Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa
File: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (raw, json)
Hash identifier: Ro3pbI2p0ZDJtjLOMHF4khB1v5vC9zs7FMMP7FfVK7g=
Subject key identifier: DD:CC:BA:4A:CF:A8:A2:A2:41:72:1D:EE:A2:6B:2A:C6:17:1E:93:42
Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial: 79CD71D522BE9A2AD1CC4C06D0A30BA68A3D3FFC
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa
Signing time: Sun 24 Sep 2023 18:10:42 +0000
ROA not before: Sun 24 Sep 2023 18:05:42 +0000
ROA not after: Sun 22 Sep 2024 18:10:42 +0000
asID: 202201
IP address blocks: 2a0a:6040:5400::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cd:71:d5:22:be:9a:2a:d1:cc:4c:06:d0:a3:0b:a6:8a:3d:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Validity
Not Before: Sep 24 18:05:42 2023 GMT
Not After : Sep 22 18:10:42 2024 GMT
Subject: CN=DDCCBA4ACFA8A2A241721DEEA26B2AC6171E9342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:45:f2:d1:ab:e9:67:00:52:b3:59:ef:fe:
bc:1c:e7:77:90:fb:50:28:ec:89:b0:e1:e2:ac:63:
a2:fb:cd:df:ce:03:af:cd:da:de:ce:47:8b:f8:41:
dc:f3:cd:4c:9b:09:fb:71:9f:3e:97:47:c6:70:0d:
72:ee:64:37:bf:31:18:1b:db:f9:0c:ac:0c:c6:7f:
dc:99:dd:0a:5b:37:2c:39:74:47:b5:8a:b6:fa:5a:
ce:be:6c:9e:d0:89:02:8a:b3:c7:8b:05:9b:77:f1:
d9:68:65:f6:3d:da:bf:9a:4a:f7:02:eb:6f:a8:a7:
6e:96:b1:41:89:c5:cb:3c:b6:b2:39:c0:a4:a3:0b:
d5:33:76:50:a7:a6:a7:eb:13:69:4e:37:0b:f0:b6:
41:58:01:f9:43:38:f7:fe:e5:7f:8f:3f:8e:2f:4e:
b6:17:20:e0:15:c0:7a:97:72:33:d3:68:34:b8:20:
08:e5:0c:5e:cf:7c:ec:12:a8:22:4a:29:a3:10:41:
43:dd:2e:1d:ed:db:e1:c6:17:db:c4:9c:7e:5b:3e:
ab:62:96:1c:95:86:db:ea:a4:b7:b6:b0:5a:8a:0e:
3f:67:b8:07:8f:66:db:bb:1c:22:c2:99:af:c9:85:
6a:19:f6:03:d0:c1:3f:42:04:b3:27:e7:71:52:06:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:BA:4A:CF:A8:A2:A2:41:72:1D:EE:A2:6B:2A:C6:17:1E:93:42
X509v3 Authority Key Identifier:
keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:5400::/40
Signature Algorithm: sha256WithRSAEncryption
28:bb:0e:14:a1:79:93:88:1a:65:0c:8f:81:d4:8a:bd:60:28:
ca:99:cd:23:85:6c:d9:22:19:d9:cb:cc:a7:51:aa:c2:07:84:
b6:35:f0:31:8e:3f:02:1a:09:98:cb:39:dc:e4:06:e9:03:57:
a5:4a:cd:0c:59:3a:49:fd:26:98:33:29:1a:6d:5c:55:93:8b:
7a:a3:62:18:f0:0a:a0:c9:21:22:ed:5c:27:e9:36:d1:03:4b:
f0:d0:c7:00:ca:1d:9a:29:d5:27:f1:ee:6b:c6:f8:ba:b9:cf:
9e:5f:c9:3d:65:df:54:3f:a2:9a:3b:0c:77:20:c9:cf:de:a9:
b9:97:8e:4d:81:ed:d7:e3:ed:17:a2:38:80:a1:cf:ef:8f:95:
e0:d5:e7:76:b5:a3:2b:cf:ab:14:1b:ce:12:a2:7b:3f:de:77:
af:88:a7:cf:4d:e2:b2:a2:6a:a6:82:ef:2f:9a:2d:c3:d4:2d:
4c:7d:66:9e:ed:43:cc:49:33:7f:02:6b:cc:5a:e3:e3:08:20:
35:40:cc:3d:ae:84:de:fd:3a:0e:a2:47:e7:a1:97:5a:de:3b:
82:90:b1:a1:a5:b4:e3:77:fa:43:b3:99:3d:90:26:45:49:ae:
02:b6:8c:2a:e0:75:b5:77:23:8b:ed:94:fe:c3:df:71:c1:f8:
24:76:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 01:21:52 2024 by rpki-client on console-fra.rpki-client.org