Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/waZKZl1K33WIm0XFmYhsE9Ajnqw.roa
File: waZKZl1K33WIm0XFmYhsE9Ajnqw.roa (raw, json)
Hash identifier: xwJoBWkM310/K/r3xDy2sPvBOGkQdRrDUlp2noTSvqI=
Subject key identifier: C1:A6:4A:66:5D:4A:DF:75:88:9B:45:C5:99:88:6C:13:D0:23:9E:AC
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C40A5C544528764D4A45CE3286024C5AF
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/waZKZl1K33WIm0XFmYhsE9Ajnqw.roa
Signing time: Wed 06 Dec 2023 19:40:54 +0000
ROA not before: Wed 06 Dec 2023 19:40:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 2a13:ef41:e000::/35 maxlen: 48
2a13:ef45::/32 maxlen: 48
2a13:ef44:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:a5:c5:44:52:87:64:d4:a4:5c:e3:28:60:24:c5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 6 19:40:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1a64a665d4adf75889b45c599886c13d0239eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:bf:04:1e:5b:ed:15:54:44:d2:c7:37:11:
26:1c:57:06:ba:53:74:fc:28:ec:0c:8e:07:b8:dc:
cf:3f:7f:b3:e7:92:4d:91:a2:af:f1:c6:12:6f:ea:
cf:39:d5:93:68:9c:98:63:57:55:8a:02:f4:de:3d:
a3:ee:51:83:ce:3a:11:63:35:ea:aa:63:c0:76:7e:
35:86:d1:45:3d:fd:fe:ae:2a:63:78:01:7d:36:f6:
71:b4:ec:32:83:5b:80:b6:08:6f:dc:6c:4c:b4:42:
8b:d5:32:32:ae:6b:55:2e:d0:60:28:70:29:15:4f:
7d:31:52:e5:1a:29:29:c5:34:ad:7d:00:e0:9d:9c:
ea:66:9f:11:a2:19:32:25:05:c6:c4:b7:37:54:de:
e1:aa:b9:49:f6:a2:9d:ba:8a:ed:32:3a:c7:8c:16:
28:3f:73:2b:bf:3e:d6:91:aa:36:ad:89:c4:1b:51:
9f:3d:f1:44:1c:eb:4a:dc:a6:43:53:c9:95:3c:ff:
68:d8:19:9d:d0:31:9b:69:2b:b0:49:68:59:a5:08:
53:65:5f:c3:74:8f:5a:db:77:4b:f3:67:04:d6:f8:
60:23:b0:b2:2e:81:da:f1:5f:fe:c8:04:c0:6f:b3:
6e:10:10:0c:91:4e:d6:9f:7d:90:05:0e:4b:d6:cf:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A6:4A:66:5D:4A:DF:75:88:9B:45:C5:99:88:6C:13:D0:23:9E:AC
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/waZKZl1K33WIm0XFmYhsE9Ajnqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef41:e000::/35
2a13:ef44:b00b::/48
2a13:ef45::/32
Signature Algorithm: sha256WithRSAEncryption
71:d2:36:99:58:41:cd:34:e9:80:54:81:5e:c1:a9:fd:2a:69:
e3:bc:6f:95:5c:64:06:cd:2a:ca:32:86:99:15:7d:32:7f:21:
d6:dc:ca:82:77:f1:4b:5b:a3:2f:28:54:46:31:e8:ab:7d:44:
b3:7f:dc:e9:dd:9c:59:e3:bc:33:ed:39:b1:1f:0d:f4:13:aa:
c1:84:eb:7f:63:f2:d0:01:36:80:15:59:65:dd:10:b7:ff:b8:
de:a7:30:18:02:63:71:d1:29:4b:34:95:39:68:b1:3d:fe:ab:
b0:77:c8:43:6c:57:8a:29:66:0f:97:94:f2:b9:94:6f:ea:4a:
16:7c:4d:82:ce:44:85:3e:f2:f2:b4:e5:ef:ad:b4:0b:f8:e4:
e5:1c:a5:03:10:2e:33:fa:3e:9b:87:4b:53:aa:51:0c:08:9a:
22:87:2e:44:37:97:ce:41:0a:6a:94:85:ce:50:bb:e1:c3:07:
70:d4:b9:27:b9:60:0a:2b:1e:b2:8d:9f:4d:b3:fb:29:a3:fb:
16:91:29:7f:b2:5f:df:3b:17:d1:1f:67:a5:63:04:3b:65:5a:
bf:0d:67:3a:df:a7:27:73:1c:9f:27:8c:e6:5e:02:9e:d8:1a:
6e:81:71:44:5a:30:32:5f:db:e3:ec:c3:69:29:6b:81:40:b8:
5f:8e:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org