Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
File: 326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier: /Q0V7r+u1tjq9+H56psxNvscg+2+G5ZuACf4gQEe+2U=
Subject key identifier: 38:EF:A3:5E:24:15:79:DB:9D:E3:45:8A:6D:1B:43:4D:A3:9A:9A:5C
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 38481591D7DEFCF0142EBC0D892419A5CB992114
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
Signing time: Fri 07 Jul 2023 07:04:15 +0000
ROA not before: Fri 07 Jul 2023 06:59:15 +0000
ROA not after: Fri 05 Jul 2024 07:04:15 +0000
asID: 60900
IP address blocks: 2a13:df80:71::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:48:15:91:d7:de:fc:f0:14:2e:bc:0d:89:24:19:a5:cb:99:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Jul 7 06:59:15 2023 GMT
Not After : Jul 5 07:04:15 2024 GMT
Subject: CN=38EFA35E241579DB9DE3458A6D1B434DA39A9A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:ce:bb:d6:50:dc:61:ac:46:de:98:f0:84:
41:f7:c0:a4:d8:ae:9d:87:ca:7f:e5:9e:fc:32:76:
f2:2e:c3:0e:e7:c3:72:2b:81:91:b8:b3:aa:81:62:
a8:00:e5:dc:65:94:cb:44:ad:53:4d:94:6b:4a:e9:
6c:01:a7:91:0c:c9:44:78:78:be:10:53:be:ee:6d:
36:78:66:74:41:0e:f1:85:26:8f:64:5d:80:a9:3a:
45:5b:5b:eb:c9:5a:64:ee:be:07:18:92:1f:b6:12:
40:15:20:2f:ca:f5:e3:d6:74:e6:e7:72:f6:d5:de:
90:c3:76:25:ad:8d:bf:88:28:b4:6d:4a:61:eb:7d:
d2:34:21:46:eb:2c:19:db:eb:75:1b:bd:4f:3f:32:
9c:72:85:e9:37:b1:0a:5f:78:63:df:0c:f9:9e:34:
77:c2:0a:ff:c9:4a:fd:6c:cd:86:21:92:db:77:ab:
4d:ab:fd:88:15:d6:5c:da:18:cb:73:7b:67:09:6a:
00:86:ec:6d:28:53:38:8b:81:b8:be:7c:68:e3:f4:
74:84:cd:f4:96:53:37:78:bc:2d:74:66:14:b1:d4:
60:8d:77:60:b4:0a:20:f3:7a:32:ab:ab:7c:f4:2c:
ec:50:ff:6a:7d:9e:24:08:25:d2:7c:09:03:ad:25:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:A3:5E:24:15:79:DB:9D:E3:45:8A:6D:1B:43:4D:A3:9A:9A:5C
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:71::/48
Signature Algorithm: sha256WithRSAEncryption
02:ca:da:a0:1d:d7:2f:e2:bb:1a:d9:e1:11:a1:fd:e2:63:43:
13:d5:09:82:b2:4a:e9:8c:c5:2c:b0:77:8e:a5:46:0f:b9:f5:
a3:1c:97:f3:d2:ae:01:91:06:bb:45:66:6b:49:6d:e6:4a:4f:
1a:32:b5:9e:60:f6:03:35:0c:9a:56:6a:bb:c6:8b:54:97:14:
d8:89:ec:51:8a:c9:0a:a1:15:6d:2a:fc:6a:12:c7:69:69:51:
1b:27:d0:fb:2a:a1:30:f2:77:4d:30:2d:e8:8e:f2:75:75:25:
7d:58:9e:09:e9:a1:19:1c:1d:1c:b3:69:ab:be:e6:c5:a6:3b:
3d:ec:bf:93:05:23:0e:5c:1c:a8:39:6b:14:72:3e:9a:81:73:
f9:0e:cf:02:3b:0b:2a:af:b0:e4:42:fb:d4:98:fb:f7:6a:e8:
1a:10:f9:31:5c:59:0b:ea:41:a1:d6:6d:87:ab:5f:92:3f:41:
62:8a:d5:25:d3:cb:2b:c9:b7:59:1f:94:17:c1:d7:a3:64:49:
f1:c5:e8:9d:d7:b8:ef:79:1d:ff:fa:7e:4f:cd:03:91:e1:6b:
89:b0:62:cb:71:62:ce:75:3c:5e:5d:0b:ed:ca:ed:51:9a:2d:
07:77:93:0c:dc:3b:d2:cd:fe:11:b1:60:f4:60:e3:b2:59:54:
42:47:67:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org