Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530303a6130303a3a2f34302d3438203d3e20333935383831.roa
File: 326131343a396530303a6130303a3a2f34302d3438203d3e20333935383831.roa (raw, json)
Hash identifier: IBW+gKrm1jCZAjCEsDmCjo8Ey1/asRQvJdaUciWOvkY=
Subject key identifier: 55:B7:21:1D:5B:FB:67:73:78:01:11:96:E1:DC:CC:DC:F4:0F:FB:EC
Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial: 36F74B8206DCA537DBF355A12FA8310FBA7A41F8
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access: rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a6130303a3a2f34302d3438203d3e20333935383831.roa
Signing time: Sat 12 Apr 2025 16:57:38 +0000
ROA not before: Sat 12 Apr 2025 16:52:38 +0000
ROA not after: Sat 11 Apr 2026 16:57:38 +0000
asID: 395881
IP address blocks: 2a14:9e00:a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f7:4b:82:06:dc:a5:37:db:f3:55:a1:2f:a8:31:0f:ba:7a:41:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Validity
Not Before: Apr 12 16:52:38 2025 GMT
Not After : Apr 11 16:57:38 2026 GMT
Subject: CN=55B7211D5BFB677378011196E1DCCCDCF40FFBEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:99:95:9d:f2:76:1b:7f:3d:a3:47:26:6a:
fc:98:8c:2d:80:7b:7b:8a:51:d5:8e:75:20:c8:71:
eb:a1:0f:b4:98:30:f9:74:9b:1e:e4:78:89:9e:91:
25:5d:e5:f3:2e:4e:55:60:e0:3f:d4:a9:d9:d4:46:
3b:e4:e8:61:cc:64:33:cc:2f:bd:77:af:7f:79:b0:
86:16:84:ab:0f:88:b6:8b:bb:dc:40:84:b3:f8:c6:
4f:18:cf:5d:39:8e:94:34:dd:7a:e6:c5:e1:ac:46:
28:e4:28:d7:38:70:53:17:83:5b:37:0f:e3:47:2b:
ec:76:54:db:7d:57:f9:35:80:99:9c:6d:a1:ef:85:
10:e3:dd:e2:1f:f4:50:0f:03:19:49:77:e6:d5:e5:
40:51:47:e2:f4:bb:89:88:3e:c6:37:7b:52:aa:66:
80:8d:9b:35:f0:77:66:e0:4b:2b:81:c4:e2:ba:cc:
e6:f8:b6:46:d4:ca:1c:0f:ff:82:72:0e:57:6d:a6:
64:af:6e:e0:29:e5:bf:aa:f9:1d:02:ca:b7:05:2a:
5b:e5:a3:80:99:68:cf:b9:90:88:fb:91:07:fe:66:
f2:94:54:e9:85:78:0d:11:84:04:4f:81:a3:d7:04:
4c:81:03:8f:20:77:7b:5e:09:f9:fb:f4:fe:1b:0e:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:21:1D:5B:FB:67:73:78:01:11:96:E1:DC:CC:DC:F4:0F:FB:EC
X509v3 Authority Key Identifier:
keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a6130303a3a2f34302d3438203d3e20333935383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00:a00::/40
Signature Algorithm: sha256WithRSAEncryption
6e:37:34:78:14:ee:b7:e7:68:11:e9:40:6d:65:82:ee:5e:f3:
f4:29:46:b8:53:41:87:3a:57:fc:8a:15:83:2c:fb:8b:9a:f4:
8c:47:48:c9:e2:60:9a:05:9b:7f:71:5f:0f:9b:e2:52:64:a4:
de:61:9f:b3:ee:e7:71:a1:d5:24:06:37:4e:b5:1a:bc:0f:19:
e0:78:0a:16:b8:5a:b8:f5:27:a7:91:0f:56:2d:7c:db:42:f3:
89:02:ef:ef:b9:49:02:84:3f:2a:34:34:03:c3:a5:ed:ee:85:
6e:4b:36:c3:fb:f7:d6:59:26:52:ea:f5:9c:84:10:5e:63:c0:
6f:22:e0:80:2d:18:e7:18:ba:d3:d0:ec:e7:6a:3e:0d:09:67:
05:3f:0e:70:9a:ae:14:58:a3:af:ec:f0:e2:7f:57:dc:76:87:
ce:55:a4:60:82:e0:d4:88:7a:94:d9:87:65:ed:79:b0:c5:d9:
44:bb:51:cc:9f:1d:6a:c6:33:7c:21:84:25:e6:3c:44:07:14:
8f:5c:55:e5:68:99:05:ab:07:0e:56:56:2c:99:85:fa:a3:d2:
3d:d3:1a:80:30:74:10:5b:ec:c9:50:a8:8d:7c:88:f6:04:98:
60:55:6d:5d:2d:c1:26:d2:c1:65:d1:6a:03:7e:eb:89:01:2e:
aa:07:e0:8a
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUNvdLggbcpTfb81WhL6gxD7p6QfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTY0MGFhNjFmMWQ2MmI5Yzk0MDQ1OTgwNGFlMTFiZTk5
YWQ0Mzg0MjAeFw0yNTA0MTIxNjUyMzhaFw0yNjA0MTExNjU3MzhaMDMxMTAvBgNV
BAMTKDU1QjcyMTFENUJGQjY3NzM3ODAxMTE5NkUxRENDQ0RDRjQwRkZCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsNZmVnfJ2G389o0cmavyYjC2A
e3uKUdWOdSDIceuhD7SYMPl0mx7keImekSVd5fMuTlVg4D/UqdnURjvk6GHMZDPM
L713r395sIYWhKsPiLaLu9xAhLP4xk8Yz105jpQ03XrmxeGsRijkKNc4cFMXg1s3
D+NHK+x2VNt9V/k1gJmcbaHvhRDj3eIf9FAPAxlJd+bV5UBRR+L0u4mIPsY3e1Kq
ZoCNmzXwd2bgSyuBxOK6zOb4tkbUyhwP/4JyDldtpmSvbuAp5b+q+R0CyrcFKlvl
o4CZaM+5kIj7kQf+ZvKUVOmFeA0RhARPgaPXBEyBA48gd3teCfn79P4bDq7TAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUVbchHVv7Z3N4ARGW4dzM3PQP++wwHwYDVR0j
BBgwFoAUpkCqYfHWK5yUBFmASuEb6ZrUOEIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh
Y2UvMy9BNjQwQUE2MUYxRDYyQjlDOTQwNDU5ODA0QUUxMUJFOTlBRDQzODQyLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcGtDcVlmSFdLNXlVQkZtQVN1RWI2WnJV
T0VJLmNlcjCBhgYIKwYBBQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3Jl
cG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzMvMzI2MTMxMzQzYTM5NjUzMDMw
M2E2MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMzM5MzUzODM4MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqFJ4ACjANBgkqhkiG9w0BAQsFAAOCAQEAbjc0eBTut+doEelAbWWC
7l7z9ClGuFNBhzpX/IoVgyz7i5r0jEdIyeJgmgWbf3FfD5viUmSk3mGfs+7ncaHV
JAY3TrUavA8Z4HgKFrhauPUnp5EPVi1820LziQLv77lJAoQ/KjQ0A8Ol7e6Fbks2
w/v31lkmUur1nIQQXmPAbyLggC0Y5xi609Ds52o+DQlnBT8OcJquFFijr+zw4n9X
3HaHzlWkYILg1Ih6lNmHZe15sMXZRLtRzJ8dasYzfCGEJeY8RAcUj1xV5WiZBasH
DlZWLJmF+qPSPdMagDB0EFvsyVCojXyI9gSYYFVtXS3BJtLBZdFqA37riQEuqgfg
ig==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net