Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/VEwZJodEakKICJm8TUoVH26AN-A.roa
File: VEwZJodEakKICJm8TUoVH26AN-A.roa (raw, json)
Hash identifier: rQrR59m0qsZheC+BqYf2Clpe+r0mBApWEVNcdBhjlgE=
Subject key identifier: 54:4C:19:26:87:44:6A:42:88:08:99:BC:4D:4A:15:1F:6E:80:37:E0
Certificate issuer: /CN=c0a40ef08447b1e28445e4414523c51957298c2d
Certificate serial: 01857079B1BD1931D24892C8F07829FB636B
Authority key identifier: C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/VEwZJodEakKICJm8TUoVH26AN-A.roa
Signing time: Mon 02 Jan 2023 03:15:01 +0000
ROA not before: Mon 02 Jan 2023 03:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202413
IP address blocks: 2a07:cd40:1ab5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b1:bd:19:31:d2:48:92:c8:f0:78:29:fb:63:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a40ef08447b1e28445e4414523c51957298c2d
Validity
Not Before: Jan 2 03:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=544c192687446a42880899bc4d4a151f6e8037e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:68:5f:c8:7c:41:84:04:d8:b3:b5:68:cf:
bc:32:16:93:96:24:e7:97:ea:18:05:8c:a1:26:ee:
50:e7:2a:cc:91:73:c0:09:7f:1d:76:6d:19:16:ed:
b7:5d:ee:e0:2f:66:50:bf:df:9b:59:33:44:b4:0b:
14:19:cb:3c:d7:9c:ac:23:ba:41:b4:a2:75:da:0d:
91:bd:10:60:51:22:70:07:a5:c1:67:2f:23:95:85:
04:37:a7:a6:da:19:4c:a0:32:a0:8c:20:8d:cc:3d:
4f:9e:b7:94:15:c5:60:39:61:e0:36:73:02:17:c6:
0c:cf:ce:a0:bb:46:90:93:06:8e:de:1e:c8:a4:72:
78:6c:ce:eb:3f:c0:7e:dd:84:95:0c:fa:81:83:14:
cc:80:a5:c4:ac:a7:c9:11:07:55:a7:22:55:57:17:
97:13:6a:ff:0b:42:83:de:93:79:c9:b8:78:66:b7:
51:59:4d:b0:7a:97:ec:8b:27:0d:f4:d5:ee:e0:92:
10:f5:20:7c:d9:d3:77:3c:5a:ae:66:24:8c:34:78:
a5:b8:95:3b:51:4f:df:21:67:ac:63:54:18:23:9e:
59:dc:4e:20:f0:60:3a:01:85:1c:9c:65:87:5e:1a:
03:aa:72:95:19:2f:f8:2f:6e:f1:19:ad:c9:02:48:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4C:19:26:87:44:6A:42:88:08:99:BC:4D:4A:15:1F:6E:80:37:E0
X509v3 Authority Key Identifier:
keyid:C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/VEwZJodEakKICJm8TUoVH26AN-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/wKQO8IRHseKEReRBRSPFGVcpjC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:cd40:1ab5::/48
Signature Algorithm: sha256WithRSAEncryption
16:02:4a:e6:7f:98:80:21:52:e5:0c:16:4b:cb:1f:30:3a:90:
cf:a2:61:96:d1:31:21:06:e7:bd:97:f6:23:d7:f5:6f:08:b1:
1a:15:74:49:aa:40:4b:e2:09:3a:d6:50:20:fc:0d:38:e5:9e:
90:5c:f4:2b:7c:08:b9:ea:bc:83:97:0e:63:8b:81:0b:0d:83:
c0:ee:a5:0f:f0:83:7e:f0:8e:a6:bc:6a:a5:a2:35:b9:1e:13:
bf:60:51:d9:fb:42:b9:b5:bf:b7:35:54:70:78:54:b1:2c:69:
01:e7:37:8d:72:13:35:a3:d1:74:23:3f:20:f3:12:01:c5:d0:
22:d5:9a:51:d3:78:88:2a:18:84:0e:6c:ec:55:8f:15:0a:37:
a7:af:02:32:6b:8e:87:97:db:2e:5f:be:ec:63:81:d5:c2:68:
45:65:6d:d1:8e:c8:89:c7:dc:49:96:01:ce:5d:70:dd:fd:33:
dd:37:e5:a4:96:e2:87:f5:2c:25:01:7c:76:0c:17:ef:a6:02:
b9:2b:a7:bb:15:43:99:94:8b:3e:20:35:b3:f8:db:61:e6:28:
47:51:0a:ca:47:6c:0a:11:11:dc:7d:a3:87:cf:03:41:8a:de:
ca:23:85:c6:76:20:e4:20:46:41:38:50:32:af:54:7e:2d:33:
c6:70:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:51 2024 by rpki-client on console-ams.rpki-client.org