Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a666630303a3a2f34302d3438203d3e20323035343332.roa
File: 326131333a646638323a666630303a3a2f34302d3438203d3e20323035343332.roa (raw, json)
Hash identifier: xiKZy0mfKRkDy/6gQ9qEfGvCdUA9y+dR6igrvBkpTO0=
Subject key identifier: A9:97:26:97:83:FE:B8:15:F0:21:CF:2B:3B:A4:03:34:38:29:42:E6
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 3B493D5F1989B1E06802FAB562C46CFFA2417C5D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a666630303a3a2f34302d3438203d3e20323035343332.roa
Signing time: Sat 05 Aug 2023 16:22:42 +0000
ROA not before: Sat 05 Aug 2023 16:17:42 +0000
ROA not after: Sat 03 Aug 2024 16:22:42 +0000
asID: 205432
IP address blocks: 2a13:df82:ff00::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:49:3d:5f:19:89:b1:e0:68:02:fa:b5:62:c4:6c:ff:a2:41:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Aug 5 16:17:42 2023 GMT
Not After : Aug 3 16:22:42 2024 GMT
Subject: CN=A997269783FEB815F021CF2B3BA40334382942E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:f8:55:aa:fe:a1:fd:47:88:a5:9a:67:6a:
e5:fc:e8:7f:2f:16:1e:d8:53:09:2f:55:c7:9e:3a:
8c:2d:e4:a0:18:0a:c5:8e:fc:b8:47:98:89:5a:1e:
75:46:02:c9:d4:93:99:90:77:38:45:2f:4d:bc:c4:
33:42:18:28:09:5b:29:b8:21:b2:b7:ca:e6:7d:c1:
3a:e1:37:8e:37:d2:40:c2:28:52:d0:b9:5f:30:17:
17:03:2d:27:6c:0c:4b:ea:08:9c:29:ee:2e:1a:38:
45:0e:36:cc:39:e0:1e:52:03:ff:1e:de:a7:23:dd:
9d:e5:25:ce:e0:ef:a4:69:a5:52:40:96:e4:17:5b:
2f:84:5c:0a:69:50:9d:0e:44:7a:92:32:a4:95:14:
39:f5:e3:58:8b:83:c1:44:4e:11:43:53:3d:af:07:
e6:b1:d3:fe:66:ca:d2:82:13:8e:72:f6:68:82:91:
33:64:f1:d3:19:1a:72:a8:d7:99:dd:6c:ed:e3:69:
48:0d:26:07:a0:dc:00:56:05:15:2b:70:49:09:c4:
85:00:bf:c8:ce:b6:d2:78:55:97:21:97:b1:0a:d6:
0b:28:da:6a:cd:b0:18:1e:5f:01:71:62:f5:b6:57:
b8:0e:f3:78:cb:bd:16:9c:dd:71:a7:b8:a6:e6:39:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:26:97:83:FE:B8:15:F0:21:CF:2B:3B:A4:03:34:38:29:42:E6
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a666630303a3a2f34302d3438203d3e20323035343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df82:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
c8:1a:ec:5d:02:13:90:7c:eb:a0:43:c4:38:fd:42:c1:6b:75:
52:c0:25:ff:75:27:c5:97:ae:25:10:db:f9:46:1e:d1:c1:39:
b1:04:84:00:65:0a:dc:66:7e:c5:a9:a1:4e:f5:c6:0d:e2:0f:
9f:a1:82:9f:a1:a5:7d:88:40:27:9d:2e:5d:9c:7b:dc:bb:57:
f6:27:f0:e8:bc:ed:6d:08:98:75:43:06:64:a3:67:17:27:8b:
51:de:31:ea:25:98:c2:96:aa:73:d0:6a:ec:8b:cc:1e:78:5e:
12:65:9a:7f:be:63:36:63:86:60:e5:f1:91:f9:98:c0:0e:5b:
6e:da:2c:4d:50:60:91:b3:3e:2b:d5:ef:ff:e2:f2:df:1f:fc:
86:d5:63:ce:f9:7e:d7:9d:b4:64:2a:16:23:9e:2e:2b:06:da:
95:d1:d0:a2:2e:62:33:07:86:9c:bf:48:a7:08:8a:42:60:3e:
1a:58:d2:79:8f:c8:06:5a:dd:94:69:1d:8e:58:85:34:cb:f3:
5a:69:bc:04:be:8a:2f:65:d2:b9:13:72:fc:21:81:4e:7e:73:
d2:c3:75:a8:7e:20:1a:fa:89:d9:db:8a:01:7a:96:75:cf:6a:
c7:ab:ea:38:3c:59:29:4c:bf:27:c2:3f:18:6d:5a:fa:64:a3:
01:ec:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org