Route Origin Authorization
$ rpki-client -vvf rpki.xa.wiki/repo/AXNETS-CA/1/326130613a363034343a376130303a3a2f34302d3438203d3e20323134333434.roa
File: 326130613a363034343a376130303a3a2f34302d3438203d3e20323134333434.roa (raw, json)
Hash identifier: 7EG7NJq0wJ0POVBFItRKlb3sH+3oZaQITBPwSmK7FTA=
Subject key identifier: F6:CC:89:CC:F9:55:79:E5:C3:62:DD:DA:E2:6F:19:DE:46:90:5C:8B
Certificate issuer: /CN=3073BED8ADF785ABB31D49FB9E84FDB524550720
Certificate serial: 01CE3967F6948F8329359ACD7307FCD52679B3FA
Authority key identifier: 30:73:BE:D8:AD:F7:85:AB:B3:1D:49:FB:9E:84:FD:B5:24:55:07:20
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/3073BED8ADF785ABB31D49FB9E84FDB524550720.cer
Subject info access: rsync://rpki.xa.wiki/repo/AXNETS-CA/1/326130613a363034343a376130303a3a2f34302d3438203d3e20323134333434.roa
Signing time: Thu 19 Sep 2024 13:22:08 +0000
ROA not before: Thu 19 Sep 2024 13:17:08 +0000
ROA not after: Thu 18 Sep 2025 13:22:08 +0000
asID: 214344
IP address blocks: 2a0a:6044:7a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ce:39:67:f6:94:8f:83:29:35:9a:cd:73:07:fc:d5:26:79:b3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3073BED8ADF785ABB31D49FB9E84FDB524550720
Validity
Not Before: Sep 19 13:17:08 2024 GMT
Not After : Sep 18 13:22:08 2025 GMT
Subject: CN=F6CC89CCF95579E5C362DDDAE26F19DE46905C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:b5:02:3b:71:82:52:c3:41:d2:05:72:5d:
11:14:ab:63:8e:5e:9b:a8:1f:a7:63:27:d6:90:d7:
fe:e8:49:b3:8d:c7:87:8a:b5:78:ff:db:5c:a7:44:
60:c4:ed:89:e9:09:3c:39:ce:fe:79:69:b8:31:b6:
19:e6:5e:76:00:40:f7:e4:64:2d:19:34:92:8f:e1:
b0:27:60:20:b0:ad:d1:59:6c:8d:8d:ae:15:e9:6f:
51:63:a5:9d:1c:51:02:34:8d:cc:f2:d0:db:ee:42:
f2:95:95:46:d3:ae:f1:10:c6:9e:31:f2:18:8b:4e:
08:23:f0:f3:82:81:bd:5f:a4:33:d5:e3:c6:6b:45:
34:04:24:bd:7e:db:a8:d6:1f:30:58:eb:6a:99:83:
a1:0a:dd:89:7d:76:04:a3:40:f0:fd:76:95:46:53:
85:b6:15:93:d0:61:b5:5f:84:21:23:38:d5:0f:fa:
7c:e2:a6:40:d0:f3:5e:57:97:7d:8b:a3:1d:ac:99:
65:31:4d:35:12:7e:9f:6c:b3:5c:0d:4b:85:d1:7c:
fb:c3:d2:7b:af:9e:f3:72:cc:f4:a7:e7:45:a9:18:
97:4d:36:d6:08:d9:38:a1:cd:07:0f:5a:e4:68:62:
f3:66:ee:aa:b3:22:17:41:29:e5:2f:68:76:35:ba:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:89:CC:F9:55:79:E5:C3:62:DD:DA:E2:6F:19:DE:46:90:5C:8B
X509v3 Authority Key Identifier:
keyid:30:73:BE:D8:AD:F7:85:AB:B3:1D:49:FB:9E:84:FD:B5:24:55:07:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/1/3073BED8ADF785ABB31D49FB9E84FDB524550720.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/3073BED8ADF785ABB31D49FB9E84FDB524550720.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/1/326130613a363034343a376130303a3a2f34302d3438203d3e20323134333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7a00::/40
Signature Algorithm: sha256WithRSAEncryption
19:d3:53:2e:0a:ad:2c:52:6d:87:42:50:63:f1:50:b6:42:13:
b5:6d:37:8d:01:01:9e:bc:e4:47:13:cb:40:40:7f:0b:6d:83:
6d:e5:2f:17:ad:d1:a6:e1:9e:94:3b:5f:7d:36:0e:7f:c4:aa:
e5:8b:81:c5:6c:3d:2c:84:f4:a1:70:65:66:56:fe:6a:1b:8a:
ae:03:f5:6b:36:c0:92:be:29:e2:86:a9:75:2e:37:5b:d6:bd:
30:0c:a6:89:63:54:1f:88:13:05:5a:75:ff:5d:97:74:f1:9e:
31:12:98:d5:c7:88:d8:1c:70:12:76:56:86:98:4f:9f:cb:d5:
22:76:53:75:56:75:15:8e:4a:4f:61:a3:a2:e8:a0:53:17:3c:
2e:04:60:d4:eb:c1:ff:22:82:bc:e7:9f:7d:27:4d:08:14:af:
df:0f:5d:ed:61:3b:72:26:1a:5f:15:d5:84:52:07:82:d1:53:
42:db:6e:a9:ec:2d:46:40:f3:ef:d1:f1:57:6d:1d:1e:22:03:
97:46:2a:72:64:dd:b3:0e:68:c4:5e:bf:98:5a:15:be:b8:89:
39:b6:f6:f7:8f:4d:ca:e8:c3:13:d9:66:fa:ef:c3:89:4c:93:
b7:a5:36:6a:a2:24:9d:19:7b:2b:24:63:dd:95:f3:51:ab:f8:
99:db:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:13:30 2024 by rpki-client on console.sobornost.net