBAcpt-NbSIhhNI8k3la6pjGmxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:400::/44
2a14:67c1:100::/40
Signature Algorithm: sha256WithRSAEncryption
51:28:b9:20:f1:ac:9c:13:0d:39:1a:bb:94:23:89:1e:80:b1:
2e:84:06:b1:be:9c:d3:94:d6:16:a7:75:90:1d:1f:1f:b3:e7:
c9:cf:7e:df:ac:99:f0:72:2f:1c:a0:16:f6:03:63:96:13:7d:
78:30:5d:79:73:c0:2f:16:52:07:1d:22:78:5a:be:3b:da:d0:
9f:7c:ed:13:d7:b1:9f:01:f1:ed:e4:6b:3f:8f:a9:bb:cf:78:
4f:3a:5c:2b:43:a0:db:9f:bb:51:10:8b:1e:3d:f2:fd:e3:1a:
27:8c:8f:b6:48:86:9d:c1:5a:df:37:5d:db:98:4c:e5:9d:4a:
ec:93:e6:57:9c:e7:86:43:2f:d6:54:b3:4a:f8:72:53:13:2e:
f3:0e:fb:c5:73:f7:ea:fd:fc:b5:26:fd:87:4d:a5:05:4b:e8:
2d:bc:24:54:b7:c8:58:e6:b7:9f:03:83:71:5b:9b:cf:9c:31:
41:68:12:e9:18:7c:81:09:14:03:38:ee:eb:3c:6a:27:66:66:
d6:fc:47:6f:69:41:6f:3a:1d:a2:9a:ad:2e:74:6b:fa:e6:d7:
53:80:de:07:c5:8c:5c:89:b3:0c:43:16:f1:21:29:6e:d1:78:
d7:17:8d:59:b5:e2:b0:4e:e1:09:d7:fe:ec:bd:13:57:70:ad:
3f:f2:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:02 2025 by rpki-client