Route Origin Authorization
$ rpki-client -vvf rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3132392e302f32342d3234203d3e20323132373935.roa
File: 34352e3135352e3132392e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier: BvXzFQ0SciLMZxWA/sPlLwmuDinC0a41+xjwfQSPUXI=
Subject key identifier: 5C:05:56:13:EE:89:DE:49:81:19:5C:AA:7C:21:63:73:A3:EA:69:06
Certificate issuer: /CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Certificate serial: 62642CC88C3760CB5FE52DD1F5DC2215608D9FF3
Authority key identifier: DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject info access: rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3132392e302f32342d3234203d3e20323132373935.roa
Signing time: Fri 10 Jun 2022 08:39:13 +0000
ROA not before: Fri 10 Jun 2022 08:34:13 +0000
ROA not after: Fri 09 Jun 2023 08:39:13 +0000
asID: 212795
IP address blocks: 45.155.129.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:64:2c:c8:8c:37:60:cb:5f:e5:2d:d1:f5:dc:22:15:60:8d:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Validity
Not Before: Jun 10 08:34:13 2022 GMT
Not After : Jun 9 08:39:13 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:f7:e6:91:87:00:3e:41:3c:7c:ff:a4:20:
b3:3b:b7:7f:19:0c:fa:23:89:70:7c:f4:5b:f7:7d:
1c:6a:27:bc:8d:1a:05:0c:b2:26:16:6f:d9:1e:20:
69:b5:77:c6:43:24:12:24:a8:b8:75:95:64:de:11:
66:b4:b8:60:c1:8b:eb:5f:20:c6:4f:d6:ab:ee:11:
70:a5:e9:b9:45:1d:c1:70:14:cc:aa:f6:0a:9a:a0:
9f:a5:0e:20:6e:c4:6f:92:65:f7:2a:87:12:bc:72:
ac:84:d6:1e:aa:f2:5e:88:27:e8:45:4d:83:dd:34:
1a:bf:12:1c:e8:20:a1:de:b2:89:d2:5e:ed:8e:35:
69:24:88:71:78:a5:2b:14:90:d0:ac:fd:0e:46:bb:
c4:83:8e:23:a5:2c:1a:b0:5a:85:83:5a:e9:37:de:
48:20:24:81:0a:f3:f7:72:38:24:5d:83:94:4f:48:
80:b2:bf:58:f3:75:ee:71:43:5f:07:d0:34:25:60:
a1:02:b1:b1:63:c8:d2:d6:2d:c1:66:9b:96:9b:fa:
b7:90:26:dc:86:fa:c3:87:16:d0:0e:1d:3d:58:7d:
50:2c:18:09:1a:26:a4:06:00:10:6d:0b:fc:ae:7c:
e2:4b:2a:e7:e1:f2:14:0d:60:f7:7b:6c:0e:df:76:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:56:13:EE:89:DE:49:81:19:5C:AA:7C:21:63:73:A3:EA:69:06
X509v3 Authority Key Identifier:
keyid:DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3132392e302f32342d3234203d3e20323132373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c6:29:3d:52:c8:43:1c:5f:f4:9a:8c:a0:f5:09:cb:21:e8:
88:1e:79:44:13:33:80:e0:1c:ec:ef:9f:8e:d3:11:08:ea:4f:
a9:40:5f:d9:a3:ae:d8:11:a0:23:7d:6c:0b:1a:10:15:85:42:
f4:5a:78:4d:5b:c7:7c:93:71:89:47:d9:ed:55:f7:39:34:8e:
b2:87:ae:d2:1d:ac:d2:02:c5:05:03:f8:b3:56:ae:71:30:84:
72:f3:11:85:81:7f:92:b9:2f:e9:78:5c:f9:74:25:8f:f5:22:
ae:12:89:30:08:6f:ba:47:7c:3d:08:27:7a:85:0d:69:dc:01:
33:9f:aa:d9:ff:23:09:dc:f6:84:c1:4e:2e:8a:37:fe:10:7c:
99:ca:10:40:58:24:3b:2d:03:f8:41:ba:77:5e:91:fc:19:62:
bf:c3:a4:1d:c1:f6:1a:3d:e8:37:69:10:a9:98:f0:f7:ee:71:
e1:38:bc:87:0f:e3:4b:b9:c4:fd:22:a2:09:63:88:9d:61:82:
d9:af:46:6e:c3:42:b7:42:1b:70:19:be:43:26:1c:2b:e6:8d:
ce:fa:db:3a:96:b4:85:b6:60:ba:df:86:e4:a8:62:80:09:bb:
16:94:05:cd:a8:a9:87:a2:c3:90:32:ec:e4:2b:81:95:b4:b0:
32:0f:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org