Route Origin Authorization
$ rpki-client -vvf rpki.netiface.net/repo/AquaHost/0/326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa
File: 326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa (raw, json)
Hash identifier: f2Dpgn+cOfDJOZkuhxyBTGsVhdQ+2UCAbGPONcBc5uY=
Subject key identifier: 98:E7:94:B6:1C:25:7B:14:DA:3E:7E:74:B2:D5:81:F4:B1:EC:FF:CF
Certificate issuer: /CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
Certificate serial: 2043AE07D32A8F8B0C6DDE259FB646C02F7706C0
Authority key identifier: C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27
Authority info access: rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer
Subject info access: rsync://rpki.netiface.net/repo/AquaHost/0/326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa
Signing time: Sat 13 Jan 2024 23:07:23 +0000
ROA not before: Sat 13 Jan 2024 23:02:23 +0000
ROA not after: Sat 11 Jan 2025 23:07:23 +0000
asID: 199052
IP address blocks: 2a13:df87:b500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:43:ae:07:d3:2a:8f:8b:0c:6d:de:25:9f:b6:46:c0:2f:77:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
Validity
Not Before: Jan 13 23:02:23 2024 GMT
Not After : Jan 11 23:07:23 2025 GMT
Subject: CN=98E794B61C257B14DA3E7E74B2D581F4B1ECFFCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:2f:d0:22:9e:c8:67:bc:83:2b:24:b6:89:
96:d2:09:ac:a3:7c:e4:cc:cd:2f:3d:35:5f:9c:6e:
19:14:09:04:d2:ee:9f:d1:d2:66:9c:6a:e4:3d:f3:
2a:17:ef:b8:96:81:00:d8:2a:79:03:32:16:39:84:
62:5f:c9:b3:43:1c:d2:6e:1c:83:e1:df:9f:8c:15:
f4:b8:cf:05:87:5e:73:00:bc:51:84:02:77:b9:b1:
8f:0e:09:27:d7:a9:b6:73:00:a0:4f:13:3e:89:38:
bc:cf:42:3d:66:d6:02:0f:76:3b:95:ee:af:2e:e4:
15:49:52:90:4c:b9:1a:75:cf:bb:0f:60:3d:66:ec:
d8:9c:aa:64:8d:a5:df:00:a1:69:e6:d2:36:8e:88:
e5:c5:58:a4:c7:6a:98:ca:d7:9f:24:3e:52:1f:e7:
34:fa:45:7f:8f:a7:81:be:4e:7b:e6:2e:19:5c:ee:
0d:c1:d0:4b:10:a8:d1:c5:7b:42:89:ba:00:d3:b5:
b0:71:62:2f:7d:4d:e7:54:fb:9f:ad:73:13:68:d6:
bc:2e:6e:30:28:25:20:a1:17:18:10:9d:5c:3a:1f:
e5:2c:02:f1:68:ef:08:a0:26:9f:84:fe:27:e3:a4:
63:58:6b:b9:9c:fb:d2:fa:79:1f:10:3e:7d:e9:a6:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:94:B6:1C:25:7B:14:DA:3E:7E:74:B2:D5:81:F4:B1:EC:FF:CF
X509v3 Authority Key Identifier:
keyid:C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/AquaHost/0/326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:b500::/40
Signature Algorithm: sha256WithRSAEncryption
7c:76:4e:66:7a:2d:27:f1:f0:9d:d4:32:b8:6e:b8:e8:6b:5d:
e3:fd:ac:cf:0e:ec:06:8b:39:13:8b:a6:9b:82:81:52:ca:d5:
7b:e4:cf:1f:93:d5:5f:51:fd:6e:b5:c6:a1:65:0e:8d:2b:9a:
76:6b:6c:0d:5c:dd:84:de:b9:f8:d1:4f:20:cb:83:63:8f:ea:
a4:86:b0:aa:7e:fb:00:8c:a4:e4:c6:d5:94:15:25:53:6b:d3:
b4:dd:ba:9a:7e:4c:a7:36:fe:c3:28:ef:4f:91:c4:37:47:b9:
81:63:46:a8:af:36:8c:82:44:cb:02:5c:70:05:c2:ca:15:f3:
bc:c2:da:50:02:b5:02:29:ca:19:cc:b4:dd:02:ec:ac:ca:d1:
d0:c7:75:63:75:19:7d:b4:dd:63:2f:f1:f6:12:49:e2:34:d0:
65:b8:83:1e:91:03:94:1c:8b:01:39:4a:5c:af:b3:78:4d:6c:
80:b8:91:d1:11:da:d0:c3:b7:f3:f9:e3:4e:e9:4e:80:cc:4b:
06:74:8d:eb:7d:8c:1c:82:77:7e:cf:fb:e0:d0:b8:70:7c:fb:
c9:70:bd:77:c3:23:49:89:ab:e0:78:98:8a:c6:08:88:4e:18:
f5:40:31:07:e1:71:35:bd:a2:b3:52:72:e5:e1:af:38:44:1a:
13:03:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org