Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313030303a3a2f33382d3438203d3e20323131323732.roa
File: 326131333a646638303a313030303a3a2f33382d3438203d3e20323131323732.roa (raw, json)
Hash identifier: K6b4NOxLvFuNRHLF7yKGVBvLy7YgAHAYTLvrM57zvqM=
Subject key identifier: 96:DE:43:D9:4A:5E:F4:BB:A9:85:55:A0:C1:A6:2A:2B:73:FC:FB:4B
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 37F1BD37E04EA95A87ABC1A1BE9ABEFA59F80285
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313030303a3a2f33382d3438203d3e20323131323732.roa
Signing time: Sun 09 Jul 2023 18:43:46 +0000
ROA not before: Sun 09 Jul 2023 18:38:46 +0000
ROA not after: Sun 07 Jul 2024 18:43:46 +0000
asID: 211272
IP address blocks: 2a13:df80:1000::/38 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f1:bd:37:e0:4e:a9:5a:87:ab:c1:a1:be:9a:be:fa:59:f8:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Jul 9 18:38:46 2023 GMT
Not After : Jul 7 18:43:46 2024 GMT
Subject: CN=96DE43D94A5EF4BBA98555A0C1A62A2B73FCFB4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:15:83:27:66:09:7e:9f:f3:1e:2d:75:70:
76:df:aa:09:4f:ad:13:b4:9a:f1:54:ec:df:19:bb:
5e:9c:3d:7c:24:84:6d:34:9d:e0:b2:ba:ad:01:96:
bc:05:a8:b8:e8:f8:60:0a:d4:c9:e0:26:86:7a:d6:
7c:2b:67:f4:6e:2f:2a:72:cb:86:be:10:5d:b2:6a:
fa:41:c3:c8:f3:40:b7:88:fa:a4:11:34:19:6e:a2:
8f:39:07:56:ff:7a:7c:6e:60:75:eb:31:bf:09:7e:
47:64:d6:f5:1d:9e:0b:a6:40:03:ad:e6:7c:c2:21:
e5:b1:fd:73:ab:13:31:dd:90:fe:a5:82:37:46:8f:
75:10:00:ce:22:2d:ca:19:e6:f1:bb:f9:91:21:9e:
80:9a:63:33:64:95:fb:c3:aa:71:81:97:79:aa:46:
05:65:8b:d1:f5:a6:0d:4c:aa:4f:90:62:bd:e2:6f:
19:1c:ab:5b:c9:71:c1:40:64:03:be:23:cc:e0:be:
9c:3f:b5:3c:90:7b:d0:d7:26:31:cf:30:ee:c2:29:
44:bc:90:7a:85:83:4e:a1:9d:23:f1:21:6b:29:2f:
1e:2b:bd:7d:ef:db:50:5b:5a:40:da:4c:31:a0:e5:
e0:3f:a5:c2:fc:bd:31:51:ed:a1:b9:2d:c7:cd:ba:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DE:43:D9:4A:5E:F4:BB:A9:85:55:A0:C1:A6:2A:2B:73:FC:FB:4B
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313030303a3a2f33382d3438203d3e20323131323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1000::/38
Signature Algorithm: sha256WithRSAEncryption
5c:2f:08:ae:c2:56:51:25:45:c4:25:a3:d4:2c:f8:d4:fc:38:
96:26:94:5a:31:91:3d:62:aa:13:c0:81:38:a5:38:00:8d:79:
d1:ac:5e:ab:a1:27:31:99:c0:8b:ea:ea:3e:d7:5d:d8:c5:6b:
e8:5c:a8:df:b8:cf:36:cd:e4:9d:25:9a:dc:4a:16:9d:3b:7c:
19:62:f3:67:95:e0:0f:38:3c:b9:26:fb:c0:50:c7:15:1a:ed:
34:66:6c:bc:88:db:ad:60:1a:1c:08:7d:25:5c:ef:b3:e1:80:
c9:ff:51:2a:a0:05:0b:31:3c:fc:ca:6a:33:d1:39:1b:15:73:
63:d8:72:d6:65:09:fe:ed:74:d8:16:f4:ec:9d:d7:30:a6:22:
1f:89:d0:1e:fb:72:eb:ad:9c:1a:0c:90:21:aa:90:d3:9f:27:
70:f6:45:35:d7:46:57:48:31:81:22:fa:83:70:c3:74:fe:2e:
68:24:31:5f:78:f2:a2:da:03:c0:b7:24:e6:86:32:d9:37:08:
c2:34:ed:6c:54:ec:d0:02:ea:e1:a8:26:3f:61:c3:96:14:11:
cb:6c:e7:8d:be:a1:1e:2e:82:68:6a:5e:74:ac:74:99:b9:2d:
64:e9:16:eb:f6:9f:66:80:ca:b9:ee:76:43:10:92:3e:a4:ee:
d4:d2:c3:cb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUN/G9N+BOqVqHq8Ghvpq++ln4AoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA3MDkxODM4NDZaFw0yNDA3MDcxODQzNDZaMDMxMTAvBgNV
BAMTKDk2REU0M0Q5NEE1RUY0QkJBOTg1NTVBMEMxQTYyQTJCNzNGQ0ZCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDxWDJ2YJfp/zHi11cHbfqglP
rRO0mvFU7N8Zu16cPXwkhG00neCyuq0BlrwFqLjo+GAK1MngJoZ61nwrZ/RuLypy
y4a+EF2yavpBw8jzQLeI+qQRNBluoo85B1b/enxuYHXrMb8Jfkdk1vUdngumQAOt
5nzCIeWx/XOrEzHdkP6lgjdGj3UQAM4iLcoZ5vG7+ZEhnoCaYzNklfvDqnGBl3mq
RgVli9H1pg1Mqk+QYr3ibxkcq1vJccFAZAO+I8zgvpw/tTyQe9DXJjHPMO7CKUS8
kHqFg06hnSPxIWspLx4rvX3v21BbWkDaTDGg5eA/pcL8vTFR7aG5LcfNuoK1AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUlt5D2Upe9LuphVWgwaYqK3P8+0swHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzMTMwMzAzMDNhM2EyZjMzMzgyZDM0MzgyMDNkM2UyMDMyMzEzMTMyMzczMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGAioT34AQMA0GCSqGSIb3DQEBCwUAA4IBAQBcLwiuwlZRJUXEJaPU
LPjU/DiWJpRaMZE9YqoTwIE4pTgAjXnRrF6roScxmcCL6uo+113YxWvoXKjfuM82
zeSdJZrcShadO3wZYvNnleAPODy5JvvAUMcVGu00Zmy8iNutYBocCH0lXO+z4YDJ
/1EqoAULMTz8ymoz0TkbFXNj2HLWZQn+7XTYFvTsndcwpiIfidAe+3LrrZwaDJAh
qpDTnydw9kU110ZXSDGBIvqDcMN0/i5oJDFfePKi2gPAtyTmhjLZNwjCNO1sVOzQ
AurhqCY/YcOWFBHLbOeNvqEeLoJoal50rHSZuS1k6Rbr9p9mgMq57nZDEJI+pO7U
0sPL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org