Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626630303a3a2f34302d3634203d3e20313939373633.roa
File: 326131333a646638353a626630303a3a2f34302d3634203d3e20313939373633.roa (raw, json)
Hash identifier: 1IVFUPBQ/0wOkBEQcMZDSQZPR6e+JitFunQ+btkX5Po=
Subject key identifier: 29:F8:41:8F:73:37:66:34:DD:AA:40:09:78:D7:11:F4:FD:53:D7:78
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 70A7C122B325D104EBB6B4C4D559C7A8BD9D0158
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626630303a3a2f34302d3634203d3e20313939373633.roa
Signing time: Tue 05 Dec 2023 22:18:37 +0000
ROA not before: Tue 05 Dec 2023 22:13:37 +0000
ROA not after: Tue 03 Dec 2024 22:18:37 +0000
asID: 199763
IP address blocks: 2a13:df85:bf00::/40 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a7:c1:22:b3:25:d1:04:eb:b6:b4:c4:d5:59:c7:a8:bd:9d:01:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 5 22:13:37 2023 GMT
Not After : Dec 3 22:18:37 2024 GMT
Subject: CN=29F8418F73376634DDAA400978D711F4FD53D778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:07:55:0f:c7:e5:c0:d6:4d:2a:24:f2:2f:d3:
24:b0:52:02:0a:40:17:71:5e:a3:2c:60:b7:0d:f4:
00:63:a5:5a:13:2a:57:5b:84:ac:63:7c:ab:1b:c0:
e0:fc:30:71:09:d5:0b:60:47:bc:43:07:0c:4a:4b:
23:28:30:52:54:9c:8e:8e:dd:f2:6d:19:1e:1f:b9:
96:6c:ad:a3:f2:28:58:49:55:a8:29:4c:80:bb:4f:
a1:66:90:81:e5:cf:2d:8f:63:eb:ed:9b:48:75:cc:
e3:12:0c:6b:b7:77:74:19:1b:2d:d8:ac:8c:48:4c:
e6:13:2f:bc:8c:de:cb:c7:1b:85:b4:ba:38:da:05:
95:3e:7b:07:c0:79:d0:8a:c0:53:4b:b7:2b:87:d3:
cc:e3:e5:86:68:94:71:2e:2f:e7:dc:00:a1:3c:a7:
e7:4f:fc:41:5e:70:e4:0f:1f:23:fa:71:6a:89:fc:
82:f1:1c:5c:40:29:e3:d3:aa:dd:5b:39:4a:2a:3a:
15:3d:2b:0c:aa:d4:80:53:d4:d6:73:67:80:f5:40:
6c:8a:02:40:2b:c2:0f:ca:35:1b:ad:b0:25:c4:d1:
87:29:60:d5:c4:c1:04:73:60:98:8c:89:d0:5c:d1:
bd:42:10:8d:40:44:b6:e2:1c:9e:c1:46:65:7d:5e:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:41:8F:73:37:66:34:DD:AA:40:09:78:D7:11:F4:FD:53:D7:78
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626630303a3a2f34302d3634203d3e20313939373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df85:bf00::/40
Signature Algorithm: sha256WithRSAEncryption
a7:9f:54:c9:1a:80:9d:9d:62:a8:1a:6c:38:54:a9:0c:06:29:
d1:24:1e:bd:e8:ae:58:1a:34:f8:48:c3:95:1c:ea:3a:bd:1b:
5c:5c:48:84:73:c7:94:5e:b8:9b:f9:02:78:f1:c1:d4:53:03:
c7:a8:63:ee:2c:58:b3:f7:58:1b:a4:06:b7:8d:71:71:25:ba:
6a:1d:bf:d5:b4:d9:e9:7a:81:ee:21:8a:20:2f:bb:c8:69:e3:
1c:24:02:fd:63:1a:f8:c7:dc:42:16:e6:cf:2f:d0:1d:0e:4d:
56:3f:66:bc:f2:e3:f1:6f:d2:87:ac:29:e2:1e:59:45:af:9e:
c5:14:e1:fa:bb:29:1d:59:9a:8b:bf:4c:9e:9c:9b:04:0e:1a:
d9:41:35:7a:9b:07:ae:57:e8:af:14:c9:32:1d:1c:eb:17:b8:
c0:57:ba:a6:e3:6d:75:00:c5:0e:c6:e3:13:5c:5d:c1:1c:7a:
f5:71:c1:6f:e0:f8:f8:18:51:ee:32:d6:38:bd:01:2d:77:f2:
cc:ad:a3:b7:79:d5:4a:37:00:d9:6d:bb:1d:58:03:63:f8:fb:
38:63:9e:f8:11:b7:26:02:5c:05:ca:c8:6f:18:26:d1:22:b8:
90:c3:eb:3d:67:c9:74:7c:28:6d:12:fa:d8:7c:8c:0f:40:fe:
7a:38:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org