Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/VhpE4kdhadPHeJyBaXosoJyuClk.roa
File: VhpE4kdhadPHeJyBaXosoJyuClk.roa (raw, json)
Hash identifier: WL/4BV4v3OxzOLVJCkRLyfU6r6/N/7yK26cBndSQXIM=
Subject key identifier: 56:1A:44:E2:47:61:69:D3:C7:78:9C:81:69:7A:2C:A0:9C:AE:0A:59
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 018A8E537AB75BF1CF3FFA8983DC187857CA
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/VhpE4kdhadPHeJyBaXosoJyuClk.roa
Signing time: Wed 13 Sep 2023 11:35:50 +0000
ROA not before: Wed 13 Sep 2023 11:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216349
IP address blocks: 2a10:3e84::/30 maxlen: 30
2a07:f240::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:53:7a:b7:5b:f1:cf:3f:fa:89:83:dc:18:78:57:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Sep 13 11:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=561a44e2476169d3c7789c81697a2ca09cae0a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:21:af:24:c6:d0:9f:e0:c2:dd:5c:4b:03:
ee:33:65:b2:f6:2c:dc:d4:f7:c1:a9:7a:c2:ae:0f:
19:f8:58:23:01:d7:51:49:46:41:e7:08:21:c7:37:
a8:ac:3c:d2:57:b2:e7:f5:50:02:d6:01:a1:2c:0d:
16:a6:71:fe:10:6b:09:ee:02:35:04:af:a3:89:2f:
59:f3:56:2c:26:4a:e5:72:9a:00:69:da:75:94:43:
51:ee:13:0c:d8:75:19:aa:5e:f5:99:d8:84:2b:c2:
07:13:22:c7:e3:80:6d:85:2c:23:76:74:25:81:a7:
89:03:2d:04:cd:be:c3:0c:60:33:cd:cd:d1:62:1a:
a8:7c:56:10:19:95:33:75:50:9d:63:39:dd:2b:04:
7a:bb:af:4e:80:58:e1:73:06:ae:3e:6e:da:be:81:
a0:e7:0d:3d:50:99:e3:85:36:5a:14:9b:68:9b:46:
ad:c2:78:d1:48:2e:9a:f2:c3:33:cf:5a:05:ff:2e:
3a:4e:f3:97:55:03:69:07:a9:c9:57:2e:51:2f:8c:
58:af:64:0a:d1:c9:70:d2:84:8b:08:87:c2:55:6c:
a3:e7:e8:39:79:ed:de:12:ec:d1:07:b7:e4:ff:f9:
ba:f6:ce:2e:bc:11:f7:62:91:d2:11:cd:ff:57:e4:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:44:E2:47:61:69:D3:C7:78:9C:81:69:7A:2C:A0:9C:AE:0A:59
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/VhpE4kdhadPHeJyBaXosoJyuClk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a10:3e84::/30
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:a4:ad:5b:1c:a6:84:a8:e5:9c:0a:6d:c6:14:6a:25:6d:33:
d7:cf:13:fd:f2:a6:24:5c:79:b8:e0:8e:91:b8:c4:d5:58:06:
7e:6d:5c:74:cd:b5:b6:f4:b9:31:d4:b5:77:d5:53:60:bf:1c:
f8:aa:74:27:48:2c:32:90:48:fd:84:35:d7:ec:8c:a8:16:fe:
f7:68:f2:c5:c0:ef:f2:7e:88:4d:d2:ae:04:70:46:9e:73:77:
0f:86:9c:66:0b:4e:72:aa:91:9b:61:03:33:b4:86:ae:f0:10:
da:a8:15:dc:1d:b2:e4:22:a1:11:06:03:82:f5:87:93:b9:1f:
75:fb:5a:8a:f5:0a:89:53:b2:f6:d1:c7:14:fc:46:64:bb:2b:
78:a6:a8:79:3d:bf:c8:75:40:48:1f:7e:96:c4:dc:15:cc:7b:
ba:20:f7:fc:43:cb:72:68:36:22:43:6d:7f:ea:a2:91:d9:2f:
36:0d:9e:df:bd:a6:56:84:d6:23:c1:17:73:61:81:25:8e:b5:
23:67:e8:f2:46:1e:ca:6d:45:37:2f:da:7e:34:d1:da:be:35:
04:08:ad:37:b5:f7:39:4f:75:aa:08:d0:ec:d1:60:2f:db:2c:
18:bf:04:6b:73:87:61:bf:33:51:36:2c:68:d2:da:d0:37:ab:
3f:81:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org