Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa
File: 326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa (raw, json)
Hash identifier: 6eYmf6fKdcGKYDamZjHrkqBkAlbO+iI2XgKfZXiMjDk=
Subject key identifier: F3:EC:68:15:FA:E3:2F:48:71:ED:5A:CA:E3:D0:67:B6:D8:33:44:E6
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 49587D8E6A0347E65D723A0DDBA310F18DE48620
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa
Signing time: Tue 19 Sep 2023 11:32:26 +0000
ROA not before: Tue 19 Sep 2023 11:27:26 +0000
ROA not after: Tue 17 Sep 2024 11:32:26 +0000
asID: 216290
IP address blocks: 2a13:df80:1290::/44 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:58:7d:8e:6a:03:47:e6:5d:72:3a:0d:db:a3:10:f1:8d:e4:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 19 11:27:26 2023 GMT
Not After : Sep 17 11:32:26 2024 GMT
Subject: CN=F3EC6815FAE32F4871ED5ACAE3D067B6D83344E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:28:44:1e:2f:57:b3:d3:3b:a5:c1:a0:3f:
40:82:89:7e:81:f2:9e:c5:de:5e:5a:6f:9f:2d:94:
2a:1b:de:55:e8:26:ae:f2:5b:15:02:b5:dc:99:29:
80:65:bf:d5:3a:27:d7:87:97:e4:be:73:fd:f0:bb:
03:1c:7c:54:12:e6:92:dc:69:4f:85:da:b4:e9:6e:
d1:55:b9:84:0f:aa:27:f3:34:04:56:5a:35:bd:2d:
be:14:31:8b:6d:17:47:ea:c3:90:e2:50:bd:9d:5f:
19:76:46:13:57:2f:53:b1:af:ad:fa:eb:0a:ee:b3:
93:28:31:ab:a3:ac:81:4a:1b:fd:fa:7d:8c:ba:18:
22:98:be:54:55:97:ad:8d:4d:62:f7:59:a2:30:c7:
d5:a1:29:bf:8b:fd:29:ff:70:6c:be:9a:b6:36:b4:
1e:92:2d:26:5a:ad:81:f1:d1:5a:99:a6:b6:68:9a:
da:3e:ee:54:a6:75:7c:a4:9b:87:fb:96:80:a1:80:
42:3c:16:48:25:ec:a8:d6:1c:ab:9e:af:78:a8:3b:
b5:85:26:59:0a:21:3f:8c:b7:0a:02:79:da:f5:f6:
46:7a:1f:b7:6f:dd:cf:64:05:e0:d6:7d:3b:36:ca:
5a:1c:86:78:ac:a7:0f:83:53:20:60:77:2f:75:b0:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:68:15:FA:E3:2F:48:71:ED:5A:CA:E3:D0:67:B6:D8:33:44:E6
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1290::/44
Signature Algorithm: sha256WithRSAEncryption
6f:9e:df:ca:58:bd:33:2c:de:9b:f2:6c:3f:15:b3:ef:18:92:
d6:14:7d:24:c9:6f:7f:dc:6b:be:bd:a8:a8:04:80:cc:c6:f3:
2e:0d:b0:bd:0a:26:89:02:ea:29:aa:5d:e4:40:75:f2:ef:6e:
ce:20:13:7b:cd:83:f8:dc:92:8d:b8:97:db:91:ed:5f:f5:c3:
98:2e:81:47:25:60:25:06:c4:f6:a4:62:ef:5b:f7:ee:49:5e:
11:a2:26:71:ff:42:a1:38:63:cc:36:7a:a1:ba:fc:5d:af:21:
f1:06:90:6a:ad:fc:3f:62:dd:a4:d2:71:11:03:dc:c3:64:fb:
ae:b3:26:a3:77:05:f3:dd:b8:4c:8b:eb:a2:5a:f9:31:20:37:
9e:68:51:81:3a:ec:22:ac:d9:ad:9e:ca:fd:0f:35:03:10:09:
7c:74:e0:38:ff:7f:63:10:81:5b:47:4e:ef:12:11:18:a5:f4:
5a:cf:63:85:07:e6:78:f6:09:95:04:da:2b:04:c9:88:0e:aa:
3d:ab:21:bd:19:8d:19:ec:c8:84:88:bd:78:46:60:4d:b1:9b:
7e:f5:bb:d9:0c:b9:78:db:9a:bd:ad:14:8b:97:38:92:4f:c0:
c6:22:dd:dc:23:60:4f:1d:cc:5b:bb:9a:6f:31:6e:ed:90:71:
c7:4a:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org