Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a396330303a3a2f33382d3438203d3e20313939313836.roa
File: 326131333a646638373a396330303a3a2f33382d3438203d3e20313939313836.roa (raw, json)
Hash identifier: mYSdvzb9F1DpWZPOHYk8XOc3hs2d21k8NnBPSYhZVSA=
Subject key identifier: 51:6C:B1:6E:DB:BC:8C:00:EE:3E:D7:DB:B8:A0:33:6F:95:DA:71:C8
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 6F3A51495F4EE08205E26F14CCBAC3D9A69D8718
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a396330303a3a2f33382d3438203d3e20313939313836.roa
Signing time: Sun 10 Dec 2023 17:41:03 +0000
ROA not before: Sun 10 Dec 2023 17:36:03 +0000
ROA not after: Sun 08 Dec 2024 17:41:03 +0000
asID: 199186
IP address blocks: 2a13:df87:9c00::/38 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3a:51:49:5f:4e:e0:82:05:e2:6f:14:cc:ba:c3:d9:a6:9d:87:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 10 17:36:03 2023 GMT
Not After : Dec 8 17:41:03 2024 GMT
Subject: CN=516CB16EDBBC8C00EE3ED7DBB8A0336F95DA71C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:1e:3a:9a:ac:4a:c1:bb:29:db:60:84:a2:
5c:3e:d4:6e:9e:5d:f1:6d:56:cd:b1:ec:27:97:18:
31:f9:79:63:ba:a2:86:0a:b9:6c:20:5b:f9:02:4d:
ed:ee:8a:fb:cd:0e:5b:d8:72:1b:ac:86:77:67:69:
80:f7:21:cf:67:43:d7:76:29:4f:c3:b1:51:2f:6a:
12:ee:5c:61:5e:45:bf:8f:5c:bc:e4:c5:ba:62:18:
78:f4:66:be:a7:4d:98:1d:6c:11:b4:0e:be:a4:84:
3e:a1:fd:01:72:d0:87:00:b8:f0:18:c2:6f:98:95:
5b:77:8a:97:cb:35:f1:90:5e:58:35:63:ae:e2:77:
0d:d6:41:e8:9f:82:35:93:c2:33:ca:8d:d3:af:98:
02:4c:89:7a:eb:3d:b8:78:36:8e:69:71:e5:74:b6:
d5:9e:59:52:fc:74:d5:c4:fd:c6:70:6f:f8:d6:ef:
89:54:2f:7e:26:42:da:eb:70:d3:0b:44:11:31:b9:
04:20:7f:91:ab:1d:c7:69:7a:0c:ee:69:90:9a:7b:
ee:8a:20:03:be:03:75:0c:38:2a:f9:7f:ed:dc:b6:
25:fa:a6:f3:11:f3:45:a6:fd:51:ba:33:4d:80:4a:
62:3e:1d:bf:30:ec:10:7e:04:c7:e6:b6:b0:05:cd:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:B1:6E:DB:BC:8C:00:EE:3E:D7:DB:B8:A0:33:6F:95:DA:71:C8
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a396330303a3a2f33382d3438203d3e20313939313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
0c:60:16:91:bd:22:8e:57:92:87:a6:5a:e2:0c:1d:5d:81:6a:
5e:22:d8:a7:ee:fa:a2:e4:86:38:33:d1:1a:83:e4:bc:36:07:
cc:a5:e3:1c:ae:3b:90:d3:70:6a:3d:48:96:59:90:ff:30:27:
08:1f:3b:d7:a5:07:09:6b:39:cd:7f:e7:15:46:fe:ea:05:c6:
89:6a:f8:b8:fb:c9:59:66:e4:42:bf:0e:d9:f1:39:17:05:53:
4a:75:d8:80:5f:58:0d:72:65:7c:0b:b8:5f:34:da:58:4c:7c:
c2:a5:03:1b:1e:ef:b3:f8:5d:02:53:3f:52:90:22:50:fc:58:
fb:de:ab:cb:b3:9e:47:a2:e7:4a:0d:33:50:84:f3:65:ad:49:
fa:31:37:03:43:df:b2:31:3e:06:e6:e1:19:3e:06:85:59:a6:
bd:17:6a:3a:0f:7a:11:5d:b6:20:dc:4c:db:53:09:80:0e:6b:
9e:17:b9:e9:92:7f:74:04:fb:d5:00:4e:02:49:6e:db:12:19:
20:64:3e:af:76:e6:0c:21:00:28:5d:3f:d3:b7:72:86:29:67:
9e:f5:ec:d8:d1:73:0f:06:f3:ae:da:82:2b:00:72:db:6a:34:
a1:01:d2:42:cd:f8:3e:15:b0:c9:a9:d3:94:a8:df:f6:63:8c:
14:ba:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org