Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
File: 326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier: M6aueVh5Val49TppHNul4qwq9zu43hq8Ew6EOe42hdE=
Subject key identifier: 19:23:87:2A:31:F3:87:9E:AE:EC:AE:B6:55:9B:71:FD:E9:8F:00:46
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 7FD59F9C2AE6BEBDBA1F1299473D752997ECED3C
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time: Fri 16 Jun 2023 20:08:41 +0000
ROA not before: Fri 16 Jun 2023 20:03:41 +0000
ROA not after: Fri 14 Jun 2024 20:08:41 +0000
asID: 57870
IP address blocks: 2a13:df81:b00b::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d5:9f:9c:2a:e6:be:bd:ba:1f:12:99:47:3d:75:29:97:ec:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Jun 16 20:03:41 2023 GMT
Not After : Jun 14 20:08:41 2024 GMT
Subject: CN=1923872A31F3879EAEECAEB6559B71FDE98F0046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:ad:ec:8f:fb:eb:8f:c9:0a:95:66:4c:a6:
5b:ff:2a:48:47:5a:c8:42:bb:ce:a3:4e:46:73:a1:
eb:a0:ad:84:71:e5:5d:05:61:2c:b7:bd:ba:77:73:
6b:96:34:9b:5a:dc:dc:9d:e1:90:72:9d:a7:7b:b0:
44:9a:95:45:b8:eb:63:a8:81:d4:6e:be:bc:82:86:
a2:2b:98:7e:65:ec:39:1b:af:b2:bc:28:f4:09:a9:
e4:72:a0:e2:ec:86:90:49:5c:a3:e7:d3:ca:3e:1b:
a1:7a:98:ce:8c:74:d0:a4:54:44:0a:aa:7c:5c:7f:
55:ca:9c:cd:c7:69:37:0f:f2:99:bc:cb:a6:20:64:
b1:9a:13:78:f1:10:98:9f:62:a1:7f:a3:44:60:cb:
81:dc:71:eb:e0:4f:87:f2:1e:82:f4:7e:86:24:1b:
bd:0e:ad:95:b0:3f:60:fa:91:9c:0c:ab:a5:31:75:
bb:1d:3f:17:d5:82:1b:95:bd:30:e2:c3:a2:0b:aa:
6b:4b:61:00:29:a1:71:92:b3:bc:ed:cb:ca:4a:c9:
15:96:96:bb:91:37:7d:6e:f0:d5:70:ac:7b:54:07:
a8:7b:4f:36:ac:79:fe:cc:2b:a5:19:83:63:75:55:
43:8a:b0:09:2f:6a:40:ed:87:08:8f:e7:84:2e:cf:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:87:2A:31:F3:87:9E:AE:EC:AE:B6:55:9B:71:FD:E9:8F:00:46
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df81:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
05:0b:3a:36:cf:82:0e:06:de:af:6c:f2:eb:74:f0:08:56:4e:
8f:6e:bc:9f:88:9f:82:12:e7:b1:05:ba:c5:bf:5f:60:9a:1f:
e5:ee:54:0c:50:c2:5f:1c:c9:d9:ac:29:cb:a4:16:69:03:ea:
46:94:39:68:8b:b2:c0:8f:0c:ad:c9:d3:dc:67:46:2f:5d:e9:
42:f6:db:ba:b6:37:df:af:7d:e0:a5:97:b1:fd:29:39:c3:b9:
e0:b9:1d:dd:29:4b:cd:23:f1:e2:cd:e7:25:df:48:00:40:da:
5c:01:ac:27:db:db:a5:0d:c7:e8:00:54:a6:64:f8:7f:66:50:
53:2f:c0:54:b4:a4:98:09:b7:b7:88:9a:71:37:fb:51:a8:77:
58:87:16:d5:79:f4:c8:28:00:04:3b:37:4b:90:8d:59:ad:d3:
e1:1a:e4:12:58:75:53:d7:eb:da:8c:8f:c1:73:36:96:7b:1f:
99:58:95:e2:21:1f:ab:70:76:f4:74:a4:9a:be:30:17:15:4f:
4c:0a:f1:ea:5d:77:e0:c8:c6:88:b3:03:e3:09:ab:92:77:40:
80:16:8f:5e:c9:6d:a3:30:92:bc:1c:98:44:d4:11:b9:bd:27:
b6:07:45:ed:15:21:93:3a:2d:1d:b4:8f:44:ed:cf:cd:4f:db:
73:64:b5:68
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUf9WfnCrmvr26HxKZRz11KZfs7TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA2MTYyMDAzNDFaFw0yNDA2MTQyMDA4NDFaMDMxMTAvBgNV
BAMTKDE5MjM4NzJBMzFGMzg3OUVBRUVDQUVCNjU1OUI3MUZERTk4RjAwNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY1q3sj/vrj8kKlWZMplv/KkhH
WshCu86jTkZzoeugrYRx5V0FYSy3vbp3c2uWNJta3Nyd4ZBynad7sESalUW462Oo
gdRuvryChqIrmH5l7Dkbr7K8KPQJqeRyoOLshpBJXKPn08o+G6F6mM6MdNCkVEQK
qnxcf1XKnM3HaTcP8pm8y6YgZLGaE3jxEJifYqF/o0Rgy4HccevgT4fyHoL0foYk
G70OrZWwP2D6kZwMq6UxdbsdPxfVghuVvTDiw6ILqmtLYQApoXGSs7zty8pKyRWW
lruRN31u8NVwrHtUB6h7Tzasef7MK6UZg2N1VUOKsAkvakDthwiP54QuzxAXAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUGSOHKjHzh56u7K62VZtx/emPAEYwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMx
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzczODM3MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqE9+BsAswDQYJKoZIhvcNAQELBQADggEBAAULOjbPgg4G3q9s8ut0
8AhWTo9uvJ+In4IS57EFusW/X2CaH+XuVAxQwl8cydmsKcukFmkD6kaUOWiLssCP
DK3J09xnRi9d6UL227q2N9+vfeCll7H9KTnDueC5Hd0pS80j8eLN5yXfSABA2lwB
rCfb26UNx+gAVKZk+H9mUFMvwFS0pJgJt7eImnE3+1God1iHFtV59MgoAAQ7N0uQ
jVmt0+Ea5BJYdVPX69qMj8FzNpZ7H5lYleIhH6twdvR0pJq+MBcVT0wK8epdd+DI
xoizA+MJq5J3QIAWj17JbaMwkrwcmETUEbm9J7YHRe0VIZM6LR20j0Ttz81P23Nk
tWg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org