Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383030303a3a2f33382d3338203d3e203439313935.roa
File: 326131333a646638303a383030303a3a2f33382d3338203d3e203439313935.roa (raw, json)
Hash identifier: H6z6cYz90/ayoBMB9l+utGx3lDbpUpHpIFcwkSNMM7c=
Subject key identifier: 7E:E4:92:C4:A5:88:1F:33:EA:FE:89:55:40:81:23:52:54:22:4B:03
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 2443AE457F0A04F22721BCE00A84AA722B0AF30C
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383030303a3a2f33382d3338203d3e203439313935.roa
Signing time: Thu 24 Aug 2023 16:05:25 +0000
ROA not before: Thu 24 Aug 2023 16:00:25 +0000
ROA not after: Thu 22 Aug 2024 16:05:25 +0000
asID: 49195
IP address blocks: 2a13:df80:8000::/38 maxlen: 38
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:43:ae:45:7f:0a:04:f2:27:21:bc:e0:0a:84:aa:72:2b:0a:f3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Aug 24 16:00:25 2023 GMT
Not After : Aug 22 16:05:25 2024 GMT
Subject: CN=7EE492C4A5881F33EAFE89554081235254224B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:bd:6e:01:c0:75:d7:76:bd:5b:9d:e5:7a:
6f:d9:e6:4a:31:8e:f1:c0:87:6d:ce:2f:81:9f:17:
12:14:17:08:72:cd:a0:62:ba:9d:58:d3:f7:d0:35:
1f:b9:15:42:73:f8:a0:14:8e:d1:b8:a8:84:09:1f:
8b:f3:27:36:97:21:d5:28:a2:59:17:af:77:6b:c2:
47:7b:50:23:ea:66:40:8a:73:16:a1:13:a4:9f:f7:
eb:b0:76:06:a4:c6:54:20:22:0a:5a:11:cf:77:f6:
39:d3:89:dd:d3:f3:00:f5:d3:7b:71:ee:45:a2:ce:
f9:85:a9:f1:09:81:18:69:4a:5b:bc:a5:2b:74:d6:
ac:2d:e8:ac:18:80:aa:a3:06:36:b0:fd:3f:35:93:
0c:d7:57:c8:06:15:45:70:4e:cb:07:cf:83:13:aa:
c3:a9:8e:d6:14:dd:0d:37:e2:9c:bd:b2:26:35:7f:
0c:ca:ea:99:73:f9:51:5c:48:13:ba:c2:75:ba:ac:
0c:cd:f5:a6:5d:26:c1:94:d2:13:f6:eb:1d:cc:f9:
83:3a:b6:ef:1b:f5:ce:7f:73:58:df:cc:9f:13:7e:
20:99:05:8f:a3:31:63:d6:1c:85:19:8e:a7:e8:c5:
c8:46:47:86:42:d7:f9:33:e9:d6:48:02:1e:2c:8d:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:92:C4:A5:88:1F:33:EA:FE:89:55:40:81:23:52:54:22:4B:03
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383030303a3a2f33382d3338203d3e203439313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:8000::/38
Signature Algorithm: sha256WithRSAEncryption
3f:ef:f8:47:0c:7c:70:99:b0:9d:99:c1:27:00:1c:10:6a:ee:
52:34:28:23:54:e0:4f:4f:c8:bb:22:91:5b:23:47:cd:cf:ce:
28:e8:c2:5a:c2:60:82:d8:8f:9e:6a:1c:00:22:44:e1:65:fd:
87:de:fc:52:36:29:1f:51:20:f1:08:cf:c1:09:00:57:26:65:
89:c7:7f:0e:e2:0e:71:82:c1:0b:24:da:7a:b1:a2:0c:78:f1:
52:c5:26:08:ed:21:09:e4:67:07:23:18:ca:8b:35:e2:d8:78:
4b:b7:47:16:9d:6a:f7:61:51:b8:ae:9c:72:09:3a:3a:5d:09:
87:6e:98:47:49:5b:18:28:dd:27:da:28:2b:a9:da:fd:95:51:
99:cb:7f:1b:70:75:08:ee:3b:ea:b8:50:72:6f:bc:9b:e5:81:
e8:42:c8:33:f0:85:75:f2:49:d9:58:a0:f9:84:19:58:84:77:
ca:c7:42:cb:82:a7:3c:d2:ac:e2:bb:6a:db:60:2c:eb:bf:4f:
78:d1:80:eb:ed:e3:3a:03:9f:e4:5e:b4:45:e5:7b:ca:08:0a:
e0:89:0b:43:53:c5:73:40:71:0b:9f:34:a4:ce:fb:a7:ab:0e:
61:4b:13:52:a5:dc:30:f2:61:0c:d2:e2:f3:60:12:15:3a:05:
d7:94:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org