Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/vCgsNewmSOPSOvoUSRaEMiV1RpE.roa
File: vCgsNewmSOPSOvoUSRaEMiV1RpE.roa (raw, json)
Hash identifier: TSNAyUCpv/fPNBlPtyITO6FFi680NCqdG1KCswSpE50=
Subject key identifier: BC:28:2C:35:EC:26:48:E3:D2:3A:FA:14:49:16:84:32:25:75:46:91
Certificate issuer: /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial: 0182A0A9BF6C94BA59AE1BA5826F7C4F760F
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/vCgsNewmSOPSOvoUSRaEMiV1RpE.roa
Signing time: Mon 15 Aug 2022 08:40:55 +0000
ROA not before: Mon 15 Aug 2022 08:40:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203629
IP address blocks: 2a0c:77c3::/32 maxlen: 32
2a0c:77c5::/32 maxlen: 32
2a0c:77c7::/32 maxlen: 32
2a0c:77c1::/32 maxlen: 32
2a0c:77c0::/29 maxlen: 29
2a0c:77c4::/32 maxlen: 32
2a0c:77c2::/32 maxlen: 32
2a0c:77c0::/32 maxlen: 32
2a0c:77c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a0:a9:bf:6c:94:ba:59:ae:1b:a5:82:6f:7c:4f:76:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Validity
Not Before: Aug 15 08:40:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc282c35ec2648e3d23afa144916843225754691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:35:7b:78:e6:70:26:30:b3:86:c1:55:26:
57:e6:a9:ae:4b:ab:7c:a4:3f:d2:69:a3:33:31:24:
e0:8d:ad:0f:32:88:aa:1f:65:a0:a5:c6:94:10:75:
b7:c1:b5:56:20:53:15:7e:49:f9:11:33:26:36:91:
0a:03:9d:92:87:7f:96:d0:76:45:16:3e:bf:ed:a8:
0e:2c:2a:02:24:f7:79:d6:e3:98:76:5a:e8:cf:04:
20:d4:77:b3:85:5d:89:c8:0a:69:77:c1:f7:be:9d:
3c:5f:e9:49:39:78:3d:5a:00:32:75:ad:f1:39:c8:
b4:05:7b:f5:df:64:22:cb:3b:b0:80:f2:25:10:8a:
41:87:69:b2:9a:62:b5:3f:d5:18:e0:93:65:91:2e:
7a:76:76:d7:6e:cf:70:d3:81:d6:63:c7:07:70:e9:
f0:8e:ef:e8:1a:04:6f:52:cc:e3:47:29:7c:3f:e9:
71:98:07:ff:1a:42:08:16:2b:71:a3:82:be:9f:83:
a9:ab:da:a7:ae:db:fd:76:d6:3d:64:c0:31:4b:94:
f9:39:74:2a:4b:b4:67:b2:3e:75:ce:a8:8f:34:79:
5d:5f:d3:bf:2d:92:0a:a4:06:6a:30:e5:1a:f8:20:
03:f3:a4:27:10:5a:2d:9d:a1:81:7a:92:8b:46:6b:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:2C:35:EC:26:48:E3:D2:3A:FA:14:49:16:84:32:25:75:46:91
X509v3 Authority Key Identifier:
keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/vCgsNewmSOPSOvoUSRaEMiV1RpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:f2:2b:ca:63:a7:45:56:6c:d9:2e:b3:03:05:bf:b9:57:4a:
ad:39:1d:ac:d2:c1:72:58:6e:f3:35:39:64:32:46:2b:49:00:
1d:d2:4e:4a:ef:9f:68:6f:0e:e7:93:15:0f:53:e8:43:15:de:
da:b1:4c:66:81:90:29:d4:13:42:be:8b:95:dc:a5:92:6d:00:
70:b2:59:9e:e6:9e:10:94:21:d2:4f:0f:62:5c:c0:5f:3e:cf:
02:7f:9b:63:bb:29:b4:a9:10:af:88:b9:09:ef:6e:a8:e4:5e:
68:4e:bf:95:cd:12:a4:b1:90:7a:99:96:3f:9a:33:3f:d4:1c:
fc:79:c8:c5:b3:f9:88:91:c0:73:77:7b:f4:c0:fe:00:fc:89:
4b:f0:1c:01:92:81:eb:c6:75:06:69:4b:2f:a3:a3:7d:2b:3c:
b1:42:54:e9:12:44:1e:fe:f9:c2:94:2a:21:71:15:1e:9b:63:
2c:d2:88:5c:74:79:19:95:59:8f:c4:cf:71:63:92:85:d2:ef:
6e:da:fa:9e:b4:3d:60:6a:51:c4:85:c8:4d:56:a0:62:98:de:
7e:ff:77:6b:0a:1a:f4:e3:8b:53:c6:e6:ee:4d:30:87:72:92:
10:39:a5:7a:3a:d8:2f:21:6e:89:01:c7:62:3d:e0:81:d3:a6:
2c:d7:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org