Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030303a3a2f33382d3634203d3e20313937343634.roa
File: 326131333a646638303a623030303a3a2f33382d3634203d3e20313937343634.roa (raw, json)
Hash identifier: e8kIFAG7hGl9iDV6ijXRCgzlO9g1V2MGxOKFsX1m/SM=
Subject key identifier: 69:FD:5F:FF:0E:1C:2D:7C:0C:A0:7F:D5:09:BF:17:61:CF:88:B9:95
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 21E9A5AC45E17A7007372B797DD335A4F07D230C
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030303a3a2f33382d3634203d3e20313937343634.roa
Signing time: Mon 04 Dec 2023 11:30:48 +0000
ROA not before: Mon 04 Dec 2023 11:25:48 +0000
ROA not after: Mon 02 Dec 2024 11:30:48 +0000
asID: 197464
IP address blocks: 2a13:df80:b000::/38 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e9:a5:ac:45:e1:7a:70:07:37:2b:79:7d:d3:35:a4:f0:7d:23:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 4 11:25:48 2023 GMT
Not After : Dec 2 11:30:48 2024 GMT
Subject: CN=69FD5FFF0E1C2D7C0CA07FD509BF1761CF88B995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:e6:f9:21:95:95:69:dd:33:2e:bf:fa:54:
52:7e:ec:c8:84:05:e5:bf:f5:db:d1:2d:a2:91:f3:
9f:79:bc:3e:54:77:0c:7b:06:69:e9:4d:94:4d:0b:
c1:a3:0f:14:98:dc:8a:90:4a:90:68:e3:ee:dd:d0:
20:44:d2:8e:73:f4:b3:ea:92:98:fb:53:75:f4:b3:
73:c8:88:92:72:98:92:36:3f:7a:c6:1f:5e:3c:9e:
d8:25:b6:f9:ab:a0:1f:72:d6:37:b0:f2:fa:28:25:
55:73:95:64:ae:40:47:f6:7e:4d:ed:7c:1d:eb:e4:
48:25:80:f6:c0:da:48:82:06:67:bc:2a:76:36:a7:
3d:0c:42:c1:01:37:1e:a9:cb:6f:c1:84:9f:2a:45:
82:b6:af:bb:db:f5:66:b8:ca:bc:60:99:c2:d3:59:
55:62:e5:bf:02:45:6b:73:59:1a:dc:e1:b0:95:a7:
8b:6c:ae:ec:76:8c:6d:d9:c2:85:a9:1e:91:c9:79:
a7:73:25:89:f7:1d:27:4e:77:80:69:57:18:aa:88:
7b:5a:08:9d:af:e9:90:09:d8:80:4c:ca:b5:e8:a4:
02:6a:60:7c:ba:6b:07:57:9f:74:33:e2:59:1a:72:
e7:39:41:aa:0d:54:99:ac:cb:21:4f:02:f1:76:b2:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FD:5F:FF:0E:1C:2D:7C:0C:A0:7F:D5:09:BF:17:61:CF:88:B9:95
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030303a3a2f33382d3634203d3e20313937343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:b000::/38
Signature Algorithm: sha256WithRSAEncryption
b6:a4:4e:da:50:fe:16:6a:46:1b:96:f6:1e:b6:de:3c:f0:37:
f6:ea:80:93:dc:16:e1:64:43:76:5d:cd:ec:70:d3:83:0d:ab:
d3:d6:a7:21:90:e5:2b:1c:fc:cb:92:2b:01:98:0e:e3:03:11:
63:4d:a2:49:dd:5b:ff:5f:f6:41:23:47:70:00:68:1d:ea:86:
c5:48:6a:7b:21:c5:aa:52:ed:0c:a8:5e:4a:d3:09:9f:5e:ee:
40:5b:74:56:3c:56:15:a8:f0:55:83:81:24:36:f7:7b:49:17:
4d:0d:09:ed:dc:52:b4:8e:2a:5b:b5:da:1d:37:ae:19:48:61:
b2:af:8e:68:b9:df:e1:31:bf:46:4d:67:79:55:7b:53:94:27:
4a:b5:18:bd:d7:46:9d:f0:12:bc:94:52:e6:7e:c2:74:2f:69:
5a:b4:e8:be:52:a2:7b:ad:b1:a8:cd:c1:ed:22:8c:52:71:0b:
ce:6e:5d:b1:75:7a:a7:7e:bd:bd:7e:7c:25:1b:cb:1f:79:d2:
25:85:b6:08:70:ba:8c:6a:4e:a9:5c:9d:06:1d:98:38:d2:90:
93:e7:2d:1e:4f:06:68:09:69:ff:c5:da:3b:48:b8:cf:b5:01:
64:d9:72:16:1d:6e:cc:fe:aa:e8:7e:94:b0:c4:f4:d4:21:a9:
16:55:84:4a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUIemlrEXhenAHNyt5fdM1pPB9IwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzEyMDQxMTI1NDhaFw0yNDEyMDIxMTMwNDhaMDMxMTAvBgNV
BAMTKDY5RkQ1RkZGMEUxQzJEN0MwQ0EwN0ZENTA5QkYxNzYxQ0Y4OEI5OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZub5IZWVad0zLr/6VFJ+7MiE
BeW/9dvRLaKR8595vD5Udwx7BmnpTZRNC8GjDxSY3IqQSpBo4+7d0CBE0o5z9LPq
kpj7U3X0s3PIiJJymJI2P3rGH148ntgltvmroB9y1jew8vooJVVzlWSuQEf2fk3t
fB3r5EglgPbA2kiCBme8KnY2pz0MQsEBNx6py2/BhJ8qRYK2r7vb9Wa4yrxgmcLT
WVVi5b8CRWtzWRrc4bCVp4tsrux2jG3ZwoWpHpHJeadzJYn3HSdOd4BpVxiqiHta
CJ2v6ZAJ2IBMyrXopAJqYHy6awdXn3Qz4lkacuc5QaoNVJmsyyFPAvF2sl+lAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUaf1f/w4cLXwMoH/VCb8XYc+IuZUwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2E2MjMwMzAzMDNhM2EyZjMzMzgyZDM2MzQyMDNkM2UyMDMxMzkzNzM0MzYzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGAioT34CwMA0GCSqGSIb3DQEBCwUAA4IBAQC2pE7aUP4WakYblvYe
tt488Df26oCT3BbhZEN2Xc3scNODDavT1qchkOUrHPzLkisBmA7jAxFjTaJJ3Vv/
X/ZBI0dwAGgd6obFSGp7IcWqUu0MqF5K0wmfXu5AW3RWPFYVqPBVg4EkNvd7SRdN
DQnt3FK0jipbtdodN64ZSGGyr45oud/hMb9GTWd5VXtTlCdKtRi910ad8BK8lFLm
fsJ0L2latOi+UqJ7rbGozcHtIoxScQvObl2xdXqnfr29fnwlG8sfedIlhbYIcLqM
ak6pXJ0GHZg40pCT5y0eTwZoCWn/xdo7SLjPtQFk2XIWHW7M/qrofpSwxPTUIakW
VYRK
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org