Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa
File: 326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier: 3uUVyn/sX7PgB7qXRNH7AOz48FE2QfVL+wmciDNKCQE=
Subject key identifier: 14:B8:A1:2C:A2:D3:9C:2D:58:2F:1F:11:C4:B3:A9:A5:72:24:19:BC
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 75D53A9494EE1C487D13FC323E701D0F0DB8189E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa
Signing time: Tue 19 Sep 2023 12:17:15 +0000
ROA not before: Tue 19 Sep 2023 12:12:15 +0000
ROA not after: Tue 17 Sep 2024 12:17:15 +0000
asID: 47496
IP address blocks: 2a13:df80:3816::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d5:3a:94:94:ee:1c:48:7d:13:fc:32:3e:70:1d:0f:0d:b8:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 19 12:12:15 2023 GMT
Not After : Sep 17 12:17:15 2024 GMT
Subject: CN=14B8A12CA2D39C2D582F1F11C4B3A9A5722419BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:89:32:65:30:0f:3b:58:20:95:1e:b7:8b:
9a:a0:fc:ac:bf:ec:bd:d6:f7:5a:8a:60:a6:8b:1f:
35:2e:c8:1d:ea:d9:c8:90:d7:86:34:fb:ee:ff:10:
8f:40:4f:50:f5:a0:77:26:a2:3a:85:c3:bc:32:be:
3a:d3:02:b8:8a:26:09:b0:d3:fc:42:b8:48:bb:e8:
d7:46:1c:c9:9b:be:a8:6e:ef:7c:0c:98:9b:aa:f5:
42:c6:5d:9e:e8:31:51:0a:bf:11:c9:b8:f0:d5:e0:
eb:9c:7e:75:50:07:24:1a:43:fb:38:2d:51:9c:7f:
70:2a:74:21:bd:43:b9:cd:b9:94:d2:00:04:d0:f0:
89:5d:66:1d:07:d1:2d:a6:ec:d3:f7:df:0d:9f:77:
3f:96:cc:fe:a2:d1:00:2f:b9:ca:d7:45:96:dc:f1:
8a:e5:1a:17:be:b2:02:c5:57:60:a4:27:38:90:a6:
15:ac:ec:61:85:b6:12:bb:f8:cd:8f:9f:ca:07:dc:
fb:bc:db:46:3d:f1:a4:d1:8f:3b:fa:0f:15:93:19:
74:19:5c:90:db:fb:56:b4:4d:a5:d5:47:95:76:a8:
a1:4d:3a:ef:71:e1:af:f1:ff:1c:69:0d:72:0a:45:
d7:ea:fd:28:19:b7:42:c0:b1:1e:d6:b5:96:72:9c:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:A1:2C:A2:D3:9C:2D:58:2F:1F:11:C4:B3:A9:A5:72:24:19:BC
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:3816::/48
Signature Algorithm: sha256WithRSAEncryption
3a:3f:ce:46:d0:db:0f:c3:4c:3f:56:f5:e7:c4:a0:00:6d:a2:
5d:2d:de:b5:0f:18:aa:76:7d:da:25:fc:7e:fd:77:56:6d:cb:
39:31:77:78:5a:f1:65:72:09:cb:1e:40:63:89:75:c1:39:f1:
08:35:a1:af:67:59:06:82:36:a1:84:94:94:d6:49:19:9d:c0:
c6:6e:08:f8:1c:05:8d:0a:e6:65:f9:e4:d4:06:e5:d3:5b:bb:
7f:4f:6f:ad:3e:06:f6:cc:ec:ef:7b:2c:22:61:ef:a5:1b:8c:
18:7a:ad:3c:2f:9b:be:25:20:14:3a:46:41:7f:1f:7d:f0:e6:
16:9e:2a:0f:c9:fd:71:6a:e1:21:fc:36:65:b5:f8:c5:d5:de:
e0:ae:fd:15:25:dd:27:70:32:55:fb:44:0e:70:e1:f9:72:c4:
50:d3:3e:5f:a5:a6:1b:2e:00:f6:a9:80:84:23:24:8a:bb:90:
1b:63:62:ef:f2:bf:cc:51:ba:67:54:4f:da:d5:4c:52:a6:16:
66:89:51:e6:6a:f4:fb:43:df:ab:fc:e7:36:90:ef:ca:de:6b:
98:0f:ca:58:d9:ef:67:68:bc:48:11:ea:50:ee:9b:19:63:eb:
e5:c2:8c:05:11:e6:d5:e0:5e:12:58:b8:9a:19:f8:1d:71:92:
80:71:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org