Route Origin Authorization
$ rpki-client -vvf rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3133312e302f32342d3234203d3e20323132373935.roa
File: 34352e3135352e3133312e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier: k5B5BYJkoQArZiWVpn32NS6EnEEYU4nBh/XwjtO/068=
Subject key identifier: C9:24:5E:3A:4D:4F:1D:B0:C6:34:19:2A:90:5C:CB:2A:5A:E7:3C:7D
Certificate issuer: /CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Certificate serial: 34BC66BA283845A599698F573D11ECAF0FE0005F
Authority key identifier: DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject info access: rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3133312e302f32342d3234203d3e20323132373935.roa
Signing time: Wed 08 Jun 2022 07:42:36 +0000
ROA not before: Wed 08 Jun 2022 07:37:36 +0000
ROA not after: Wed 07 Jun 2023 07:42:36 +0000
asID: 212795
IP address blocks: 45.155.131.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:bc:66:ba:28:38:45:a5:99:69:8f:57:3d:11:ec:af:0f:e0:00:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Validity
Not Before: Jun 8 07:37:36 2022 GMT
Not After : Jun 7 07:42:36 2023 GMT
Subject: CN=3082010A0282010100C810226426F62327322E06464DC21EAF3BE300E69FAAB252E290BFBF3484296586D18DF7186392CBF4E088E723AC08DD328ABEB9A6B5A9632A329A4D648E16783BE676C7EDCCEB80EA52516F77A40EC9DFA61155E396761B5E4A9D4F08726F51B0953D0BD0BA20AD2F886AE888B56869224835C470A3469D29592C4B8D8843A6B9BBAA48C5C44F9049928841C05F19D98FB7DCC7D6AD14658A69D91355869DC18F49A9F582FAAFE3A8318C74DA14077084A2A9125E636261F87FDAC9C09C1E48D34DF53DAF083DF3B42CEB8A9B13A4335553507B0308A9AFC1AA9BDA087E1F00A2F2ABC588DA00ECAC7BF7FC017B1A95BA8F962246CBB5E7AA86A24412B0B44F0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:22:64:26:f6:23:27:32:2e:06:46:4d:c2:
1e:af:3b:e3:00:e6:9f:aa:b2:52:e2:90:bf:bf:34:
84:29:65:86:d1:8d:f7:18:63:92:cb:f4:e0:88:e7:
23:ac:08:dd:32:8a:be:b9:a6:b5:a9:63:2a:32:9a:
4d:64:8e:16:78:3b:e6:76:c7:ed:cc:eb:80:ea:52:
51:6f:77:a4:0e:c9:df:a6:11:55:e3:96:76:1b:5e:
4a:9d:4f:08:72:6f:51:b0:95:3d:0b:d0:ba:20:ad:
2f:88:6a:e8:88:b5:68:69:22:48:35:c4:70:a3:46:
9d:29:59:2c:4b:8d:88:43:a6:b9:bb:aa:48:c5:c4:
4f:90:49:92:88:41:c0:5f:19:d9:8f:b7:dc:c7:d6:
ad:14:65:8a:69:d9:13:55:86:9d:c1:8f:49:a9:f5:
82:fa:af:e3:a8:31:8c:74:da:14:07:70:84:a2:a9:
12:5e:63:62:61:f8:7f:da:c9:c0:9c:1e:48:d3:4d:
f5:3d:af:08:3d:f3:b4:2c:eb:8a:9b:13:a4:33:55:
53:50:7b:03:08:a9:af:c1:aa:9b:da:08:7e:1f:00:
a2:f2:ab:c5:88:da:00:ec:ac:7b:f7:fc:01:7b:1a:
95:ba:8f:96:22:46:cb:b5:e7:aa:86:a2:44:12:b0:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:5E:3A:4D:4F:1D:B0:C6:34:19:2A:90:5C:CB:2A:5A:E7:3C:7D
X509v3 Authority Key Identifier:
keyid:DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3133312e302f32342d3234203d3e20323132373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.131.0/24
Signature Algorithm: sha256WithRSAEncryption
77:72:18:ea:2e:73:a8:07:c4:35:81:cb:24:48:c4:86:9b:ed:
38:22:50:6f:73:27:22:43:80:51:5e:65:a6:96:30:8f:ab:c1:
42:d2:da:98:5c:aa:68:14:d0:97:7e:51:93:64:e8:f1:b8:a7:
d4:70:ff:0f:18:ae:ed:b1:47:54:8e:02:ff:9a:91:63:d2:51:
12:be:6f:5c:9a:c4:97:e3:83:ee:68:71:45:ee:5e:10:56:62:
df:9a:e0:06:83:8f:fd:50:2d:e4:9a:d3:2b:22:a1:c2:a7:44:
1d:9b:8c:df:16:ff:11:6f:7b:bd:26:3d:04:97:5b:f2:b5:66:
3a:fa:c6:eb:12:7f:ff:47:99:63:59:e6:0d:b7:44:58:b1:21:
06:45:25:80:13:d4:de:e3:30:d4:cb:a4:60:bc:da:ee:26:f2:
55:98:90:c6:3f:23:85:a5:79:21:b2:b8:c3:b9:57:a9:d0:45:
ff:41:0d:c1:ee:5a:b8:aa:99:f9:99:10:9f:13:9b:42:2c:d7:
9b:c9:83:de:a1:2e:fc:ac:d4:c0:86:76:65:e4:cd:f9:a8:84:
c2:2f:59:e9:dd:53:a9:c6:c1:1a:40:32:55:05:8c:9f:9e:2a:
c6:54:ff:6d:89:9a:f9:80:8c:bf:d6:a0:da:9f:87:5e:2e:f3:
f5:7f:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org