Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa
File: 326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa (raw, json)
Hash identifier: xpAZlIMc2WjIE/xtfrhfpl++wzZy160G8pBL6rT9R1E=
Subject key identifier: 19:91:70:CD:A8:7A:B0:A8:5C:BC:0C:D4:9E:0D:3C:72:4D:A0:68:CA
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 01F4E00740802E2B9434655AC2F567F86501642D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa
Signing time: Sat 09 Sep 2023 10:32:17 +0000
ROA not before: Sat 09 Sep 2023 10:27:17 +0000
ROA not after: Sat 07 Sep 2024 10:32:17 +0000
asID: 47509
IP address blocks: 2a13:df80:3811::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f4:e0:07:40:80:2e:2b:94:34:65:5a:c2:f5:67:f8:65:01:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 9 10:27:17 2023 GMT
Not After : Sep 7 10:32:17 2024 GMT
Subject: CN=199170CDA87AB0A85CBC0CD49E0D3C724DA068CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:0d:e0:8b:9c:1b:f9:9c:ab:4a:44:fb:5b:
18:4b:c9:1d:83:f6:56:28:d6:d7:60:8b:4e:80:21:
21:09:21:e1:a4:23:bc:13:5f:11:74:7b:4f:3b:8c:
a1:c8:23:9c:29:07:4f:6e:7d:d5:e9:67:bc:33:b5:
32:e8:52:58:8d:19:f7:44:62:d5:d0:51:22:61:0a:
e4:28:16:4d:46:f0:eb:cd:c0:7d:60:4c:e0:cf:b4:
04:c0:8d:e9:34:00:47:0d:1c:a0:ce:57:bf:fc:1e:
7c:be:47:00:76:27:34:08:bd:04:3c:f8:8f:27:70:
a8:56:03:80:9b:da:d7:6a:43:43:de:3e:ba:38:44:
3f:8e:47:0f:7a:bc:67:81:29:eb:e0:15:be:34:3c:
86:7b:95:35:7f:c9:66:2b:bf:fe:be:73:c8:91:25:
36:5e:76:1e:5b:7e:17:06:60:2e:e0:62:9e:ca:0b:
30:0f:39:08:0d:5b:11:34:ec:7a:4a:a9:90:1a:76:
b7:51:8d:00:d4:5e:72:ab:b9:20:b9:c9:94:51:e1:
54:34:09:84:61:7d:f2:2a:dc:43:c6:ca:7d:ca:15:
59:f8:24:ff:26:60:52:11:3f:83:da:1e:95:37:c4:
d1:91:d9:d4:ca:74:3b:7f:0d:bc:4b:1b:e6:30:21:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:70:CD:A8:7A:B0:A8:5C:BC:0C:D4:9E:0D:3C:72:4D:A0:68:CA
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:3811::/48
Signature Algorithm: sha256WithRSAEncryption
4d:e1:96:5f:c2:f0:4c:0f:d0:52:f2:aa:83:fd:c0:96:68:40:
58:d6:98:ad:aa:e5:dc:9e:e6:7e:4b:19:90:d6:cb:16:0e:f9:
4b:82:ab:30:54:69:67:16:6f:ff:73:a3:8f:f7:f1:32:86:b7:
88:c8:b6:05:ef:c3:76:f4:08:bd:47:ad:5f:36:7a:6d:85:10:
a8:56:bb:e0:b3:0a:a8:de:38:c4:b4:3f:44:12:8e:84:9f:98:
fe:52:af:27:ba:b0:e8:a5:a4:2a:ec:25:09:56:7f:66:8d:0f:
d1:06:e7:3d:e6:47:f1:e8:a5:21:c7:83:6d:45:6a:58:f9:bb:
03:dd:d1:c9:6e:e4:1f:6f:3b:4b:d1:07:f1:de:1c:05:39:17:
bd:86:e7:d9:7f:b9:42:d6:8e:8c:cd:37:f3:3c:98:30:88:7e:
df:00:44:09:a8:89:f5:5b:94:8d:56:c9:a9:32:c4:08:ce:18:
50:07:c1:16:77:ed:c8:47:4f:18:a9:bb:36:73:3a:f9:2b:7a:
f1:a3:68:67:a9:9e:a8:e4:a8:05:ab:4a:a1:f1:30:cd:4f:85:
c0:58:6c:c6:df:77:fe:a6:42:3f:a1:fa:53:7a:28:44:c0:20:
02:f4:57:b5:3c:59:2e:f3:a2:fa:35:89:70:4f:da:0e:be:93:
c8:00:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org