Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/5-VOSZhsAotBbI7x9KPs2p9YRwU.roa
File: 5-VOSZhsAotBbI7x9KPs2p9YRwU.roa (raw, json)
Hash identifier: ueCM+3hcf0OXE7PKKDzty4m/acRO7vQ80iAJYxozMr0=
Subject key identifier: E7:E5:4E:49:98:6C:02:8B:41:6C:8E:F1:F4:A3:EC:DA:9F:58:47:05
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01857246B7862AE228C3C126C236E9826C51
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/5-VOSZhsAotBbI7x9KPs2p9YRwU.roa
Signing time: Mon 02 Jan 2023 11:38:35 +0000
ROA not before: Mon 02 Jan 2023 11:38:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a10:3e80::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b7:86:2a:e2:28:c3:c1:26:c2:36:e9:82:6c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Jan 2 11:38:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7e54e49986c028b416c8ef1f4a3ecda9f584705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:45:e4:aa:49:d7:e3:c6:74:06:87:71:e3:
92:9a:73:be:a8:e3:fc:cc:77:b4:fd:c8:8e:74:ce:
e9:43:79:3d:c0:59:68:11:a0:1a:cf:e5:78:73:77:
69:93:6a:9d:42:f1:a6:53:f8:d5:95:67:84:a3:aa:
fd:1c:49:fd:6c:36:93:96:0a:e7:99:e5:9e:92:f1:
7d:ba:8f:a8:87:f7:15:ea:cd:94:15:ad:e8:51:bf:
a5:81:79:92:51:e7:98:ba:e5:60:99:62:2b:7c:f3:
8f:43:9f:e8:b9:d8:69:ff:1a:bb:28:22:21:84:28:
e6:aa:3e:91:61:a7:f2:42:83:5b:5c:9b:c8:fb:35:
ff:4c:d1:e3:ae:89:63:09:e4:53:bd:3d:04:6d:fa:
de:1e:56:f5:fd:42:f2:bf:9c:5d:ba:ac:d0:19:08:
c3:eb:bb:fd:10:a0:26:39:aa:be:14:1a:c8:fb:87:
fe:a8:36:5f:2a:43:24:7f:aa:35:8b:df:60:7f:a6:
67:2d:a9:cb:3b:c0:a4:b1:31:b2:29:d5:9e:46:f7:
47:c4:5d:95:3f:89:07:75:27:65:36:92:5a:96:5e:
8c:f5:0b:7a:30:9d:d9:e4:6e:d9:f8:ec:21:66:33:
32:31:4f:62:c4:d6:19:92:23:89:d8:4d:59:dd:36:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:4E:49:98:6C:02:8B:41:6C:8E:F1:F4:A3:EC:DA:9F:58:47:05
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/5-VOSZhsAotBbI7x9KPs2p9YRwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3e80::/30
Signature Algorithm: sha256WithRSAEncryption
53:82:39:8b:a7:38:3f:eb:dd:db:f6:d0:89:c5:1c:90:5f:9e:
8e:a4:0f:d0:11:f5:8e:bb:f7:bc:2f:29:b7:b7:bb:ac:67:a8:
8e:8a:eb:12:ab:09:14:0e:92:18:8b:50:49:23:e5:d2:a2:6c:
6e:66:5c:cb:19:aa:31:aa:1f:53:ed:6d:85:36:84:ed:21:b4:
ce:49:06:f3:64:56:45:62:e7:7b:cf:27:cd:ab:28:4a:71:bd:
a2:55:7e:31:9e:56:ff:60:e9:99:cd:dc:f6:79:fe:58:ea:67:
2c:d7:a1:e1:3c:01:59:af:ab:41:36:09:68:b0:9c:fc:68:6d:
b8:ca:c5:2a:86:bf:bf:eb:01:b3:7c:74:55:60:de:b8:00:1d:
e1:92:0d:ef:8b:a4:a5:44:8a:73:00:07:6c:af:a6:79:23:22:
8f:ce:f4:68:c8:c6:fc:15:c2:99:4f:58:b4:eb:c6:89:7b:22:
6f:e8:ce:71:90:3a:e5:c3:20:52:97:47:e4:e4:97:0c:f4:b6:
9e:c1:b8:50:51:b3:c3:cc:d2:c7:3f:c9:9f:b7:8f:17:51:86:
d8:ba:40:ca:3a:c9:88:ff:ac:d5:08:2e:47:ff:08:e0:d7:d0:
a4:e6:10:de:16:6c:37:2a:68:79:08:c6:a1:c5:cc:7d:d1:3a:
09:9e:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org