Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/VINObDa5ChmXcu_3u_P0I9yA6EM.roa
File: VINObDa5ChmXcu_3u_P0I9yA6EM.roa (raw, json)
Hash identifier: vS+BlYxakuii24VeS5M6FhOavIvoz9+ep03fEwCNe94=
Subject key identifier: 54:83:4E:6C:36:B9:0A:19:97:72:EF:F7:BB:F3:F4:23:DC:80:E8:43
Certificate issuer: /CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Certificate serial: 0188950C87158D8A009E5C9E57C677AD4FF9
Authority key identifier: 5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/VINObDa5ChmXcu_3u_P0I9yA6EM.roa
Signing time: Wed 07 Jun 2023 08:50:06 +0000
ROA not before: Wed 07 Jun 2023 08:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56796
IP address blocks: 2001:678:a80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:0c:87:15:8d:8a:00:9e:5c:9e:57:c6:77:ad:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Validity
Not Before: Jun 7 08:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54834e6c36b90a199772eff7bbf3f423dc80e843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:22:bd:af:13:3d:dd:b1:77:9e:2a:b7:87:
6c:ec:c6:66:dd:6d:81:60:0f:ac:a2:05:b9:19:a0:
2e:60:85:2c:c5:f2:91:da:19:81:0b:57:3f:e6:fe:
fe:aa:47:62:78:13:bf:54:91:1f:50:ef:86:49:c6:
6d:b2:3e:be:6e:6b:2a:63:d8:42:8d:d3:d7:32:86:
d9:49:48:87:59:2d:1c:b5:22:2f:3d:cd:98:cc:fc:
30:5a:66:30:41:f5:24:7a:05:3e:84:d4:b0:35:78:
56:26:7e:42:10:58:18:04:ce:ea:75:82:6c:33:37:
81:5d:62:7b:60:ed:24:10:79:f3:8e:62:62:35:f1:
9a:1f:f8:9c:6f:2d:11:cb:7b:21:ad:03:b7:7f:18:
32:5a:88:0a:18:13:e3:7d:5c:b3:69:5f:e4:73:2a:
07:46:57:03:62:7a:ed:bb:39:a3:1b:b5:14:e3:33:
cd:1d:20:85:f2:ee:1f:1a:ef:bf:a3:91:d9:0f:4c:
72:1a:3c:8e:50:ed:9c:c9:f9:4e:12:29:66:88:b6:
43:27:55:c3:78:d5:11:dd:6f:a8:54:3f:49:29:ec:
c4:2c:8a:c2:18:89:7b:5e:e5:45:c4:c9:95:67:a4:
0f:37:46:4f:9a:9f:91:1a:07:5d:2e:57:d0:0e:91:
6c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:83:4E:6C:36:B9:0A:19:97:72:EF:F7:BB:F3:F4:23:DC:80:E8:43
X509v3 Authority Key Identifier:
keyid:5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/VINObDa5ChmXcu_3u_P0I9yA6EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a80::/48
Signature Algorithm: sha256WithRSAEncryption
ad:1a:74:db:83:92:f2:65:74:f1:05:24:41:9e:82:6a:01:16:
46:4b:f7:3e:66:7a:a2:17:e6:9f:25:58:8c:ba:54:cd:5f:46:
6f:19:e0:1e:f5:59:80:f6:df:ab:b9:89:b8:95:93:1b:92:c0:
70:71:16:10:07:de:5f:ac:fd:1d:5e:a6:6e:65:0a:0b:31:b4:
9a:1c:26:fa:3e:ca:70:3d:4c:24:dc:b5:57:61:4c:79:c9:4a:
6b:5d:56:22:fc:4e:02:24:82:de:9a:b2:c7:58:6d:f9:74:c8:
22:1e:50:64:5d:ec:af:b5:ce:01:38:79:10:46:10:c0:33:3e:
f0:bf:86:e3:cb:47:97:0e:0e:f7:49:6d:7d:21:76:fd:57:d3:
67:09:05:e4:36:f9:4a:50:3b:9b:d2:cd:d7:f5:ff:74:35:60:
88:0f:f8:bc:bc:87:65:a9:65:d0:99:22:af:17:b2:1c:c0:96:
cb:89:2a:46:1e:88:72:2e:91:19:df:70:bb:4f:2e:d6:f3:be:
7d:05:0a:f7:22:cd:c8:6a:ab:3a:20:96:b4:9d:ec:0f:d4:f5:
32:39:62:39:18:0f:44:e3:7d:87:58:cf:3b:1a:f0:46:e9:50:
fe:89:55:7e:dc:90:a4:79:5c:54:d9:78:74:be:6d:7b:bb:c2:
41:20:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:39 2024 by rpki-client on console-ams.rpki-client.org