Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623430303a3a2f33382d3634203d3e20313937343338.roa
File: 326131333a646638303a623430303a3a2f33382d3634203d3e20313937343338.roa (raw, json)
Hash identifier: yATsdy+bufQT9Ux7H/dd4uf7t31gFhR0d2JDUI2DWgw=
Subject key identifier: 99:06:33:A2:95:52:F4:6D:D7:4B:EF:8F:09:2A:7D:A7:FF:74:7F:DC
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 1049FD88224F343ADF331D46BCF7E070888FB13A
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623430303a3a2f33382d3634203d3e20313937343338.roa
Signing time: Fri 15 Dec 2023 22:00:54 +0000
ROA not before: Fri 15 Dec 2023 21:55:54 +0000
ROA not after: Fri 13 Dec 2024 22:00:54 +0000
asID: 197438
IP address blocks: 2a13:df80:b400::/38 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:49:fd:88:22:4f:34:3a:df:33:1d:46:bc:f7:e0:70:88:8f:b1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 15 21:55:54 2023 GMT
Not After : Dec 13 22:00:54 2024 GMT
Subject: CN=990633A29552F46DD74BEF8F092A7DA7FF747FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:1b:c5:23:47:53:78:37:e1:25:d6:ae:5d:
0b:27:ae:db:e4:51:a3:b5:c2:7a:5f:e9:8c:a4:7a:
02:c9:68:27:03:cf:5a:f9:69:34:ef:5f:9a:a7:1c:
dd:9b:8b:b4:51:77:a8:91:13:36:53:37:fd:d3:61:
34:61:af:a7:2c:00:4f:11:1e:78:b4:be:e5:d7:eb:
c5:80:17:dd:d7:b1:8b:4b:c8:20:6f:df:ff:45:ae:
e1:90:d3:ba:46:91:69:1f:b1:d0:8d:c9:cd:61:26:
e2:30:ef:4b:5f:f5:e2:e5:34:7d:f4:83:d7:cd:fb:
fb:e2:a4:37:ce:9c:f2:c9:30:53:9d:7c:2e:03:80:
55:e5:6c:71:42:33:bd:55:08:4e:54:ba:6e:04:5c:
6c:60:64:43:d9:cd:aa:ff:52:9b:fc:ee:8d:d7:64:
af:45:37:6b:82:cd:71:6f:95:fd:8b:a4:53:6a:25:
35:c4:75:7d:53:21:00:ae:46:15:63:e2:9a:90:bf:
b9:1d:9c:b1:8e:36:c4:7c:2f:85:53:6f:53:6d:55:
25:1f:22:4d:f0:09:f0:77:8a:75:86:0c:8c:7f:99:
f0:44:59:6d:3e:14:f3:8b:a9:76:68:94:61:6e:63:
bd:75:c8:9a:82:0c:a7:e0:a6:42:c0:ec:bb:92:9e:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:06:33:A2:95:52:F4:6D:D7:4B:EF:8F:09:2A:7D:A7:FF:74:7F:DC
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623430303a3a2f33382d3634203d3e20313937343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:b400::/38
Signature Algorithm: sha256WithRSAEncryption
0e:44:95:f7:00:e7:e1:f9:77:67:d3:e3:8f:05:1f:02:0c:db:
6e:d2:52:02:df:12:fa:0d:e3:6c:da:10:38:50:ff:44:fa:f4:
61:c2:fb:54:d9:e0:52:cd:5f:db:be:03:aa:77:9d:3f:02:f6:
52:d8:30:62:67:0a:9b:9b:9e:29:61:b9:f4:61:4f:ea:75:11:
43:1d:d6:4a:f9:69:09:40:01:ec:13:4a:d4:f8:11:de:2e:53:
a5:93:6d:84:f0:dc:cf:6e:2e:6e:ec:25:f4:91:0a:2e:6a:ab:
e7:08:51:63:ea:ee:4b:3e:39:50:60:23:88:8c:f0:7a:56:d6:
8d:3d:88:70:2c:a3:5e:c6:d5:cf:73:03:a0:ae:d3:51:b0:e4:
aa:ff:b0:cd:bf:58:05:9d:22:51:8a:3c:f0:db:61:ff:ec:02:
7d:c9:e8:63:6b:62:1e:61:ee:be:0c:07:ad:67:01:4f:ca:95:
38:52:a9:16:f9:dd:18:e0:7d:2f:7d:48:57:64:47:f3:17:14:
98:bf:65:6f:af:c4:18:b2:ca:b2:fc:15:d6:7b:3a:7f:ca:b2:
e0:60:35:08:3f:6c:87:59:cb:2e:b8:6b:19:92:ce:3a:06:d7:
80:fb:d6:97:e7:11:e5:b7:c7:6c:94:35:06:73:c4:2e:c1:53:
49:a7:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org