Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/8_n1qKN7xZDIXlokyKKQZRvEyuw.roa
File: 8_n1qKN7xZDIXlokyKKQZRvEyuw.roa (raw, json)
Hash identifier: oPxptZe6m2AE9xOF858XDmtp6b9+3aTDJLvBXk4hRac=
Subject key identifier: F3:F9:F5:A8:A3:7B:C5:90:C8:5E:5A:24:C8:A2:90:65:1B:C4:CA:EC
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C441B166C3F2EE360F16246475AF2A1FB
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/8_n1qKN7xZDIXlokyKKQZRvEyuw.roa
Signing time: Thu 07 Dec 2023 11:47:54 +0000
ROA not before: Thu 07 Dec 2023 11:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216156
IP address blocks: 2a13:ef47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:1b:16:6c:3f:2e:e3:60:f1:62:46:47:5a:f2:a1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 7 11:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3f9f5a8a37bc590c85e5a24c8a290651bc4caec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:ca:ed:67:1e:c4:32:0e:76:57:05:66:b3:
7f:eb:c9:14:ac:53:c1:04:0e:2a:45:cc:58:26:59:
b5:3c:77:79:cd:8b:17:56:86:a9:59:aa:61:dc:f5:
7c:41:81:85:4b:db:6c:27:d5:d5:9d:f5:6b:79:a6:
fc:ae:ec:9f:be:ff:08:de:8c:f8:4d:83:32:4e:c8:
23:d8:c3:82:bf:33:c0:ea:fa:9b:b2:94:26:71:99:
f0:35:e3:da:90:c5:c7:c6:d4:e0:7f:7d:86:3d:94:
cb:19:e3:16:3b:05:dd:e1:9f:4a:c8:d8:09:37:cb:
1a:bf:8f:c9:60:51:91:ed:4b:47:97:e5:1d:f5:55:
94:42:fb:fd:91:d8:84:99:84:75:ca:ff:f4:51:a9:
03:63:a0:69:b5:5e:95:00:b6:94:72:30:c0:80:6f:
5e:19:b4:af:90:16:44:24:ec:4a:e6:62:54:fa:7d:
c5:d6:18:89:bd:a0:b8:93:96:45:87:75:f6:ad:5d:
87:a6:8d:1d:ff:c2:ec:af:15:0b:3b:a6:fa:d2:12:
4c:08:e8:07:3e:36:77:23:39:19:5b:b2:70:df:cc:
8c:64:ea:20:63:c6:02:6d:7d:66:6f:0f:7a:69:d6:
13:c7:20:2b:df:ae:04:ea:69:af:6a:67:c5:78:28:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F9:F5:A8:A3:7B:C5:90:C8:5E:5A:24:C8:A2:90:65:1B:C4:CA:EC
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/8_n1qKN7xZDIXlokyKKQZRvEyuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef47::/32
Signature Algorithm: sha256WithRSAEncryption
95:23:a6:da:fa:c2:06:35:27:74:fc:35:5c:54:04:48:33:13:
22:19:13:ee:54:ca:9b:36:1d:ad:06:eb:0b:fc:df:1c:25:39:
eb:65:77:83:a8:40:ac:5d:1a:70:70:6b:f2:12:fa:84:e9:19:
3a:30:2b:9e:ff:11:4a:78:04:46:48:5e:83:71:ae:3d:00:ee:
17:db:4a:6c:a8:90:64:75:f6:d8:f6:fb:2f:68:4f:82:23:5f:
bc:39:a2:74:e0:66:d3:77:a9:5b:95:4e:61:12:15:89:a8:b4:
c6:b5:a3:34:3d:e4:d0:2f:70:1e:5c:40:5c:68:4f:ee:7b:7b:
16:59:9c:f5:6c:06:78:85:e0:1c:89:1a:cb:d8:23:a0:41:5c:
15:c3:24:3b:b4:e3:c2:cd:55:df:3a:e0:f7:6d:fa:10:f1:5f:
f4:5f:33:ee:03:27:34:f2:9e:13:99:01:54:81:38:52:28:2d:
a8:52:65:70:f0:3d:16:88:a0:27:42:cd:57:99:0c:80:94:47:
5c:7f:63:70:fa:e7:b5:8b:b1:f8:9b:99:7d:31:44:54:8a:c1:
15:89:02:c3:6d:d1:96:0d:8f:3f:16:82:56:70:5b:ef:08:f9:
bf:b7:cf:e5:11:db:41:84:cc:f0:cd:66:a3:85:e5:54:b5:40:
2f:96:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org