Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/JdOTNyhkiLKM5FF43tDVqohD_vo.roa
File: JdOTNyhkiLKM5FF43tDVqohD_vo.roa (raw, json)
Hash identifier: mfpCaeAkJAZ8f9LaRdws0P5RDsqAUnVyaugl0U8DK6A=
Subject key identifier: 25:D3:93:37:28:64:88:B2:8C:E4:51:78:DE:D0:D5:AA:88:43:FE:FA
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C4F7CFEF28B2953EF7CC332461426DC28
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/JdOTNyhkiLKM5FF43tDVqohD_vo.roa
Signing time: Sat 09 Dec 2023 16:50:40 +0000
ROA not before: Sat 09 Dec 2023 16:50:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215978
IP address blocks: 2a13:ef44::/32 maxlen: 48
2a13:ef46:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:7c:fe:f2:8b:29:53:ef:7c:c3:32:46:14:26:dc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 9 16:50:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25d39337286488b28ce45178ded0d5aa8843fefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:c7:c3:e4:58:af:a8:68:77:8b:dd:d9:a2:
1d:bb:83:2b:42:fe:f1:cc:da:dd:e9:45:93:24:c2:
b8:78:4f:87:d3:6b:1e:3c:6b:94:64:49:5d:6d:11:
5f:e0:28:de:31:d2:a7:7a:37:ed:ce:ea:9b:df:30:
a8:54:51:ae:c5:cf:04:dd:e3:79:5c:92:cc:39:b5:
19:4c:f0:7a:c9:6e:6f:6b:f1:87:e1:23:8f:13:ff:
ba:1c:0f:98:f7:20:0b:bc:18:10:70:76:97:b0:74:
67:b9:a9:60:81:a0:a7:bd:8f:61:37:89:22:39:ad:
07:ac:b1:4b:9b:28:ed:c7:02:80:c5:0d:e8:39:e7:
93:1d:ac:50:ca:2a:cc:a5:d3:1b:c1:92:9c:19:fb:
01:a9:8d:32:d2:4e:37:ae:6b:53:91:0a:98:25:46:
2f:30:a5:54:d3:dd:05:31:63:a2:d6:b0:ab:85:42:
17:52:8d:4d:10:af:15:be:6d:45:83:c6:49:6c:49:
46:74:28:81:e7:54:21:33:bb:0c:fd:4e:61:78:23:
03:e2:3b:12:cc:3a:1f:df:e8:56:3d:9a:dd:c2:a2:
ea:0e:7c:21:b6:fb:96:4f:04:4f:94:59:0c:ec:be:
d8:47:ed:bc:22:e9:5f:20:42:f1:a1:e4:cf:83:04:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D3:93:37:28:64:88:B2:8C:E4:51:78:DE:D0:D5:AA:88:43:FE:FA
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/JdOTNyhkiLKM5FF43tDVqohD_vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef44::/32
2a13:ef46:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
30:de:fb:ec:a1:4b:33:4b:6c:d4:34:13:6a:de:7f:8d:ee:b1:
f5:c6:33:73:92:59:72:a8:39:3d:ab:0f:9e:fb:b3:0c:dd:6c:
45:db:e5:d8:80:cc:c8:81:ac:dc:4c:5e:7c:2a:e5:58:42:b3:
6b:58:6c:20:84:68:a6:18:34:0d:1a:f8:bf:99:ee:bc:d8:34:
7d:9e:23:ef:64:0c:9b:d6:1e:6e:89:ed:44:64:87:4e:6e:92:
67:22:ae:64:af:b9:a3:05:28:ae:cf:dc:69:fc:d3:a7:03:13:
10:c3:c7:71:00:f9:0d:c4:31:39:de:e9:84:ef:32:54:a2:47:
6e:8c:ab:22:02:d5:1c:94:71:82:e4:56:9a:44:3c:f7:a0:36:
97:40:44:e3:ab:9b:74:cb:04:c8:30:ee:84:f9:ab:f9:70:99:
20:7e:9f:70:df:84:a5:0c:eb:cf:bf:57:87:d9:87:9e:ec:50:
23:c7:66:48:20:5c:c9:8f:0d:17:44:2d:3f:dc:ce:11:9c:fe:
1c:2b:ef:4c:57:b8:24:ae:a3:6e:22:f5:df:f1:7c:9c:ea:96:
d1:f2:ea:ba:74:83:a5:c4:e3:5c:62:e5:6c:df:bc:71:6c:9a:
fd:34:93:51:4a:59:78:d1:76:eb:98:9f:79:97:de:ca:4d:9f:
e9:82:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org