Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a35343a3a2f34382d3438203d3e20323132373136.roa
File: 326131333a646638303a35343a3a2f34382d3438203d3e20323132373136.roa (raw, json)
Hash identifier: FQQ4dHvW+0pXjGJvC1ZEKwOQF6BL0j1BA08bhpvwekk=
Subject key identifier: F8:30:6B:F4:14:F2:4D:47:A7:7C:60:39:C4:F6:B2:CF:5B:F4:FE:34
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 110D844ED88F1C79386ADA3ECC141EBFA3A758E9
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a35343a3a2f34382d3438203d3e20323132373136.roa
Signing time: Sun 06 Aug 2023 09:27:52 +0000
ROA not before: Sun 06 Aug 2023 09:22:52 +0000
ROA not after: Sun 04 Aug 2024 09:27:52 +0000
asID: 212716
IP address blocks: 2a13:df80:54::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0d:84:4e:d8:8f:1c:79:38:6a:da:3e:cc:14:1e:bf:a3:a7:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Aug 6 09:22:52 2023 GMT
Not After : Aug 4 09:27:52 2024 GMT
Subject: CN=F8306BF414F24D47A77C6039C4F6B2CF5BF4FE34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:61:3d:ce:6e:0f:6d:c8:48:dd:2d:2a:89:
62:94:f8:88:18:02:d9:3c:07:d3:9e:df:85:ca:bb:
1f:6c:5b:45:05:d4:e9:66:9a:15:57:33:21:5a:4e:
96:59:df:f1:a1:dc:00:3b:2a:b6:d8:f6:e4:31:e3:
1b:37:fc:b4:c3:f4:23:c0:c4:70:7c:f2:75:1b:2e:
be:72:0a:20:df:48:84:88:f0:fc:94:b9:08:b2:2a:
3b:6b:70:49:3b:e4:bd:8e:ba:c3:84:c8:8e:24:ec:
7a:60:78:72:a9:6b:63:53:d6:40:53:04:e0:e4:0f:
31:64:ca:1d:18:49:ce:76:71:d1:a9:0b:11:a1:50:
9a:cd:62:18:b3:5d:7d:68:1b:a6:c5:d9:d0:35:82:
4a:f7:f4:07:2b:ae:13:42:9b:ce:86:1c:e4:8c:5a:
11:b7:00:bc:b2:87:2c:4a:80:e2:bf:29:f7:5a:1a:
43:07:60:69:a3:e7:9f:d2:32:2d:93:6c:2c:55:f6:
a7:62:51:76:2c:de:04:dd:e0:68:19:b5:d6:57:06:
7f:11:64:e6:91:d1:d0:4d:a0:3a:3b:2a:64:93:33:
fe:51:02:41:e6:9b:95:9f:ee:0f:fd:a9:f4:27:f7:
a3:84:93:2a:a4:5e:da:cb:36:98:32:66:db:28:d3:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:6B:F4:14:F2:4D:47:A7:7C:60:39:C4:F6:B2:CF:5B:F4:FE:34
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a35343a3a2f34382d3438203d3e20323132373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:54::/48
Signature Algorithm: sha256WithRSAEncryption
c8:de:7c:cc:65:30:c4:b2:3c:97:b5:68:7e:32:ce:2e:69:59:
26:07:81:ff:0c:cf:7a:6f:13:ef:15:55:dc:ff:74:16:db:b2:
fb:9f:cc:ab:ac:70:1b:ce:24:b8:bb:e3:e4:d8:50:75:84:cf:
2a:11:6a:3a:22:7d:02:d4:79:7a:d9:88:ba:0e:5d:9d:74:cf:
4c:e1:46:b0:0f:de:b6:4c:2e:96:8e:c8:ef:a7:fb:cf:23:1a:
3d:40:a1:84:09:47:1d:77:5c:d1:27:3c:7a:e7:51:e9:ff:1d:
58:7f:78:c5:d0:57:55:61:82:7a:3d:b2:8b:d7:4e:25:83:42:
c0:80:8d:cb:99:a5:0a:56:81:87:11:b2:d1:0a:55:bf:93:55:
a9:42:69:c5:a8:c3:8d:6a:ae:a1:c9:4e:2f:1a:95:e0:2e:39:
31:b7:06:fc:bf:47:23:24:d9:4e:74:94:31:c9:ec:c2:15:5a:
e9:46:4e:fb:65:83:c4:a0:65:9c:cb:9d:80:5b:5f:b4:3c:cf:
e7:6a:95:6c:a5:35:72:47:2e:be:0d:64:e3:c3:18:d9:46:9f:
33:f2:a8:e2:c4:ee:96:3b:32:02:ed:87:24:3b:13:46:d1:4f:
d7:df:71:34:0d:c5:92:ee:85:7b:bd:57:3e:99:db:a1:ee:9d:
12:2c:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org