Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa
File: 326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa (raw, json)
Hash identifier: y5BPIdnIfNtcrta512rdF71xljYsLXN6wntOV9IjZ/0=
Subject key identifier: 7E:9D:92:A1:0F:61:F8:EF:49:FE:48:48:CD:FD:6B:64:3A:14:5F:13
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 06D3990B2D0F52DC884FDEA917B941295A12245F
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa
Signing time: Tue 12 Sep 2023 16:03:54 +0000
ROA not before: Tue 12 Sep 2023 15:58:54 +0000
ROA not after: Tue 10 Sep 2024 16:03:54 +0000
asID: 216320
IP address blocks: 2a13:df80:6805::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d3:99:0b:2d:0f:52:dc:88:4f:de:a9:17:b9:41:29:5a:12:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 12 15:58:54 2023 GMT
Not After : Sep 10 16:03:54 2024 GMT
Subject: CN=7E9D92A10F61F8EF49FE4848CDFD6B643A145F13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:e0:01:ac:15:47:15:58:57:d1:94:cf:7c:
8b:67:a6:b1:ba:3f:66:4d:d2:fb:14:06:f0:98:f4:
fa:70:33:88:4c:f7:83:0f:00:51:4f:35:e2:fe:b8:
f2:83:8a:46:12:46:31:e3:e6:40:4d:bd:13:81:a7:
2e:ea:cf:9e:01:3c:ce:1b:31:5a:db:c8:64:8b:f8:
b1:86:4d:56:00:73:ca:5e:32:6b:9e:00:8b:68:fa:
92:f8:2e:43:aa:c6:01:ad:58:80:4d:44:19:04:24:
a8:94:22:f5:69:44:8e:df:de:90:d0:b9:78:4c:08:
0d:56:8b:95:da:06:34:e8:55:ce:ec:43:fe:93:29:
ca:4f:a4:07:7d:ad:68:b8:77:14:07:9b:44:0c:03:
35:a3:84:f6:3b:2c:a7:96:14:11:24:6d:1f:5b:da:
4b:3e:df:fc:15:44:27:40:35:c6:0f:c7:f7:89:14:
bd:69:f2:5d:6a:59:c3:37:a8:81:f5:4d:f8:0c:76:
9f:28:2c:5b:e1:51:7b:fe:df:5c:39:75:5d:be:ec:
fb:27:eb:ce:55:42:3a:04:77:45:35:58:e0:ea:fc:
0a:95:d1:4a:08:ae:6e:b6:16:0d:99:bb:35:53:9f:
3b:0d:fb:6b:e1:f7:b2:d5:31:84:fc:5e:4c:da:7b:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9D:92:A1:0F:61:F8:EF:49:FE:48:48:CD:FD:6B:64:3A:14:5F:13
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:6805::/48
Signature Algorithm: sha256WithRSAEncryption
1f:9d:9b:9c:63:66:a4:b0:52:0f:ad:41:02:1c:18:b0:c6:e0:
99:7f:f0:33:da:0c:98:e2:f8:56:36:86:64:c3:c5:55:9a:f3:
8c:3a:0d:72:dd:81:3e:10:20:25:36:fb:a3:9d:e7:09:3e:f1:
5c:31:94:80:2c:b1:45:dc:b7:1c:d9:df:ac:4b:6e:71:6f:e7:
47:c9:6b:79:b1:7d:8c:ba:70:8c:d8:c7:89:1b:df:72:e5:0f:
f9:2b:15:78:ea:8d:81:61:49:24:aa:82:d8:3e:16:26:4a:9a:
51:18:0a:d4:2e:72:c4:47:82:f8:9b:37:10:63:4f:02:cb:44:
76:90:ab:28:4e:2a:30:b9:6f:9d:73:24:cf:f4:55:68:70:9e:
f5:af:a4:d7:a9:8b:f6:55:03:c9:39:cd:0f:bd:d9:ae:c0:7f:
fc:b5:4e:bf:d6:70:6d:aa:74:9c:bb:2c:24:b7:8c:ed:0e:71:
77:b6:7a:fe:67:20:b9:6d:7f:55:2b:84:ee:a4:e7:f1:c5:c1:
14:39:f1:b7:fe:06:2d:93:7a:ae:ff:a3:38:98:d1:65:7b:97:
eb:17:b4:51:2b:2c:94:6b:92:4f:2b:1f:62:ce:c6:5d:2b:51:
67:8b:a9:30:7d:f1:fd:ce:d7:24:dd:6c:46:9d:c1:90:85:64:
51:c9:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org