Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/L4XMESwknnPYPdWmEx3hOJV8T-w.roa
File: L4XMESwknnPYPdWmEx3hOJV8T-w.roa (raw, json)
Hash identifier: e5oAOUSNuo0Ad49FikPfok2777LACtIAUatfiFrUteM=
Subject key identifier: 2F:85:CC:11:2C:24:9E:73:D8:3D:D5:A6:13:1D:E1:38:95:7C:4F:EC
Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial: 019422FC2E295327A20A3C08C0C79FFF5184
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/L4XMESwknnPYPdWmEx3hOJV8T-w.roa
Signing time: Wed 01 Jan 2025 17:48:59 +0000
ROA not before: Wed 01 Jan 2025 17:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216122
IP address blocks: 2a14:3400::/29 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2e:29:53:27:a2:0a:3c:08:c0:c7:9f:ff:51:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Validity
Not Before: Jan 1 17:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f85cc112c249e73d83dd5a6131de138957c4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:2f:50:9a:22:4a:cb:f2:01:e8:d8:aa:52:
bd:cb:98:e7:dc:98:75:9b:8f:b2:a2:e2:41:0b:81:
ea:72:d6:80:b6:bb:98:68:79:ea:9d:ae:03:fc:dd:
43:29:15:f2:69:25:16:20:a4:da:77:6d:4c:6e:cd:
cf:ae:d3:81:c7:82:da:69:7e:87:dc:07:57:f3:9f:
32:11:37:70:61:18:da:12:19:a5:0c:d2:35:bb:a5:
1b:05:43:47:83:5d:84:e7:9f:2e:7f:6a:a2:91:4a:
a7:81:a8:7c:c7:09:76:e5:8e:b9:f7:83:24:b0:40:
0a:9b:b4:a3:84:fb:d3:18:3f:f2:07:64:4d:2b:e5:
dd:1a:02:19:6f:8f:5c:92:24:e9:be:f7:ea:e7:50:
d5:c5:46:77:42:cd:00:ca:b1:d0:a3:f5:4b:c9:2e:
bf:93:21:a9:89:75:e8:00:96:b1:4e:bd:60:47:8d:
b5:a4:74:cc:aa:35:03:ac:ee:b2:fb:97:42:0e:59:
c1:a5:b4:4b:6f:4b:a2:c7:3c:14:7e:cd:d9:f4:d6:
45:a1:53:a8:10:ac:3d:21:05:4e:2e:1a:d1:72:71:
c0:b5:2c:14:c0:08:a1:9a:d7:a0:ad:09:00:46:60:
77:06:40:1e:e3:f9:a3:32:89:0a:fa:86:40:c1:84:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:CC:11:2C:24:9E:73:D8:3D:D5:A6:13:1D:E1:38:95:7C:4F:EC
X509v3 Authority Key Identifier:
keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/L4XMESwknnPYPdWmEx3hOJV8T-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3400::/29
Signature Algorithm: sha256WithRSAEncryption
17:30:1c:8a:0f:b2:54:9d:35:0a:0c:39:cc:b2:13:e0:0c:86:
2e:e6:ac:c1:24:20:88:88:63:a9:e4:87:95:43:66:8b:db:6a:
45:ae:e5:92:7f:d9:c8:05:44:c5:48:66:a3:7f:8b:90:62:cf:
fc:fd:c5:43:01:74:b8:59:c2:05:9f:4a:80:c7:bb:36:d0:5b:
f2:39:f9:af:c3:a1:1e:58:0a:cf:45:53:8d:44:69:9a:44:e6:
56:b2:d2:b1:c2:a3:bc:49:31:f0:47:9a:85:4a:24:20:98:8a:
a5:1b:d4:cf:49:81:c0:06:44:70:46:5f:61:0a:5d:fe:ab:77:
4f:1e:6d:3b:53:e6:09:e4:98:af:72:79:46:e7:d4:45:e5:de:
76:80:3d:08:f4:c3:cb:70:bd:6b:48:2e:7a:e0:f0:30:c8:9d:
41:15:87:f3:39:59:a2:e9:30:b1:11:69:89:59:a8:01:98:7f:
cd:a3:22:84:a9:96:a5:de:84:0e:55:e2:84:4c:f0:8c:d3:7b:
cf:e0:a4:d9:68:e6:9f:6d:94:a6:2e:d0:0b:f8:76:f2:7b:24:
23:4f:99:f0:73:8c:a9:f1:1a:a0:4a:e7:2f:ed:21:b8:d8:4e:
0e:5e:92:59:69:af:c0:94:0a:3c:ac:8b:fc:67:ea:e0:2a:50:
6c:5d:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:31:22 2025 by rpki-client on console.sobornost.net