Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa
File: 326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa (raw, json)
Hash identifier: QbyXty8SzG3sLAbFJkPnrySrB8T1aB7Oa3+ukfPd0C0=
Subject key identifier: F9:2A:8D:FF:11:A6:06:14:C4:36:EA:71:D7:9B:64:B8:E9:9A:BD:40
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 480FCB75F4CA2657A284F2B8B10CBDAA0BBA75B8
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa
Signing time: Wed 06 Dec 2023 23:00:01 +0000
ROA not before: Wed 06 Dec 2023 22:55:01 +0000
ROA not after: Wed 04 Dec 2024 23:00:01 +0000
asID: 215898
IP address blocks: 2a13:df85:bd00::/40 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0f:cb:75:f4:ca:26:57:a2:84:f2:b8:b1:0c:bd:aa:0b:ba:75:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 6 22:55:01 2023 GMT
Not After : Dec 4 23:00:01 2024 GMT
Subject: CN=F92A8DFF11A60614C436EA71D79B64B8E99ABD40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:41:8c:64:0a:a8:f8:2c:13:38:10:ca:43:
3e:69:2f:b6:5b:37:9c:d2:f0:3d:cf:09:29:22:26:
3b:80:fd:a6:8d:74:f4:f1:13:03:dd:fd:36:0c:1a:
28:41:40:69:cc:eb:96:fb:94:b6:7f:d0:23:b8:b5:
44:c0:30:99:2d:19:0b:a9:5b:cf:30:05:b5:28:e2:
91:92:9b:1d:37:25:3f:76:d0:20:f4:b0:c6:66:74:
1b:f6:b9:09:48:a6:b1:d8:38:8c:59:52:70:f6:a4:
32:03:32:73:df:41:b3:8e:05:11:1b:c8:df:5e:d3:
28:3e:ed:48:91:de:da:78:23:f3:c6:28:cb:b3:c1:
83:24:9b:d5:9a:b4:a4:af:3f:7b:3a:22:8c:fa:f0:
83:cf:84:72:cc:8d:68:98:8e:70:cd:b7:29:15:ae:
fd:71:b2:e1:ab:15:63:64:fb:fd:8b:dc:fe:7c:76:
32:33:6e:c6:ea:4b:f5:76:35:75:18:dc:5b:84:8b:
c4:ad:44:e7:c2:47:b5:83:fd:7f:4c:1a:ee:bf:db:
0a:2e:12:d3:29:17:13:d0:04:19:e3:6b:a5:5c:51:
6a:d0:39:7b:4b:63:9a:2d:f9:a6:8e:6e:0c:d8:2c:
fe:fa:65:6f:61:b8:b0:7b:6d:22:4e:63:e1:31:cf:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:8D:FF:11:A6:06:14:C4:36:EA:71:D7:9B:64:B8:E9:9A:BD:40
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df85:bd00::/40
Signature Algorithm: sha256WithRSAEncryption
c8:92:46:af:8f:df:ed:07:dd:7c:5d:fa:a5:a6:34:ff:85:9d:
2b:13:a3:7d:d1:a9:c1:7e:6b:6d:e1:e4:6d:92:07:1e:de:76:
af:f7:f7:0d:96:e5:e2:47:6b:a9:b2:2b:84:72:79:7d:45:85:
dc:a7:c5:70:9f:56:6b:05:b2:61:1d:70:43:62:f6:7e:60:d5:
b0:0c:21:a9:66:9b:c3:b2:91:6f:0c:1d:2b:54:10:b0:29:9b:
3d:7f:02:ef:16:e5:92:95:11:7a:a9:fa:88:fe:27:df:89:e7:
3f:28:7c:c7:f2:66:f7:cc:61:61:e4:75:0b:42:19:39:83:6d:
c1:72:3b:53:65:f0:b6:d0:71:83:11:de:d4:8d:07:13:aa:27:
b1:11:95:6d:f5:95:86:4b:fa:22:18:bc:a0:45:99:76:f1:67:
2b:f3:2c:6c:62:4a:54:fa:fe:2b:48:7f:33:73:be:19:0f:de:
10:0a:7d:f3:75:74:e6:56:22:52:d4:5c:36:0e:a5:0e:d3:b0:
ea:04:17:25:49:b3:db:dc:a3:d5:57:8c:58:51:bb:b5:d5:6f:
0d:01:ee:4c:e4:5a:d7:4b:8b:b0:b3:68:92:80:39:cf:b0:f9:
fa:1f:f6:4b:f8:d8:ff:31:29:6c:96:67:ba:3b:39:10:93:b8:
c7:d2:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org