Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313335303a3a2f34342d3438203d3e20323037323532.roa
File: 326131333a646638303a313335303a3a2f34342d3438203d3e20323037323532.roa (raw, json)
Hash identifier: u6fALr9b/4Frsu3GPX8v4+FwdUmvL2Twc/eY4TYFNzE=
Subject key identifier: F7:A6:C1:2E:A3:91:6E:F7:B9:73:3B:36:E5:54:B1:3E:BB:6A:AA:EE
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 17324E3AA98A8621FA4B3A19D96FDD8C9C6F519E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313335303a3a2f34342d3438203d3e20323037323532.roa
Signing time: Tue 07 Nov 2023 14:56:27 +0000
ROA not before: Tue 07 Nov 2023 14:51:27 +0000
ROA not after: Tue 05 Nov 2024 14:56:27 +0000
asID: 207252
IP address blocks: 2a13:df80:1350::/44 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:32:4e:3a:a9:8a:86:21:fa:4b:3a:19:d9:6f:dd:8c:9c:6f:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Nov 7 14:51:27 2023 GMT
Not After : Nov 5 14:56:27 2024 GMT
Subject: CN=F7A6C12EA3916EF7B9733B36E554B13EBB6AAAEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:69:35:b6:75:86:0d:b6:26:13:f2:7c:f9:cb:
4b:12:ce:77:e3:e6:cf:8e:5b:07:16:a6:29:d8:70:
94:3b:d2:70:df:07:f6:ea:f9:1f:2c:c4:99:ef:89:
ef:f8:83:76:54:ba:40:16:f7:c7:16:11:68:ae:ee:
f9:5e:7f:5b:96:de:0a:ce:2a:92:66:ef:42:0d:9d:
92:2c:4e:59:db:ab:a7:fe:5c:b4:01:00:77:24:ae:
b1:e8:36:44:ea:74:87:ce:ad:f1:e6:0e:9a:c8:8b:
81:81:53:ee:09:3e:ff:04:7e:f8:eb:fa:bd:ea:1a:
87:bd:85:03:25:99:a3:89:3c:60:fd:d0:6a:76:2c:
f8:ca:d2:0f:92:6a:6a:bb:0a:4e:46:6f:7b:ef:cc:
4f:fd:30:ed:a6:12:f2:41:94:e6:3b:7e:78:5f:c2:
7e:34:b9:7f:ae:15:e7:d4:5a:cf:42:e2:57:28:68:
e6:46:d6:5e:ef:db:5e:b0:66:0c:f8:4b:81:82:fd:
1d:32:f4:6e:c1:76:0a:e8:e0:d0:1d:29:d3:6e:25:
a9:16:b2:e0:13:dc:c7:bc:f3:4b:e6:bb:a6:9b:00:
fa:79:4d:9d:b4:a4:65:3c:35:67:1a:5f:9b:91:dd:
d0:a0:67:9e:97:c6:a8:6a:96:29:2f:4a:84:f9:ba:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:C1:2E:A3:91:6E:F7:B9:73:3B:36:E5:54:B1:3E:BB:6A:AA:EE
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313335303a3a2f34342d3438203d3e20323037323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1350::/44
Signature Algorithm: sha256WithRSAEncryption
20:8a:53:81:48:29:fa:9c:2f:2c:77:17:58:de:89:c6:84:fb:
b9:a5:49:dc:b3:de:a8:34:a8:ea:0a:d8:89:01:4c:c8:dc:c4:
7d:38:a0:b4:6b:d3:9b:0b:e2:72:24:f8:2a:8e:03:df:9b:95:
73:54:af:85:8e:2b:cd:eb:e0:db:3e:ef:20:09:9a:17:bb:0e:
ea:39:70:5d:95:2d:6b:be:6f:d5:4a:30:fc:67:9d:b9:4f:dc:
ca:28:58:e1:5d:ff:eb:70:a5:ff:62:ab:c7:c8:6e:20:12:4a:
01:f3:25:53:a3:79:cb:98:78:41:70:17:3e:b7:26:e5:57:bf:
e0:a9:d5:67:bc:11:23:e5:56:7f:3d:df:b6:7a:6b:99:33:ba:
85:91:03:0b:ec:e2:d3:b0:ad:c8:44:25:f4:cd:12:41:40:79:
fd:85:af:59:44:4d:a3:dd:74:75:94:38:cd:fc:05:67:f5:ad:
06:a5:3a:c9:76:6b:af:1c:be:66:1c:97:98:cc:bb:53:6d:fe:
7c:66:9c:e6:bb:29:e6:87:62:d1:07:cd:8f:38:ba:3a:04:6b:
8a:54:25:d6:7e:48:d9:31:fa:73:e4:99:33:88:a5:95:c0:6b:
b1:e8:14:0a:b4:fa:af:c5:96:3a:c3:a6:74:ab:2e:35:91:85:
4b:92:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org