Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa
File: 326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa (raw, json)
Hash identifier: Jp9Uelo4SRn5TyGuF8wDkz4qExcSSZu4sZUXtb3Qk6g=
Subject key identifier: 1A:E5:A8:13:7A:FF:C8:19:FC:67:90:BC:35:CA:4F:36:48:AD:A4:31
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 585346612BB50EE781A2F435DA382526D7E4659F
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa
Signing time: Mon 18 Sep 2023 09:44:08 +0000
ROA not before: Mon 18 Sep 2023 09:39:08 +0000
ROA not after: Mon 16 Sep 2024 09:44:08 +0000
asID: 215304
IP address blocks: 2a13:df80:dc00::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:53:46:61:2b:b5:0e:e7:81:a2:f4:35:da:38:25:26:d7:e4:65:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 18 09:39:08 2023 GMT
Not After : Sep 16 09:44:08 2024 GMT
Subject: CN=1AE5A8137AFFC819FC6790BC35CA4F3648ADA431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:72:eb:7a:ae:75:6e:f9:34:97:1c:b9:78:
38:05:5c:72:db:60:44:08:09:71:6c:4b:58:31:5d:
cf:99:2a:04:fe:f3:80:f6:cc:cf:14:eb:64:52:fe:
86:f1:b1:9f:56:91:5d:96:4d:ba:c6:21:7b:ea:b5:
98:9b:09:1d:c7:55:f6:af:e7:c4:c6:0b:fc:d7:0d:
ff:f3:5d:ea:02:d8:b6:60:d1:8b:1b:cc:1f:4b:6c:
a0:c4:f4:e8:48:b6:b9:e8:69:56:10:bb:d2:36:55:
b6:08:1c:34:bf:1f:1e:e8:9f:a9:ad:89:8e:6d:24:
b3:4b:62:e4:b1:9d:24:2c:c5:de:e0:39:d2:5e:30:
b0:da:ff:db:a3:40:cf:1b:c0:b1:fc:07:c1:45:c1:
8b:d6:fa:67:e7:68:b4:76:4f:63:30:87:ea:58:ac:
7b:44:75:35:4c:be:ca:dd:24:98:df:f5:0e:28:28:
9c:61:f4:a1:ba:bc:c2:f7:0a:f4:47:76:b0:89:b2:
1b:31:de:67:a5:27:34:09:dc:94:87:6f:9f:46:e2:
ea:2b:ce:cb:62:e5:63:53:2a:7e:8f:a0:41:9b:ca:
6e:cb:46:d2:4c:23:c9:13:73:7c:1e:55:d6:84:6c:
de:9d:55:4b:39:b6:55:ca:5b:52:da:b5:9c:60:b8:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:A8:13:7A:FF:C8:19:FC:67:90:BC:35:CA:4F:36:48:AD:A4:31
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:dc00::/40
Signature Algorithm: sha256WithRSAEncryption
bd:77:05:36:69:35:cf:92:73:b1:03:47:f5:e6:d6:1d:1b:35:
2f:71:ef:1e:f6:e9:0d:44:82:5c:0c:f6:40:15:22:1b:db:f9:
84:5d:ff:8a:4d:ee:ac:58:3d:81:7a:aa:ea:32:f8:62:eb:ab:
b7:b3:19:0f:db:51:12:6d:1a:73:6f:4c:85:a7:5d:21:cf:a7:
e7:40:6e:58:e6:2f:ed:90:84:0c:36:3f:93:18:94:6f:aa:9f:
8f:b6:b9:f4:e2:8b:34:15:39:4c:45:14:41:a9:e7:12:42:6e:
ea:5d:7a:70:63:cd:52:46:23:77:7c:12:a7:ee:22:83:14:b2:
70:30:2f:56:d3:ee:87:0b:d5:37:2c:f6:70:97:a0:af:54:90:
e2:e3:48:ed:2a:3c:f2:54:58:c9:6f:ff:24:98:2c:fd:56:37:
49:e5:5c:62:32:e1:46:50:d8:c3:14:71:53:8f:5b:96:22:b0:
ea:b1:6b:c3:9e:61:90:67:44:e4:ff:c8:e6:dd:46:68:d4:1a:
7c:fd:90:6e:86:f3:f2:1b:ef:a5:e7:71:a5:61:5e:67:bd:f0:
2b:50:fe:9e:91:78:ca:9a:2c:ff:c1:c1:4b:dd:0e:cf:e5:cf:
ae:d6:9c:87:a6:70:03:bf:04:d0:f0:20:2b:9f:32:54:57:10:
c2:b6:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org