Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/c9nBbX1RBCB8d690Lf4KQO3rEpc.roa
File: c9nBbX1RBCB8d690Lf4KQO3rEpc.roa (raw, json)
Hash identifier: HzDHEzE5VSyaLrtH+qsMs1avGlEyVuSIJFH+77KeC2o=
Subject key identifier: 73:D9:C1:6D:7D:51:04:20:7C:77:AF:74:2D:FE:0A:40:ED:EB:12:97
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C4A08CFB965AA120437A734C59FFF197E
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/c9nBbX1RBCB8d690Lf4KQO3rEpc.roa
Signing time: Fri 08 Dec 2023 15:25:40 +0000
ROA not before: Fri 08 Dec 2023 15:25:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51396
IP address blocks: 2a13:ef43:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:08:cf:b9:65:aa:12:04:37:a7:34:c5:9f:ff:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 8 15:25:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73d9c16d7d5104207c77af742dfe0a40edeb1297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:90:d9:32:91:8b:50:be:94:0f:05:13:7d:
e2:41:e3:fe:54:d7:38:c8:5b:80:5d:43:83:b2:1e:
80:b2:6d:5c:c2:51:8e:ef:26:77:af:7c:36:db:58:
fc:2e:c9:ed:2a:b8:74:92:2c:4c:f2:0a:a1:f7:bb:
82:2d:6c:14:e1:dd:44:ea:c8:94:d4:e2:7c:4e:98:
9f:06:51:40:24:52:5f:cf:bd:93:26:2c:17:ee:d7:
ed:93:32:4e:be:ae:64:df:29:a4:16:57:e3:06:16:
7f:1c:74:eb:08:17:7c:2f:ce:89:ff:d0:d8:9b:b2:
da:7c:6a:13:21:4a:e7:f6:c7:83:07:58:79:61:2b:
46:79:08:fa:1c:60:47:96:af:6a:e7:41:64:87:a6:
a7:52:46:e1:68:19:83:2c:15:25:d6:43:df:7e:64:
cd:e0:70:7b:f8:43:bf:f4:84:d2:9e:8d:b1:34:f8:
72:b8:5d:b6:e6:f6:5a:a5:a3:51:16:3b:d1:cb:1b:
d0:c1:02:8c:cc:6b:44:07:44:0d:0f:4f:6a:53:11:
e9:f8:fc:54:af:4f:6e:08:74:f5:87:59:e9:ff:d8:
ba:73:ad:53:4d:04:69:f0:e3:64:c8:38:1a:a1:64:
71:7c:31:eb:4f:06:46:b4:0f:92:1d:15:3a:a4:b1:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:C1:6D:7D:51:04:20:7C:77:AF:74:2D:FE:0A:40:ED:EB:12:97
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/c9nBbX1RBCB8d690Lf4KQO3rEpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef43:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
01:6e:a2:b6:62:43:dc:a2:c8:49:09:80:32:f3:54:0b:4d:fb:
63:93:82:99:5c:6c:f5:fa:bf:f3:d0:ca:b0:51:c6:91:d8:15:
62:e3:e3:41:c2:44:c2:4a:10:cf:a3:8b:12:be:37:57:0e:60:
01:12:22:89:e2:46:70:72:ec:91:7d:b0:86:95:b2:40:3b:a3:
70:df:ba:5c:2b:a6:73:fd:2a:16:6c:2c:c1:9d:45:d2:dc:56:
be:c2:55:21:a6:94:ef:17:8d:28:63:66:90:2b:ac:b0:a4:d4:
ac:91:1c:82:76:ed:00:86:28:3b:c1:b9:46:2b:94:e6:3a:09:
b4:3a:70:31:f4:84:74:22:d1:f1:e0:6e:58:97:15:f9:e3:10:
60:10:5e:30:4c:7d:7c:99:b3:a4:af:9a:da:65:3a:b5:c8:73:
f8:ef:40:93:85:16:ef:f7:5a:9b:34:23:0c:ff:9f:b4:42:fa:
52:fc:70:ca:56:86:d5:26:34:4f:13:4c:98:7b:be:71:3d:36:
cc:33:59:54:93:b5:87:c2:42:31:b7:ee:ae:b9:47:fe:50:f3:
ff:05:72:86:95:2a:3d:c3:d3:1a:6e:19:b4:41:09:67:02:00:
7f:d4:e6:12:f1:ce:94:62:8a:d4:86:ce:76:f1:60:7d:10:40:
89:de:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org