Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/wdfbbdV_ZCid8ZgFV8w0xPkkIxc.roa
File: wdfbbdV_ZCid8ZgFV8w0xPkkIxc.roa (raw, json)
Hash identifier: Za9F+rgMmnktksyUBVC+7Y4NuQlWXFXNXfefqcwUQ8g=
Subject key identifier: C1:D7:DB:6D:D5:7F:64:28:9D:F1:98:05:57:CC:34:C4:F9:24:23:17
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018BEDC6A99A8F19592514629A67935C4DE8
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/wdfbbdV_ZCid8ZgFV8w0xPkkIxc.roa
Signing time: Mon 20 Nov 2023 17:28:21 +0000
ROA not before: Mon 20 Nov 2023 17:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215978
IP address blocks: 2a13:ef41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:c6:a9:9a:8f:19:59:25:14:62:9a:67:93:5c:4d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Nov 20 17:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1d7db6dd57f64289df1980557cc34c4f9242317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:91:ed:79:51:ed:e4:ec:00:e6:6c:f0:93:
11:b3:98:b2:ba:66:f5:76:36:6b:f8:4d:6f:b7:d7:
b4:e5:e7:dd:13:d5:ee:90:4e:29:bd:81:bd:5a:e5:
14:12:9a:a2:f2:46:23:20:6a:5d:5b:b9:1f:d1:0d:
61:fb:dc:50:f5:2b:c3:1a:52:a5:c4:3f:c2:f1:3d:
87:42:6c:af:fa:20:ba:f0:4d:0a:bb:10:c1:dc:24:
43:3b:6f:73:51:a8:e5:1b:b3:b7:4c:d5:08:55:69:
8f:2c:1e:70:3f:cc:5c:a9:8c:ce:70:20:b2:b5:e4:
29:c5:29:f7:80:ab:28:6e:de:36:02:9e:49:2b:96:
67:b8:5b:47:d8:27:28:5d:28:52:f4:31:6f:af:c7:
58:72:36:06:3c:5e:d9:e7:59:d5:19:5c:3b:92:2f:
4a:7a:57:9f:32:97:8d:b4:e2:b3:40:f3:92:f4:6c:
59:50:30:25:9b:8d:9b:a7:03:bd:f7:97:a1:b8:d3:
44:7b:5e:18:7a:33:cf:bc:1f:22:0a:49:3b:a6:2b:
01:86:3e:41:d2:e2:db:05:f8:9c:64:41:44:86:63:
15:6f:4b:60:8b:69:c4:b1:02:b1:b9:43:b7:32:f9:
52:2c:8c:ca:e2:b2:c3:5d:1f:a4:53:77:40:b8:da:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D7:DB:6D:D5:7F:64:28:9D:F1:98:05:57:CC:34:C4:F9:24:23:17
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/wdfbbdV_ZCid8ZgFV8w0xPkkIxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef41::/32
Signature Algorithm: sha256WithRSAEncryption
9c:c1:0a:84:64:67:08:f3:84:ef:0e:0a:a3:47:8a:5e:97:38:
d8:32:60:50:d2:51:ab:ab:b5:61:0c:ab:c8:01:b6:72:25:58:
0a:b4:b5:f9:59:79:e0:c6:5b:60:7c:31:05:d5:64:b2:16:11:
a6:8b:3b:93:8d:d4:14:98:44:8b:9c:90:fc:61:e2:2c:74:cf:
e0:b5:97:fc:c2:ae:60:99:3c:e0:15:63:3e:bb:4a:38:02:c3:
80:b0:0b:92:16:05:0f:d1:ed:9f:96:04:4e:b6:db:fc:2f:a9:
13:3e:05:60:84:bf:29:b9:4e:20:21:1c:ef:71:b2:9d:b2:b3:
fa:59:b7:5a:dc:40:8f:00:3c:d3:74:3c:9e:cf:0f:d4:20:a9:
9c:4c:52:2c:7e:3c:1d:27:02:b0:25:fd:7b:f7:b1:5e:f7:f1:
10:e3:d6:66:42:1a:95:d7:20:53:1a:f6:58:a4:e3:3e:52:f1:
a1:1b:93:f3:09:24:a6:c1:f4:ec:c0:62:ed:1c:5d:8b:a7:e7:
0d:00:b7:7c:47:47:ee:0f:32:77:94:40:1f:8d:da:2a:2d:a7:
54:cf:d0:24:25:32:95:ba:76:04:6f:25:12:f9:88:86:f7:6e:
ee:61:f5:18:56:48:24:09:1d:38:ca:4d:ec:37:17:06:a7:b0:
14:11:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org