Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/acyxRMqz1MpP_vazz1o9ACf-AFU.roa
File: acyxRMqz1MpP_vazz1o9ACf-AFU.roa (raw, json)
Hash identifier: 1PhqIirmgLCNPss5F0EYM/0JiNBpAuXX3hKElRETIE8=
Subject key identifier: 69:CC:B1:44:CA:B3:D4:CA:4F:FE:F6:B3:CF:5A:3D:00:27:FE:00:55
Certificate issuer: /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial: 0193F0A49C49F4E15A68662E5E7587CA0BF6
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/acyxRMqz1MpP_vazz1o9ACf-AFU.roa
Signing time: Sun 22 Dec 2024 23:12:19 +0000
ROA not before: Sun 22 Dec 2024 23:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214618
IP address blocks: 2a14:7240:a10::/48 maxlen: 48
2a14:7240:e02::/48 maxlen: 48
2a14:7240:a01c::/48 maxlen: 48
2a14:7240:e01c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:a4:9c:49:f4:e1:5a:68:66:2e:5e:75:87:ca:0b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
Validity
Not Before: Dec 22 23:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69ccb144cab3d4ca4ffef6b3cf5a3d0027fe0055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:a6:05:d2:b9:47:50:d5:5c:cb:aa:54:46:
76:ea:74:1b:3b:93:e0:a5:a7:78:40:c9:70:54:1a:
bf:c1:e3:7a:3d:93:e6:b2:d2:15:12:b9:2d:32:ea:
a1:f8:48:9f:c4:79:38:57:c9:4d:68:fe:6c:67:42:
2c:b0:94:62:a5:bc:f6:54:2e:24:99:a0:d9:68:16:
cb:d2:2b:5f:6d:2e:04:16:ee:88:77:d9:f0:88:66:
16:1b:ea:d4:e3:61:36:bb:f1:bf:db:42:4a:07:2a:
eb:58:fc:f1:36:4a:08:9a:69:ac:c2:fc:a2:d5:a3:
7e:85:61:09:94:91:95:2a:8f:3d:f8:31:96:a7:fc:
c6:62:eb:70:86:c0:aa:9d:f5:1c:d2:bb:a0:0e:3c:
fa:08:24:6c:fd:af:73:1a:f9:f4:ac:14:48:38:bd:
e6:6f:89:c2:e2:21:ba:42:06:bf:7b:2f:55:e4:62:
0e:51:7e:ea:1f:4e:97:c7:79:34:2e:37:76:05:8c:
a1:e8:97:d6:ea:d2:84:1b:a6:8c:8a:55:f7:2b:d6:
93:d0:eb:71:ff:1c:5e:ae:9a:d4:96:20:9f:6f:03:
3a:95:a3:af:fc:0f:38:53:c8:dd:b9:17:3d:3c:cb:
24:32:75:1b:0c:c2:e9:29:82:e9:f5:c9:ac:1d:68:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:B1:44:CA:B3:D4:CA:4F:FE:F6:B3:CF:5A:3D:00:27:FE:00:55
X509v3 Authority Key Identifier:
keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/acyxRMqz1MpP_vazz1o9ACf-AFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7240:a10::/48
2a14:7240:e02::/48
2a14:7240:a01c::/48
2a14:7240:e01c::/48
Signature Algorithm: sha256WithRSAEncryption
58:5d:9f:bb:c7:e0:f1:31:9a:c4:45:7e:cc:e9:2b:8a:01:43:
03:80:f1:d5:29:07:57:24:b0:6a:ad:3c:7e:2a:3e:41:19:10:
51:af:f7:78:fd:b1:8f:1c:43:22:59:f9:a0:00:59:81:3c:da:
01:07:04:b2:1e:a2:26:a2:d8:73:30:97:51:8b:dd:ac:bc:1c:
a0:c0:51:3d:55:f0:3b:d2:8c:25:5f:80:e7:d6:2c:f6:ea:0a:
ab:5f:8b:e6:16:3e:29:c4:86:af:5f:35:99:2b:8e:92:fb:bf:
92:ec:47:ef:65:ee:ff:9f:da:f3:aa:23:9a:0e:28:67:9d:c0:
56:3c:1e:84:8c:cd:8c:34:e1:a2:2e:83:41:db:0e:de:fd:50:
dc:95:09:07:3c:2f:f8:b3:08:79:d2:a9:3f:69:0f:f6:5f:da:
d4:1d:08:a6:b5:b3:3b:ce:91:fb:24:6c:ef:42:7e:37:12:1c:
03:2b:21:b8:d9:87:a3:33:c3:ef:35:e7:dd:ee:bb:85:6e:09:
f4:6b:2c:f1:43:01:a2:59:61:f1:f4:4b:2e:11:13:a3:49:bc:
76:9d:76:f0:6f:d0:b4:a7:a1:4f:5b:4c:9d:11:bd:15:8f:dc:
78:b7:58:2f:78:20:80:8f:68:f2:06:e9:e0:cf:f4:ef:3c:08:
d3:2e:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:46:19 2025 by rpki-client