Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a393830303a3a2f33382d3438203d3e20323033393133.roa
File: 326131333a646638373a393830303a3a2f33382d3438203d3e20323033393133.roa (raw, json)
Hash identifier: xjfyaidfdFlZ0LwtlfITpk+MGfcKI4Qi/ZvAcAgUCE8=
Subject key identifier: 86:8C:58:1B:06:8E:9E:E4:DF:1F:FF:88:22:B9:14:52:9A:B6:9A:23
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 76B0B40839329C85C83FB5608FFC9D063ABC633E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a393830303a3a2f33382d3438203d3e20323033393133.roa
Signing time: Wed 06 Dec 2023 13:10:57 +0000
ROA not before: Wed 06 Dec 2023 13:05:57 +0000
ROA not after: Wed 04 Dec 2024 13:10:57 +0000
asID: 203913
IP address blocks: 2a13:df87:9800::/38 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b0:b4:08:39:32:9c:85:c8:3f:b5:60:8f:fc:9d:06:3a:bc:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 6 13:05:57 2023 GMT
Not After : Dec 4 13:10:57 2024 GMT
Subject: CN=868C581B068E9EE4DF1FFF8822B914529AB69A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:b5:a4:2e:0e:5f:bc:1f:e3:27:3f:5d:e1:
a3:f8:d1:8d:8e:e3:6a:4e:f2:4a:1d:b5:fb:bf:d6:
42:e2:d0:24:3c:8d:81:b5:ad:f7:f8:e3:04:30:24:
0a:85:8d:17:96:c3:42:b1:d7:f4:10:a3:49:1a:9f:
ea:cd:15:0a:6b:1f:7e:c4:0c:df:92:87:2e:6a:ec:
f4:88:75:55:f8:af:eb:52:ff:0f:f2:9d:b8:05:19:
d5:00:78:fb:9e:41:e0:76:ee:0b:0a:b3:15:bb:5f:
a8:6b:31:68:18:38:70:eb:ba:e4:91:57:81:55:87:
e2:b3:38:e9:91:ee:20:3c:b9:ec:a2:da:6c:40:19:
84:c8:51:d8:94:93:c5:13:f9:a3:0c:71:2e:52:66:
cb:c0:d9:d6:22:78:82:49:f7:8f:93:28:ce:4a:2a:
16:a0:3b:ea:1f:da:85:83:73:1d:11:83:4d:36:18:
cb:80:41:f6:41:1b:07:1c:89:56:47:a7:27:55:06:
6f:c0:41:f2:2d:91:4d:25:04:98:53:b8:a2:7f:9b:
3b:9a:e3:77:2e:b2:70:03:86:cb:5a:89:97:57:b0:
38:2d:63:b2:62:00:49:3d:b5:58:2c:e7:48:40:4d:
11:3a:15:58:0c:57:65:58:f4:01:2b:fd:75:a4:5b:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:58:1B:06:8E:9E:E4:DF:1F:FF:88:22:B9:14:52:9A:B6:9A:23
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a393830303a3a2f33382d3438203d3e20323033393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:9800::/38
Signature Algorithm: sha256WithRSAEncryption
a7:d3:1f:af:b8:07:33:c9:df:d6:24:e7:0f:aa:9c:46:56:a8:
88:91:72:f6:83:75:0a:a1:fa:af:37:3d:0f:be:ac:32:ac:80:
4c:c7:0d:ea:fd:09:d1:bf:a3:67:ec:5f:8f:a6:49:07:a4:06:
34:8f:4d:b7:03:af:0b:5f:bd:5c:65:70:80:f3:d9:fa:5d:14:
dc:3a:e3:e9:85:f0:1a:1e:c5:5a:85:55:09:0a:1e:dd:dc:9e:
5f:89:1d:0d:f4:7d:3b:a4:83:e1:2d:bf:ab:5a:8b:13:b7:2a:
9b:63:97:d7:d1:b1:02:ae:11:ed:cf:40:82:70:2e:21:e0:09:
fb:0a:fe:31:1b:7f:fd:69:de:be:e3:18:2e:ec:0d:2b:74:56:
d4:02:b7:54:c8:6b:a5:0e:f8:9c:89:eb:4f:83:8f:87:35:00:
f6:86:29:5b:98:f9:fe:7f:30:ca:f7:18:44:6d:19:ae:84:26:
5d:ce:81:4f:a0:43:3d:c9:e8:4f:c4:bd:c8:06:0a:8d:b3:d0:
63:9c:ee:d4:b2:a1:a6:96:67:e5:0d:25:10:cf:e2:e7:a7:c8:
94:a9:c8:7e:01:8a:17:0c:8d:82:5a:0e:15:87:69:97:54:b5:
89:49:5b:6b:71:90:4e:d0:36:c8:4c:6f:ad:96:1d:87:94:d3:
cf:09:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org