Route Origin Authorization
$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130303a3a2f34382d3438203d3e20323130393132.roa
File: 326131333a646638373a323130303a3a2f34382d3438203d3e20323130393132.roa (raw, json)
Hash identifier: mB8zfT8/YfQwBdjE+q7FChCBPadPdhbc9dbbZdlTY6k=
Subject key identifier: 3F:F5:06:E3:AB:6C:C1:63:2E:0E:C8:EF:68:C7:51:67:2A:A3:50:77
Certificate issuer: /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial: 31FE667DA21CBCB1BADB8A968FA1A90A88CBE3CA
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access: rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access: rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130303a3a2f34382d3438203d3e20323130393132.roa
Signing time: Wed 17 Jan 2024 19:24:33 +0000
ROA not before: Wed 17 Jan 2024 19:19:33 +0000
ROA not after: Wed 15 Jan 2025 19:24:33 +0000
asID: 210912
IP address blocks: 2a13:df87:2100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:fe:66:7d:a2:1c:bc:b1:ba:db:8a:96:8f:a1:a9:0a:88:cb:e3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Validity
Not Before: Jan 17 19:19:33 2024 GMT
Not After : Jan 15 19:24:33 2025 GMT
Subject: CN=3FF506E3AB6CC1632E0EC8EF68C751672AA35077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a7:c2:67:80:4e:c6:e0:e9:48:92:1d:dc:25:
65:93:3a:46:34:83:d9:4c:d8:22:5c:04:65:c3:7f:
bc:90:b8:cf:17:63:25:4c:a3:92:12:8d:37:1f:85:
4f:4d:45:49:a0:97:4a:1b:98:99:c6:19:53:b0:bb:
2b:8f:91:a8:c9:92:0c:fe:9b:6c:77:11:04:32:de:
fe:2e:cf:60:e0:53:69:36:b6:a7:8d:bc:bd:e6:d0:
e8:db:d2:22:cf:e8:19:b5:af:6f:cc:8f:73:a8:9d:
39:1f:78:84:4b:15:4b:c2:0e:e8:21:38:85:f4:ba:
9a:73:2c:56:6e:32:5d:ee:1b:5a:9a:44:5a:fb:94:
59:ec:4e:8f:da:41:3e:72:95:1f:9c:86:31:51:a0:
8b:9d:81:74:5d:e6:e1:dc:45:f1:a5:c1:f9:c2:c7:
58:bb:c6:3e:b0:d3:41:7e:66:14:8d:59:bd:64:ef:
76:74:ae:16:1f:fe:3f:13:cc:7e:1a:05:e2:9a:63:
c0:73:2c:bc:a6:7e:9c:32:34:e5:bb:2e:58:ec:8a:
82:d8:c3:80:a7:f3:2a:b2:40:ce:43:26:f4:ee:5a:
f1:2c:c8:04:c6:b1:bb:0a:4a:d9:02:bf:5c:fa:5c:
f5:93:77:4b:b0:07:cc:97:f5:1c:e1:48:bf:e5:77:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:06:E3:AB:6C:C1:63:2E:0E:C8:EF:68:C7:51:67:2A:A3:50:77
X509v3 Authority Key Identifier:
keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323130303a3a2f34382d3438203d3e20323130393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:2100::/48
Signature Algorithm: sha256WithRSAEncryption
9e:45:6d:aa:77:af:e4:08:fb:4b:d8:76:6c:b8:47:a7:37:65:
b1:cd:96:76:49:a9:0f:c1:2a:bf:d4:cf:e2:43:ae:d6:08:07:
a1:ae:f9:15:d4:f2:33:4a:ef:51:d9:ef:b5:e6:4a:21:71:eb:
d7:03:91:21:1f:0c:b2:2c:f6:66:c0:b3:c5:f9:54:7d:e7:34:
f5:9e:8f:55:7a:38:18:cb:8b:58:e1:b1:2e:39:2e:fd:4f:e6:
7d:ed:f3:a0:43:a1:b1:58:81:8b:a6:28:ae:53:9e:01:34:d9:
69:51:d3:d9:19:5b:f2:95:10:d7:22:f3:58:b9:95:40:53:24:
4c:b9:6d:d4:2b:e1:60:4f:9d:33:6f:cd:bb:92:c0:6b:89:5f:
36:c2:3c:95:f9:d6:a5:d8:c3:46:95:e2:30:c2:b8:fb:8b:27:
01:28:8f:95:d5:76:f3:a0:12:58:ed:56:f4:b9:35:6a:45:5c:
d8:e5:0b:93:ab:93:64:5a:6d:01:b7:df:0a:41:12:e2:82:3d:
80:4a:53:e6:14:15:25:ea:aa:7b:d9:53:c3:73:71:e8:c2:39:
3c:bc:e7:2c:f2:af:80:af:68:dc:0c:ba:74:17:0b:6d:86:14:
b7:9c:9c:64:9d:a6:2c:41:7c:11:ef:12:7d:67:7d:93:48:59:
fa:d3:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org