Route Origin Authorization
$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa
File: 326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa (raw, json)
Hash identifier: Sflvw3g+4p/JcpLn5fis2hHARGwZTp4pI6E8wXZnwuk=
Subject key identifier: 6F:01:91:19:7D:CD:86:CB:BE:03:D8:EA:19:CD:4E:B5:70:2F:C2:42
Certificate issuer: /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial: 5891C60CAB287EF979497D5DF966240611490C10
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access: rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa
Signing time: Fri 19 Jan 2024 23:17:47 +0000
ROA not before: Fri 19 Jan 2024 23:12:47 +0000
ROA not after: Fri 17 Jan 2025 23:17:47 +0000
asID: 60858
IP address blocks: 2a13:df87:b4e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:91:c6:0c:ab:28:7e:f9:79:49:7d:5d:f9:66:24:06:11:49:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Validity
Not Before: Jan 19 23:12:47 2024 GMT
Not After : Jan 17 23:17:47 2025 GMT
Subject: CN=6F0191197DCD86CBBE03D8EA19CD4EB5702FC242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:91:da:4f:46:a0:96:20:13:51:be:a5:fa:
b6:8d:14:54:fc:77:17:e7:fe:fc:f1:68:de:2c:72:
cc:53:3f:1e:32:30:d9:6a:45:81:19:72:97:e5:53:
ac:e3:b3:93:02:00:4e:28:85:c3:e7:7c:2d:63:55:
d4:d5:4e:9d:5d:2a:c8:49:23:57:98:5a:a1:b7:28:
fb:2f:24:93:74:06:66:00:0a:40:19:a4:c0:12:f7:
85:84:be:e6:f7:14:03:7e:e6:8a:b1:a2:2c:b9:54:
af:7f:50:71:d0:ff:9d:0c:e8:c4:4b:2e:eb:26:a7:
af:f2:ec:7d:38:57:f8:7a:6b:bb:e7:fe:96:b6:bb:
31:f7:39:17:98:54:20:61:46:ac:6b:aa:24:4c:ab:
41:97:a8:2c:ec:79:b1:00:31:c8:20:20:31:96:81:
01:5a:91:5d:0c:a6:47:86:c9:56:5b:e3:42:08:2f:
d6:5e:66:e0:33:ea:5e:3d:63:cd:4d:24:64:cf:0b:
67:03:ff:c9:72:9a:7b:d5:6c:65:d5:c1:2b:0f:32:
4b:43:c8:c5:36:94:aa:79:bd:4f:0e:a5:d7:af:91:
19:54:3b:d9:e0:55:dc:09:79:21:73:1e:3b:ed:cd:
44:60:ca:8b:4f:85:fa:80:c9:14:43:d0:b5:fd:21:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:91:19:7D:CD:86:CB:BE:03:D8:EA:19:CD:4E:B5:70:2F:C2:42
X509v3 Authority Key Identifier:
keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:b4e1::/48
Signature Algorithm: sha256WithRSAEncryption
39:90:09:fb:23:27:68:07:7d:51:52:97:02:94:c9:6d:54:c8:
7f:3e:80:bf:7f:bf:0b:8c:25:ca:98:63:fd:5e:88:5d:d8:89:
69:c6:7c:55:32:eb:29:86:2d:c4:1f:d4:46:3e:ee:c7:ed:20:
6c:f4:2a:2b:03:05:d9:a2:a6:53:c9:53:69:06:2b:1c:d0:14:
02:38:1f:b6:c8:1f:f4:9e:74:1a:79:33:1f:96:ea:cb:87:55:
81:5f:97:9d:13:7c:f3:94:81:6f:bd:a1:e1:ad:7f:dd:03:2e:
a8:39:dd:da:8b:b8:4f:4a:6e:78:7c:22:64:f0:e2:ab:95:83:
eb:2c:10:26:fd:36:21:dd:2f:92:7a:a7:bd:23:63:53:b6:8f:
d5:c1:c7:a4:9f:e7:c5:5b:c7:f5:fd:99:da:80:fc:f1:aa:05:
83:70:a8:2b:ea:3b:4a:75:52:b1:62:f8:23:3f:3f:93:ee:62:
53:01:b4:a2:3f:11:af:0c:aa:dc:74:9d:13:e9:25:03:b0:c3:
ed:56:53:d5:3f:95:6f:07:24:e1:22:d3:52:59:52:ac:fb:2f:
89:ef:e8:a8:8b:a3:f6:56:50:11:0f:8c:86:a8:99:8a:ba:d2:
20:8a:53:e5:c1:2f:ad:4e:1d:f4:18:6c:bb:79:a4:22:37:66:
87:92:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org