Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830353a3a2f34382d3438203d3e20323136333431.roa
File: 326131333a646638303a333830353a3a2f34382d3438203d3e20323136333431.roa (raw, json)
Hash identifier: kJef9nZEBrbJRRoDlIzvVwPVt03D2b9b2UFxGxBckO4=
Subject key identifier: 48:BC:AA:DE:28:6C:AB:1E:92:DD:AA:C4:8E:C9:1D:B4:BC:BB:D5:4B
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 6C18B9728A50B4CF906C824DB5CB7A8A90EE5653
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830353a3a2f34382d3438203d3e20323136333431.roa
Signing time: Fri 08 Sep 2023 10:32:26 +0000
ROA not before: Fri 08 Sep 2023 10:27:26 +0000
ROA not after: Fri 06 Sep 2024 10:32:26 +0000
asID: 216341
IP address blocks: 2a13:df80:3805::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:18:b9:72:8a:50:b4:cf:90:6c:82:4d:b5:cb:7a:8a:90:ee:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 8 10:27:26 2023 GMT
Not After : Sep 6 10:32:26 2024 GMT
Subject: CN=48BCAADE286CAB1E92DDAAC48EC91DB4BCBBD54B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:4f:03:f3:9a:cc:85:85:ab:6e:0b:6b:ff:
f4:55:6b:86:21:36:94:d5:86:6a:08:36:8e:a8:d6:
71:26:95:4a:51:71:35:6f:87:c5:c7:af:f6:10:1d:
09:fa:ba:97:de:08:52:16:1a:81:e3:ce:f5:b7:4d:
9f:7a:d2:1d:1e:21:f3:c6:50:97:93:ba:b4:c4:51:
0c:db:3f:c0:ba:9e:e6:e1:bb:e1:0f:9f:f1:9d:dc:
c2:0e:f3:a5:b9:4e:2d:7a:62:c6:bc:1f:ba:2a:30:
0e:4b:d5:cb:4c:6e:d1:dd:b6:cd:07:fe:57:1e:2a:
aa:ef:2e:b2:12:f6:b0:60:c7:15:73:2e:5b:29:f1:
29:89:6d:47:79:01:7c:4c:de:e5:ed:df:d5:b0:1b:
42:d4:bc:69:35:b6:ea:ab:a5:ff:a9:da:8c:aa:9a:
79:71:34:74:74:57:2e:af:63:16:8f:08:6d:60:a2:
7a:62:0b:51:52:1b:bf:ca:c4:b4:1e:eb:6e:85:fd:
8d:fa:55:52:bf:8c:a2:cd:37:c2:62:51:3d:4e:9c:
78:a9:76:d5:02:9e:26:3f:b3:16:5f:4a:57:79:6f:
a2:9e:14:18:a3:fa:27:ef:2c:ad:77:16:60:b0:de:
c9:56:55:00:37:9d:0d:54:58:a2:d2:b8:80:76:97:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:AA:DE:28:6C:AB:1E:92:DD:AA:C4:8E:C9:1D:B4:BC:BB:D5:4B
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830353a3a2f34382d3438203d3e20323136333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:3805::/48
Signature Algorithm: sha256WithRSAEncryption
40:61:80:d8:83:e9:87:b4:6a:80:e7:42:b8:02:59:8c:38:61:
e5:ac:8b:bb:33:94:d0:65:3f:9f:90:c1:7b:94:42:73:34:99:
b0:36:c9:12:35:50:3e:22:4e:15:4f:bb:e8:c2:fe:ec:28:5c:
c7:04:e5:d4:da:3b:3f:de:96:cc:cb:5c:cf:05:33:1b:dc:6f:
77:c1:f6:24:22:d0:a4:33:40:d6:28:ec:9b:cb:dc:00:f5:19:
af:a8:7c:9b:47:a1:61:14:59:e9:0d:22:b0:93:04:e6:b5:34:
ef:4c:fb:46:ca:fa:47:54:e6:d9:c0:a3:66:92:4b:4e:b1:df:
4a:f4:95:97:ac:51:73:7b:f4:f1:20:b0:4e:ff:c8:8c:73:8e:
d8:bf:c6:cf:c7:d1:62:57:13:7b:a0:b8:d9:99:6e:58:4b:fb:
66:1d:d0:9f:84:5f:c5:2c:02:57:a7:1f:cd:f9:fc:79:9a:92:
c0:78:59:33:27:5c:35:40:99:50:08:7e:35:eb:10:1d:1a:13:
5f:a9:cc:99:7c:14:61:f4:9b:fe:a3:b2:21:a1:3d:21:eb:64:
8a:42:9d:74:d0:d7:23:b9:99:f5:a7:9a:68:43:83:2b:19:f8:
39:e0:a3:5a:4f:80:67:2b:24:4e:0b:80:0b:b3:97:8c:75:8b:
3c:69:2d:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUbBi5copQtM+QbIJNtct6ipDuVlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA5MDgxMDI3MjZaFw0yNDA5MDYxMDMyMjZaMDMxMTAvBgNV
BAMTKDQ4QkNBQURFMjg2Q0FCMUU5MkREQUFDNDhFQzkxREI0QkNCQkQ1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+08D85rMhYWrbgtr//RVa4Yh
NpTVhmoINo6o1nEmlUpRcTVvh8XHr/YQHQn6upfeCFIWGoHjzvW3TZ960h0eIfPG
UJeTurTEUQzbP8C6nubhu+EPn/Gd3MIO86W5Ti16Ysa8H7oqMA5L1ctMbtHdts0H
/lceKqrvLrIS9rBgxxVzLlsp8SmJbUd5AXxM3uXt39WwG0LUvGk1tuqrpf+p2oyq
mnlxNHR0Vy6vYxaPCG1gonpiC1FSG7/KxLQe626F/Y36VVK/jKLNN8JiUT1OnHip
dtUCniY/sxZfSld5b6KeFBij+ifvLK13FmCw3slWVQA3nQ1UWKLSuIB2l7PnAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUSLyq3ihsqx6S3arEjskdtLy71UswHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzMzM4MzAzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMzMzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT34A4BTANBgkqhkiG9w0BAQsFAAOCAQEAQGGA2IPph7RqgOdC
uAJZjDhh5ayLuzOU0GU/n5DBe5RCczSZsDbJEjVQPiJOFU+76ML+7ChcxwTl1No7
P96WzMtczwUzG9xvd8H2JCLQpDNA1ijsm8vcAPUZr6h8m0ehYRRZ6Q0isJME5rU0
70z7Rsr6R1Tm2cCjZpJLTrHfSvSVl6xRc3v08SCwTv/IjHOO2L/Gz8fRYlcTe6C4
2ZluWEv7Zh3Qn4RfxSwCV6cfzfn8eZqSwHhZMydcNUCZUAh+NesQHRoTX6nMmXwU
YfSb/qOyIaE9IetkikKddNDXI7mZ9aeaaEODKxn4OeCjWk+AZyskTguAC7OXjHWL
PGkt4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org