Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216301.roa
File: AS216301.roa (raw, json)
Hash identifier: +8rJzf7mR8dKdJdyjGrDXuZDNHDk/kdj/iiHLjcqUAA=
Subject key identifier: 9C:6A:56:41:FD:F3:40:4F:7B:85:D3:78:60:AE:99:8C:67:1B:22:44
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 052C1E19912DAA9CFB258C455CF5091932FADEA2
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216301.roa
Signing time: Wed 20 Dec 2023 16:22:09 +0000
ROA not before: Wed 20 Dec 2023 16:17:09 +0000
ROA not after: Wed 18 Dec 2024 16:22:09 +0000
asID: 216301
IP address blocks: 2a13:df80:6a00::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2c:1e:19:91:2d:aa:9c:fb:25:8c:45:5c:f5:09:19:32:fa:de:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 20 16:17:09 2023 GMT
Not After : Dec 18 16:22:09 2024 GMT
Subject: CN=9C6A5641FDF3404F7B85D37860AE998C671B2244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:a7:f5:7b:4a:b8:dc:43:dd:ed:4c:06:ee:
59:4a:ba:8f:1e:9d:e8:b8:1a:f6:e3:18:78:5e:85:
7e:6d:9a:bd:ac:02:d3:89:a3:25:d8:6f:35:e3:65:
3b:09:dd:3e:a5:93:88:9e:84:d5:ed:b5:22:04:4b:
a3:85:29:6a:59:df:34:f1:7d:5d:36:bc:c0:cc:67:
43:71:2e:be:43:11:dc:7f:42:a6:93:8b:19:30:31:
75:28:11:13:9d:d8:e8:aa:d5:96:62:06:e5:ed:9f:
6a:a9:6c:f5:30:6c:ce:32:6b:a4:e0:16:3c:80:86:
ca:42:8a:02:6f:0c:97:47:8a:de:4e:11:20:09:ca:
81:67:3c:23:cb:a7:29:c9:52:76:1b:87:2c:36:ad:
a6:bd:1c:17:b6:f1:4b:fe:cb:4f:49:34:6a:13:3f:
27:4a:c3:b4:ad:6d:5c:6b:57:f0:2f:c9:86:46:4d:
71:46:8b:61:a4:36:83:62:00:5b:7c:46:d4:0f:ff:
d4:90:27:df:ef:12:17:0c:b4:cc:90:ff:03:cb:5e:
5a:2a:a2:46:fd:d2:5c:de:12:8d:a3:54:d1:10:87:
b4:00:ef:33:6c:6e:77:2e:bf:24:99:c0:96:ab:21:
cd:7e:42:80:fe:2e:90:57:ae:c3:68:e5:07:de:8a:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:56:41:FD:F3:40:4F:7B:85:D3:78:60:AE:99:8C:67:1B:22:44
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:6a00::/40
Signature Algorithm: sha256WithRSAEncryption
66:3f:f7:db:01:80:2f:49:a0:89:f8:0d:d6:8f:32:c5:5a:dd:
06:ee:8d:40:10:57:46:05:66:f5:40:42:6e:ab:45:29:44:da:
c8:a4:e5:26:b4:15:d6:91:c5:6d:df:7c:3a:b7:59:4a:6e:00:
23:76:0c:b2:45:dd:06:58:eb:63:cc:4a:5d:58:4f:7e:2d:1e:
63:08:d4:32:90:c0:40:53:b4:90:8f:3d:84:1e:af:98:e6:13:
37:dd:f8:75:f7:50:f5:f1:e9:8c:c9:bd:0d:8d:0c:f8:4d:4d:
af:f6:fd:97:97:29:92:f4:25:dc:3a:ce:4a:22:0f:22:92:00:
b8:0e:e7:50:c9:aa:56:dc:60:b3:2e:85:25:c1:bc:79:3d:17:
ff:68:0c:33:06:b7:17:a6:cc:d1:fa:2f:50:65:a7:12:92:4f:
75:58:8c:c7:cf:d7:56:35:24:e3:29:da:0d:e7:ce:9c:4a:3d:
1e:d4:9d:4f:92:31:ae:55:ee:b6:d8:07:6e:bc:1b:0b:17:53:
92:d8:57:0d:11:9c:0c:23:d4:f1:a4:69:61:a7:d2:94:ed:c2:
2c:7b:6a:49:2d:48:4d:ba:ef:4a:9c:a9:3c:e9:67:ff:ab:5d:
f3:18:7d:bb:c8:7a:88:9d:5e:76:ce:2b:c4:a6:b9:ca:cd:0c:
ba:ea:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org