Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383830303a3a2f34342d3438203d3e20323136333735.roa
File: 326131333a646638303a383830303a3a2f34342d3438203d3e20323136333735.roa (raw, json)
Hash identifier: Z7deGIGvzQLr1O1sTYcYNnq5pc7qp0C7h0nWdT4zTKA=
Subject key identifier: E9:C1:22:56:F3:5E:69:A2:1C:F9:61:3E:66:53:1A:4C:2D:B0:3E:2F
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 2791B5DA7C27CA2B42DF6C7894D8263C1D814F3D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383830303a3a2f34342d3438203d3e20323136333735.roa
Signing time: Sat 02 Sep 2023 09:53:39 +0000
ROA not before: Sat 02 Sep 2023 09:48:39 +0000
ROA not after: Sat 31 Aug 2024 09:53:39 +0000
asID: 216375
IP address blocks: 2a13:df80:8800::/44 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:91:b5:da:7c:27:ca:2b:42:df:6c:78:94:d8:26:3c:1d:81:4f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 2 09:48:39 2023 GMT
Not After : Aug 31 09:53:39 2024 GMT
Subject: CN=E9C12256F35E69A21CF9613E66531A4C2DB03E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:1f:9b:13:f1:d8:ce:3a:00:14:78:d2:a5:
74:3a:9d:2e:21:c4:02:1f:bf:55:69:9c:db:25:a9:
9a:8d:40:a9:7b:e6:5e:20:c4:b0:50:93:32:be:30:
f6:e6:95:78:80:04:45:db:79:9a:f3:f2:20:61:9c:
cc:44:1b:35:a8:55:23:f7:7f:bd:8f:fe:ee:d0:04:
d3:4a:fa:97:86:70:96:b0:97:85:8a:77:ce:06:b0:
33:b0:e3:aa:0b:73:8d:a4:25:c2:fc:5b:bd:53:5b:
9e:53:36:27:73:8e:28:f4:33:f3:5a:9a:55:69:89:
f1:bb:d0:8c:ac:4d:e6:20:ff:14:09:03:70:4f:68:
b4:a4:5e:20:9f:4c:71:33:ac:a7:6a:a2:20:af:5f:
ac:21:38:f0:4b:24:c6:32:67:cb:d2:65:39:21:67:
53:b3:72:10:f6:e8:2c:10:e6:ee:d7:ad:d1:c9:3e:
15:a3:29:81:39:5c:41:b6:b3:e7:fa:80:ba:33:6d:
52:8a:8c:11:d8:56:94:8b:0e:b9:95:f4:5c:2f:23:
de:87:ec:3b:ac:70:4c:0f:e2:27:72:66:62:b4:80:
2d:d2:84:c3:79:c2:86:b0:00:43:87:86:24:29:88:
02:85:e7:19:1d:f1:f7:fc:92:a5:83:e2:5a:67:30:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:22:56:F3:5E:69:A2:1C:F9:61:3E:66:53:1A:4C:2D:B0:3E:2F
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383830303a3a2f34342d3438203d3e20323136333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:8800::/44
Signature Algorithm: sha256WithRSAEncryption
7d:65:53:ac:dd:b9:f3:75:3e:66:99:3e:91:7a:04:2b:0f:3a:
2d:c0:07:ff:86:1e:97:fe:36:24:56:c8:f6:c1:d6:9e:d4:6f:
cc:3b:e5:8a:23:27:2d:f3:81:fc:a7:41:35:cb:cf:d9:37:84:
64:da:35:36:24:c5:be:a1:c6:7f:60:11:d2:ca:db:8f:11:32:
83:41:47:ab:9b:f5:60:05:bf:cf:5a:8c:10:2d:0f:23:28:e7:
d9:2d:7e:22:f9:fb:fc:ab:c2:66:31:db:67:bc:e2:e1:40:db:
1c:13:9a:50:fc:41:04:a2:ad:88:ab:1e:a1:70:98:ea:45:a1:
67:7f:8b:7c:be:c0:32:c2:52:e5:06:bb:22:02:a2:b9:7a:80:
71:26:c9:01:3b:67:87:ba:fb:3c:ec:91:d0:62:71:3d:c3:ef:
02:fe:3a:a1:de:a3:69:ea:1b:49:1e:4f:8b:fb:31:41:53:6d:
35:80:95:03:d6:2a:dc:ba:01:78:1f:47:13:95:2b:80:02:2e:
08:c7:1b:13:bf:94:3a:ca:b3:ab:56:30:59:c8:20:08:7a:e1:
55:2c:8c:0b:2f:83:ab:3f:54:ba:0d:29:cd:c9:67:15:fc:97:
7d:ca:30:0a:d5:93:09:ad:b8:98:4a:0d:ed:f7:c7:89:a7:69:
76:cb:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org