Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/aQ0qO4Xmzrt2d16OlSiidYHoKOU.roa
File: aQ0qO4Xmzrt2d16OlSiidYHoKOU.roa (raw, json)
Hash identifier: HDqM95JGpYyhE3TuqN67nJSTFwBFcep6IvbFNLazib8=
Subject key identifier: 69:0D:2A:3B:85:E6:CE:BB:76:77:5E:8E:95:28:A2:75:81:E8:28:E5
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C17ADE5D5B451D939E222138416EBF2A2
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/aQ0qO4Xmzrt2d16OlSiidYHoKOU.roa
Signing time: Tue 28 Nov 2023 20:45:21 +0000
ROA not before: Tue 28 Nov 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 2a13:ef41:e000::/35 maxlen: 48
2a13:ef45::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:ad:e5:d5:b4:51:d9:39:e2:22:13:84:16:eb:f2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Nov 28 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=690d2a3b85e6cebb76775e8e9528a27581e828e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:af:20:95:f4:52:9e:42:2d:c2:e6:b9:b3:
0b:03:41:11:35:fc:e5:13:93:53:b8:bf:6f:c6:8a:
ed:83:e5:07:ab:09:eb:84:16:a8:af:14:97:6c:d5:
51:b3:61:d6:d0:38:fb:5d:bf:81:15:91:a6:74:83:
af:90:f3:95:6d:7f:6c:b7:f2:dd:15:e5:f7:ea:4b:
62:58:46:8a:52:7c:b9:46:b2:0f:9c:18:bc:ac:34:
9b:4d:09:64:39:63:30:57:15:0e:05:36:ec:22:56:
8c:b7:67:58:bc:ef:c5:1c:c9:b0:4b:28:48:8c:e7:
02:88:8c:c7:3f:69:cf:62:bf:07:eb:a8:da:58:9e:
9e:f8:3f:36:74:e2:40:5f:49:0d:26:b0:71:03:fe:
ae:c8:00:01:f9:c1:d7:2a:1d:83:24:27:69:01:72:
96:a5:63:9d:55:dc:7d:07:12:bb:a9:6e:53:bb:2a:
d0:98:79:8e:d3:e1:13:f4:ef:c5:06:10:53:e9:3b:
6f:68:d1:74:62:dd:f0:29:b7:99:e3:40:1b:cf:32:
d2:e0:21:77:95:b7:9b:0e:1a:1d:70:d1:68:5f:86:
cd:99:c8:26:f4:23:9c:4a:89:77:1f:59:ee:0a:04:
63:97:23:d9:dc:f3:17:d8:89:80:39:dd:52:a2:90:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:2A:3B:85:E6:CE:BB:76:77:5E:8E:95:28:A2:75:81:E8:28:E5
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/aQ0qO4Xmzrt2d16OlSiidYHoKOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef41:e000::/35
2a13:ef45::/32
Signature Algorithm: sha256WithRSAEncryption
75:e4:d4:79:71:76:20:8d:89:64:87:f3:e2:fa:ba:fa:92:15:
61:e3:0a:f6:02:4a:28:89:fb:03:e9:a0:ee:7f:71:9e:69:05:
3b:d0:bc:de:f4:98:1f:5e:67:9e:4d:11:5b:26:ea:da:dd:cb:
85:09:bf:ad:0e:7b:4e:79:8f:e4:9e:20:0e:1f:0e:0e:e8:ea:
76:e7:4a:05:6e:5e:62:c1:92:e2:ae:f7:b5:25:b2:03:18:eb:
54:ae:a1:fa:ba:14:95:8b:83:5c:08:a1:c1:34:72:3d:b9:0d:
69:8a:35:b1:32:5b:84:78:1c:3d:3c:b6:01:3e:93:49:38:b6:
64:e2:0a:72:17:16:61:d7:15:bb:c7:d2:65:c5:c8:86:e8:15:
11:f0:32:96:45:0e:11:91:00:56:e6:7a:c4:64:30:f8:8a:bf:
4e:97:94:e6:f0:c5:9e:a9:ca:61:35:cf:ff:34:ce:51:1b:80:
6c:e8:b8:ae:c8:da:d1:19:85:6f:ae:e5:e9:09:ab:53:45:95:
4e:46:1c:a0:50:50:e2:e7:1c:45:5c:99:b9:fe:b8:4a:52:ef:
b9:aa:af:a0:e0:f2:23:90:e1:18:c6:5b:8f:b5:f1:33:e8:f1:
2f:0c:7e:ac:d2:e6:8c:00:80:b8:5e:d4:0a:64:bd:f8:3f:a0:
63:a1:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org