Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a623430303a3a2f33382d3438203d3e20323135393738.roa
File: 326131333a646638373a623430303a3a2f33382d3438203d3e20323135393738.roa (raw, json)
Hash identifier: DrFhWyg20VmrNOz2Eom6F4lxaAP9ereJeZP9AbGX66w=
Subject key identifier: 79:50:9E:EA:6B:E9:DE:FD:54:81:9B:3E:98:D1:AB:21:24:75:C9:B2
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 0BEC1CA95021F612EDEBB84A130FE10CD1CDC5D5
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a623430303a3a2f33382d3438203d3e20323135393738.roa
Signing time: Sun 10 Dec 2023 00:08:35 +0000
ROA not before: Sun 10 Dec 2023 00:03:35 +0000
ROA not after: Sun 08 Dec 2024 00:08:35 +0000
asID: 215978
IP address blocks: 2a13:df87:b400::/38 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ec:1c:a9:50:21:f6:12:ed:eb:b8:4a:13:0f:e1:0c:d1:cd:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 10 00:03:35 2023 GMT
Not After : Dec 8 00:08:35 2024 GMT
Subject: CN=79509EEA6BE9DEFD54819B3E98D1AB212475C9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:87:40:5b:3b:6c:de:d4:e2:29:60:ea:49:
6a:f9:ca:53:f5:2e:ba:45:27:8b:b8:b5:7f:e1:b8:
34:af:db:c9:a9:9f:19:02:45:dd:0e:5e:a1:05:1a:
3d:9b:db:31:e1:57:d2:4c:ec:11:a2:86:61:9e:b3:
56:a1:40:c1:ad:af:d2:3a:91:69:68:82:fb:e8:b4:
62:f7:b3:a2:9e:25:15:ea:39:14:b0:1f:a4:aa:e3:
84:7c:d7:c1:88:10:89:af:a4:a9:09:a9:5d:75:4a:
7f:5d:9a:ff:1d:68:4b:5d:17:90:1c:3d:a6:70:d4:
a1:c8:05:41:a0:41:6a:ee:1c:d8:81:e2:78:c3:6c:
bd:d3:19:9a:ab:3c:89:1b:ae:53:9f:f1:0e:b3:f9:
b1:d9:62:0c:10:32:3f:d0:6b:d5:bf:f0:f0:ea:54:
05:de:e2:12:e5:48:a6:5c:31:e1:20:a3:a3:14:c0:
05:6b:cf:ff:fa:8b:21:b4:dd:25:96:f4:4f:68:86:
83:c5:05:24:6d:70:d7:37:17:77:94:14:12:e1:96:
27:10:5a:53:83:66:0d:f9:9c:b7:99:2d:2a:00:06:
21:fc:f6:50:8c:3d:64:32:97:53:ce:a8:d0:1e:0a:
a4:9b:c7:e7:9e:2e:ed:f1:db:50:c3:13:de:86:60:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:9E:EA:6B:E9:DE:FD:54:81:9B:3E:98:D1:AB:21:24:75:C9:B2
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a623430303a3a2f33382d3438203d3e20323135393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:b400::/38
Signature Algorithm: sha256WithRSAEncryption
a6:21:c2:98:29:d7:8b:78:54:79:83:e7:77:ef:06:51:f7:9a:
1e:9a:1a:25:a3:0b:b2:b4:fb:70:63:24:2c:d3:d4:01:86:7a:
01:97:38:d2:2a:03:1a:56:8a:fc:d0:6a:76:0b:e9:b7:2c:77:
46:f2:10:2f:8f:cd:30:01:2d:ed:8b:1c:6b:b7:e6:a5:1c:d0:
ec:d6:9d:04:98:3a:e5:da:11:78:58:de:d8:20:b3:46:d4:0e:
1c:b8:89:37:c1:96:5c:35:32:d4:f7:2b:22:1e:bc:b4:07:46:
23:2a:bc:03:d5:9c:0c:b2:20:29:c5:6a:27:18:c9:e5:a2:a0:
30:aa:8e:38:f4:c0:9f:07:e0:e5:d6:e0:be:a4:ff:7f:71:b7:
33:66:a4:3f:ff:4e:7e:a4:8b:70:f6:17:32:3a:8b:d5:ff:a8:
84:f9:e0:f8:76:34:88:ec:70:72:c5:24:9a:6d:cc:e5:ba:bc:
d8:ac:1f:db:34:37:ce:55:94:0c:52:9a:83:b4:24:75:87:fb:
43:19:67:37:0b:1c:65:6e:27:a5:b1:3d:22:4c:27:19:ad:de:
56:cc:68:2d:b5:70:7e:63:eb:6f:d8:cc:00:e8:2c:b4:cb:2a:
ef:fc:24:36:17:a2:ec:11:ab:f2:f9:a9:35:e5:40:86:a6:1f:
f9:b8:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org