Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS197464.roa
File: AS197464.roa (raw, json)
Hash identifier: +IBwUOTpmSbbEYCrHuPOG+cokL5IYmtMbWsrTc1b70s=
Subject key identifier: F0:1B:DB:25:FD:22:FE:8F:A1:A0:18:E0:70:9C:7A:20:32:31:8D:E2
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 2F2DFE496CAC949BC7313D97B7ECDC4412D146F2
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS197464.roa
Signing time: Tue 02 Apr 2024 18:23:35 +0000
ROA not before: Tue 02 Apr 2024 18:18:35 +0000
ROA not after: Tue 01 Apr 2025 18:23:35 +0000
asID: 197464
IP address blocks: 2a13:df80:b000::/36 maxlen: 48
2a13:df80:b000::/36 maxlen: 64
2a13:df80:b000::/38 maxlen: 48
2a13:df80:b000::/38 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2d:fe:49:6c:ac:94:9b:c7:31:3d:97:b7:ec:dc:44:12:d1:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Apr 2 18:18:35 2024 GMT
Not After : Apr 1 18:23:35 2025 GMT
Subject: CN=F01BDB25FD22FE8FA1A018E0709C7A2032318DE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:19:fa:59:51:3e:f0:5c:2b:f7:57:9a:42:
11:b6:1d:c4:0e:d7:63:fc:37:1a:70:c1:40:18:8c:
ec:f6:f1:12:94:4f:cf:db:3f:f7:dc:bd:2d:0b:aa:
2a:d1:ec:5f:4a:75:0c:c8:01:b7:3f:ed:81:22:c6:
ab:bf:bb:0e:bb:31:4f:30:5f:74:47:bd:e2:9f:fd:
46:38:8c:cc:19:17:97:14:9d:fb:19:f0:fa:52:6e:
c5:be:2b:c9:1e:64:af:76:5f:10:9d:1d:93:cd:26:
7b:f4:21:9f:96:92:24:1e:5c:4a:5d:e2:a0:1b:58:
13:00:31:1c:4f:0b:cd:c9:c3:c1:40:3a:71:6c:e9:
ad:18:56:1e:b8:3a:2c:a2:54:97:d1:1f:d9:9d:ad:
55:45:de:ad:80:41:2f:42:9f:5b:00:ca:ff:de:05:
76:01:a3:cd:9a:2f:1e:2e:47:d8:40:6d:c2:85:d4:
34:07:bf:d2:2c:9d:a3:ce:df:30:66:fb:50:47:71:
7c:18:a3:0a:c7:b8:bd:f2:7d:c1:76:de:ce:b3:e5:
ad:a4:6f:9a:92:2d:09:3d:9b:b2:d5:f2:d2:cb:39:
19:7c:6f:44:dc:6c:fa:3f:a0:89:8f:b2:20:46:47:
a0:c9:cf:0a:a5:f8:26:ba:1b:ee:84:0c:57:96:42:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:DB:25:FD:22:FE:8F:A1:A0:18:E0:70:9C:7A:20:32:31:8D:E2
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS197464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:b000::/36
Signature Algorithm: sha256WithRSAEncryption
5e:46:24:7f:a1:14:fc:7e:22:90:d5:47:95:88:0c:4c:14:d5:
b2:70:f3:e1:cb:b7:52:6b:16:77:44:cf:78:d1:57:3a:b2:84:
8d:db:92:15:85:bc:43:5e:44:5a:d6:7c:21:86:f7:27:f8:f9:
95:7e:ce:ba:84:f7:26:75:f0:39:69:92:ff:cc:83:ed:28:54:
9c:2f:ec:42:fc:3a:25:f1:78:73:88:c3:d6:e0:df:05:2b:b6:
61:d1:41:66:5e:72:07:40:48:fd:fa:55:67:04:88:6c:4c:6d:
1b:79:3b:7f:9b:10:e2:a9:3d:f6:23:68:52:2c:8d:21:99:cf:
e5:15:54:a6:57:a3:b4:e4:3b:52:c0:6e:d4:7a:31:b7:3f:fb:
c8:90:a5:4c:e4:05:14:44:91:07:24:d1:26:cf:3f:35:cf:d8:
12:1e:2c:62:dd:76:26:2d:61:ab:03:dd:fd:32:9b:d5:14:13:
45:01:20:33:04:90:74:9b:61:41:70:56:1c:b6:92:ec:93:ea:
2f:e2:ec:30:a4:6d:1e:74:4f:f2:0a:e4:f9:ce:70:33:fe:36:
1a:e7:a6:85:e6:29:36:9f:c0:19:8e:bd:1d:03:fc:5b:8f:60:
91:a9:0d:97:84:9d:70:e0:56:20:c4:af:99:f5:40:5b:ff:f6:
0f:48:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org