Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/mKJqEI739B0iTvnzxCUb3biwris.roa
File: mKJqEI739B0iTvnzxCUb3biwris.roa (raw, json)
Hash identifier: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=
Subject key identifier: 98:A2:6A:10:8E:F7:F4:1D:22:4E:F9:F3:C4:25:1B:DD:B8:B0:AE:2B
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C7451DC874E5423F02DB7E5E98A21
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/mKJqEI739B0iTvnzxCUb3biwris.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214963
IP address blocks: 2a14:67c1:700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:51:dc:87:4e:54:23:f0:2d:b7:e5:e9:8a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98a26a108ef7f41d224ef9f3c4251bddb8b0ae2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:97:4b:f3:1a:bb:13:f2:62:45:cd:b0:ed:
5e:5b:f1:a6:ee:1b:56:9b:2d:29:e1:0b:14:19:ce:
94:12:80:b9:24:18:50:3d:12:fc:5c:ed:15:43:87:
76:f7:df:e2:e6:56:14:a4:08:1f:91:0b:3d:2d:0d:
31:3d:83:0d:49:78:10:07:73:27:2f:40:87:79:1a:
2b:b8:14:05:08:bc:23:91:ff:69:45:ab:0c:3b:b8:
ea:d6:a1:30:ab:3a:27:0c:f2:f6:ac:95:17:e0:de:
5d:4b:37:eb:5e:74:4e:a2:37:55:fd:81:79:93:c7:
4c:cb:fc:18:ae:b3:3c:31:67:f7:eb:87:30:84:c2:
2f:40:ae:45:42:0d:76:14:e0:03:42:f4:13:a4:50:
88:28:8b:a1:59:2c:8b:1f:55:e4:4b:f7:fb:40:b1:
e0:5e:fe:1b:8f:4c:1e:c9:ca:f1:bd:8d:33:8d:2b:
b7:5c:ce:b7:e3:e4:74:f5:95:af:a0:af:f3:3c:93:
1d:5c:a1:84:7f:20:4b:82:ba:43:fb:44:1b:51:7f:
fa:87:07:d6:10:6d:fd:a1:cf:d6:67:73:8c:82:c2:
8d:ac:b4:fa:aa:9b:37:4f:ed:f7:1d:d3:06:05:41:
e7:68:59:cd:4a:40:d6:7f:ec:a3:68:cb:1e:ed:ec:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:6A:10:8E:F7:F4:1D:22:4E:F9:F3:C4:25:1B:DD:B8:B0:AE:2B
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/mKJqEI739B0iTvnzxCUb3biwris.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:700::/40
Signature Algorithm: sha256WithRSAEncryption
6b:f4:05:ea:a8:17:13:6f:9f:a2:6e:2e:23:14:97:2e:c5:f1:
cf:3c:6e:5a:ae:ae:ec:34:3f:a8:b1:5b:a4:59:04:50:10:a1:
d8:86:5b:db:c1:fc:98:70:96:15:58:a8:18:10:4b:6d:8f:25:
1e:66:c7:b0:9a:6c:30:08:1c:4e:e5:d4:59:7b:7b:7a:54:f3:
49:fe:78:cd:78:86:d4:5e:3d:9f:a0:ec:87:ae:35:37:53:79:
c0:ea:27:27:73:ba:34:2e:8e:26:e7:c8:5b:d1:f3:78:eb:74:
bc:47:ed:d1:a3:99:40:c7:45:0a:e9:3a:a9:27:bd:4a:05:aa:
32:20:d4:87:62:02:6f:e2:3e:76:09:5f:cd:5e:6b:4d:df:be:
47:0d:58:dd:f1:a5:bc:17:86:64:3a:cf:a7:df:f2:23:c5:a3:
c3:21:ec:b7:59:e8:29:40:a8:94:f5:5a:48:49:84:0a:42:79:
0c:09:0f:92:89:6c:e6:f8:f5:0c:f5:e1:86:6f:8a:e9:bb:d8:
a9:85:7d:5a:29:8f:03:58:70:b7:95:5b:20:ea:c1:cb:a5:96:
2a:c8:d9:80:55:02:0b:27:ee:05:26:85:6f:70:e8:6f:55:7f:
d2:0a:4a:85:a3:a9:cf:99:6c:77:5e:5d:b2:6b:e9:38:9e:9c:
28:e2:c1:1b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQfjHRR3IdOVCPwLbfl6YohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwMTAxMDE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGEyNmExMDhlZjdmNDFkMjI0ZWY5ZjNjNDI1MWJkZGI4YjBhZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zeXS/MauxPyYkXNsO1eW/Gm7htW
my0p4QsUGc6UEoC5JBhQPRL8XO0VQ4d299/i5lYUpAgfkQs9LQ0xPYMNSXgQB3Mn
L0CHeRoruBQFCLwjkf9pRasMO7jq1qEwqzonDPL2rJUX4N5dSzfrXnROojdV/YF5
k8dMy/wYrrM8MWf364cwhMIvQK5FQg12FOADQvQTpFCIKIuhWSyLH1XkS/f7QLHg
Xv4bj0weycrxvY0zjSu3XM634+R09ZWvoK/zPJMdXKGEfyBLgrpD+0QbUX/6hwfW
EG39oc/WZ3OMgsKNrLT6qps3T+33HdMGBUHnaFnNSkDWf+yjaMse7ewG5QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJiiahCO9/QdIk7588QlG924sK4rMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvbUtKcUVJNzM5QjBpVHZuenhDVWIzYml3cmlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwQcw
DQYJKoZIhvcNAQELBQADggEBAGv0BeqoFxNvn6JuLiMUly7F8c88blquruw0P6ix
W6RZBFAQodiGW9vB/JhwlhVYqBgQS22PJR5mx7CabDAIHE7l1Fl7e3pU80n+eM14
htRePZ+g7IeuNTdTecDqJydzujQujibnyFvR83jrdLxH7dGjmUDHRQrpOqknvUoF
qjIg1IdiAm/iPnYJX81ea03fvkcNWN3xpbwXhmQ6z6ff8iPFo8Mh7LdZ6ClAqJT1
WkhJhApCeQwJD5KJbOb49Qz14YZvium72KmFfVopjwNYcLeVWyDqwcullirI2YBV
Agsn7gUmhW9w6G9Vf9IKSoWjqc+ZbHdeXbJr6TienCjiwRs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:29 2025 by rpki-client