Route Origin Authorization
$ rpki-client -vvf rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538303a353030303a3a2f33362d3438203d3e20323134333434.roa
File: 326131343a373538303a353030303a3a2f33362d3438203d3e20323134333434.roa (raw, json)
Hash identifier: 8+6DNoZtEuZSVKkuqjVnWs3ZNLLkvMGgkFN9dnweazU=
Subject key identifier: 20:66:71:3E:F5:DC:CA:55:B3:75:B7:22:A2:50:0B:D9:CC:F4:D4:BD
Certificate issuer: /CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
Certificate serial: 2435217DF59C396B568DCA41117B1F3B217938F6
Authority key identifier: 17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer
Subject info access: rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538303a353030303a3a2f33362d3438203d3e20323134333434.roa
Signing time: Thu 19 Sep 2024 13:22:18 +0000
ROA not before: Thu 19 Sep 2024 13:17:18 +0000
ROA not after: Thu 18 Sep 2025 13:22:18 +0000
asID: 214344
IP address blocks: 2a14:7580:5000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:35:21:7d:f5:9c:39:6b:56:8d:ca:41:11:7b:1f:3b:21:79:38:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
Validity
Not Before: Sep 19 13:17:18 2024 GMT
Not After : Sep 18 13:22:18 2025 GMT
Subject: CN=2066713EF5DCCA55B375B722A2500BD9CCF4D4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:bd:8d:28:be:ac:dd:4b:bf:4d:8b:1a:ab:
19:54:78:c4:de:65:16:9f:94:f3:dd:89:7c:8c:fb:
83:0c:60:af:9b:9c:39:b9:3d:4b:0b:98:79:30:95:
fb:7f:a2:e2:4d:f7:23:3d:30:5a:ef:23:b2:43:c4:
e1:45:22:72:7a:0c:07:0f:d3:23:7b:90:60:91:43:
31:70:bf:bd:3d:d9:e4:fa:c6:7c:e0:71:b2:74:87:
96:ef:42:93:76:9c:21:04:b8:e7:e6:7d:72:3b:c2:
90:d3:03:aa:12:e1:84:09:88:02:f6:41:5e:95:ba:
8a:fe:98:c5:95:aa:03:32:b6:8c:c3:4d:43:8d:96:
cb:63:1d:2b:56:af:5d:07:91:77:79:39:75:41:f0:
d5:08:02:75:df:93:1a:c7:a7:f5:e4:ef:ee:e0:49:
ab:d0:d7:2e:21:f9:af:99:b3:ac:db:42:bb:c6:d3:
d3:58:b8:53:7e:f0:b3:3b:8c:da:5d:f0:ab:2d:55:
84:49:9b:56:a8:14:dd:a3:7c:7e:b9:0b:2f:de:cc:
a8:a1:c1:d1:d7:16:5a:73:65:04:9a:65:86:f4:75:
3b:79:d6:8a:a4:bf:5f:fc:ec:cd:51:38:75:32:23:
db:0e:31:cd:c9:8a:c3:66:ec:13:e8:26:54:86:43:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:71:3E:F5:DC:CA:55:B3:75:B7:22:A2:50:0B:D9:CC:F4:D4:BD
X509v3 Authority Key Identifier:
keyid:17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538303a353030303a3a2f33362d3438203d3e20323134333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5000::/36
Signature Algorithm: sha256WithRSAEncryption
28:ba:0b:9e:56:6f:5c:41:1a:60:c5:c6:91:d5:55:03:33:ff:
ff:61:83:b2:f2:77:35:6d:3b:54:68:8d:9f:ac:e5:9c:8b:98:
df:23:71:f5:08:36:75:6e:1b:d7:57:60:43:de:79:9b:63:ab:
ff:7b:ec:ca:45:2e:1e:7e:d4:d3:0b:c4:91:bb:01:5b:f8:9a:
57:53:90:be:38:99:0c:76:a5:b1:5b:6a:e8:a2:04:3c:32:fd:
09:77:38:86:e6:0e:7f:83:31:b5:64:42:fb:73:e8:a4:06:bb:
b3:51:95:3e:5e:30:16:84:4b:49:6a:e8:1c:ad:72:88:ca:b9:
3a:fc:d9:ce:ae:38:00:1a:a2:d1:44:41:f1:78:4d:ee:47:57:
65:b6:7f:18:15:c7:2f:2f:96:09:b4:00:6b:51:8a:4a:38:2f:
7c:07:85:06:f6:46:92:aa:d1:a6:42:03:b5:48:24:57:4f:d9:
68:59:ab:10:c7:41:5a:07:bf:15:cc:46:e8:7b:9d:80:55:2f:
cf:11:25:43:4e:49:bc:e8:f8:0f:23:9d:e5:2c:68:79:88:41:
52:6a:5c:58:82:65:79:98:89:b7:e8:83:3a:e1:98:74:55:e8:
98:8f:31:8b:67:d1:b8:c5:20:1d:b2:f7:aa:20:69:9a:5c:1f:
be:ca:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:13:30 2024 by rpki-client on console.sobornost.net