Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3430303a3a2f33382d3338203d3e203630383538.roa
File: 326131333a646638303a3430303a3a2f33382d3338203d3e203630383538.roa (raw, json)
Hash identifier: HIxI+VUjXkg2sm3Nqylyr0YRmFJmpOP0DPDer/9qjqs=
Subject key identifier: 95:1E:92:33:86:DC:A0:98:95:D5:2B:28:20:E1:23:ED:5C:2C:6A:46
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 5066ACE8A3D2E3ECB20B23C6589713F14440A5A9
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3430303a3a2f33382d3338203d3e203630383538.roa
Signing time: Fri 07 Jul 2023 09:48:05 +0000
ROA not before: Fri 07 Jul 2023 09:43:05 +0000
ROA not after: Fri 05 Jul 2024 09:48:05 +0000
asID: 60858
IP address blocks: 2a13:df80:400::/38 maxlen: 38
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:66:ac:e8:a3:d2:e3:ec:b2:0b:23:c6:58:97:13:f1:44:40:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Jul 7 09:43:05 2023 GMT
Not After : Jul 5 09:48:05 2024 GMT
Subject: CN=951E923386DCA09895D52B2820E123ED5C2C6A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:39:c0:91:c8:bb:7b:c5:0d:de:7a:a3:dc:
b7:13:2d:19:e0:64:c9:a5:be:13:46:f1:db:eb:58:
27:ba:84:ed:5d:6e:31:2a:84:5a:79:c8:f6:47:14:
6c:b4:cb:7a:ce:a2:2f:92:5e:42:0c:38:11:c0:ad:
24:5e:2b:4d:76:4c:1a:73:0d:41:f3:08:6c:06:db:
2f:f1:17:ff:7b:39:54:32:4b:7f:dc:0a:56:c0:1f:
e7:75:e1:9b:2a:0b:6a:85:43:87:05:fe:96:fd:73:
90:28:3d:9e:2b:69:77:7d:97:c6:eb:63:38:8d:32:
a1:b0:c6:88:5d:a8:d5:fe:be:eb:b8:32:98:a3:3e:
32:09:03:86:6a:f9:77:3a:01:91:00:f5:6b:fa:5e:
a0:41:27:ec:04:10:7c:10:68:c7:4e:09:30:e5:a4:
27:71:fa:72:d0:87:c5:26:99:00:56:b7:c1:c6:4a:
ed:cd:23:75:ed:3b:96:e1:0f:b4:71:fe:b1:c9:18:
5a:c4:07:db:ae:5c:bc:4f:4f:9b:00:f5:a5:dd:f2:
09:7a:c8:69:3e:45:e3:c4:ea:de:67:57:08:a9:03:
38:d0:da:23:f4:49:4d:b6:42:e5:9c:bf:7f:ba:37:
13:7b:7b:2d:7d:fc:b3:e6:d0:87:62:ae:84:d7:f4:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1E:92:33:86:DC:A0:98:95:D5:2B:28:20:E1:23:ED:5C:2C:6A:46
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3430303a3a2f33382d3338203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:400::/38
Signature Algorithm: sha256WithRSAEncryption
18:52:05:bb:4d:15:58:0b:08:a1:60:b4:45:9c:63:c0:f0:53:
bf:c8:09:9e:23:b5:1e:6f:37:69:76:e3:66:e9:c5:80:83:d8:
80:1d:52:39:0a:5e:24:12:65:d0:81:cd:f0:61:bd:99:d5:d9:
1b:48:a7:8c:a4:03:00:c3:0b:b6:dd:8c:de:28:7b:d2:f0:9d:
1e:d7:a6:8c:a5:61:0c:b4:1c:29:b7:95:3a:45:c1:41:83:b8:
fb:e6:22:50:05:4f:48:ff:78:08:02:9c:46:20:b1:5d:de:d2:
68:c4:dd:ec:50:79:e3:16:ba:06:95:4c:ae:f9:4b:c1:b5:0a:
3b:9d:fd:d2:77:d6:b9:f1:ca:d4:0a:42:73:15:33:02:ef:40:
6c:78:9d:a4:c7:5a:96:cd:0e:2c:6d:b0:90:25:04:49:71:1e:
11:ce:69:31:de:88:94:6c:bd:6e:46:73:36:5d:52:85:a6:dd:
a2:2f:b1:8f:0b:51:60:68:35:1b:dc:72:66:06:14:57:85:80:
46:d6:6c:dd:c2:40:37:81:c1:e7:23:81:25:53:5a:36:b5:e5:
3f:09:e1:99:3c:22:0d:6d:5a:1a:40:2f:ee:28:97:3e:0e:53:
dd:f1:7c:d7:a5:9d:3e:85:16:35:cd:b6:ca:4d:bb:f3:08:fb:
5b:a6:c8:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org