Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS215200.roa
File: AS215200.roa (raw, json)
Hash identifier: h/Bq7S8zqnauEJQnb3BdeHJ8Ugcp19nQHRyjnl1DhIg=
Subject key identifier: E2:0B:3A:78:00:BE:F5:B5:95:27:2F:7C:33:29:71:D8:40:BC:B2:A7
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 7932F93516A3A2F8CDF58E672D9561B17C2796D5
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS215200.roa
Signing time: Mon 08 Apr 2024 20:11:00 +0000
ROA not before: Mon 08 Apr 2024 20:06:00 +0000
ROA not after: Mon 07 Apr 2025 20:11:00 +0000
asID: 215200
IP address blocks: 2a13:df80:7d10::/44 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:32:f9:35:16:a3:a2:f8:cd:f5:8e:67:2d:95:61:b1:7c:27:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Apr 8 20:06:00 2024 GMT
Not After : Apr 7 20:11:00 2025 GMT
Subject: CN=E20B3A7800BEF5B595272F7C332971D840BCB2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:c2:47:38:56:63:43:0d:6a:a3:3c:ee:c0:
c6:5c:88:1b:7b:52:88:e2:d1:4e:b1:40:93:f5:ed:
e3:a5:08:3e:a7:c5:91:ce:4f:27:38:f6:89:22:ee:
29:7d:a2:37:09:ae:4d:8f:7a:59:11:69:24:0c:3c:
49:09:da:91:e4:3f:fa:cd:07:e0:75:83:d6:e2:e5:
81:c9:d1:59:fe:73:92:53:42:5c:04:96:53:da:f0:
68:f5:29:e6:02:11:1f:68:12:bf:76:d8:fe:e9:31:
5c:d0:63:62:37:2c:0a:b1:65:4e:9c:ad:34:65:c8:
56:13:1a:59:70:86:94:55:bc:ad:ad:c1:ec:a5:5b:
ee:a8:52:4a:3b:78:8a:27:c3:fd:12:3b:6d:59:04:
8d:75:4d:67:68:24:c3:9e:20:23:b6:13:5d:d1:5b:
d5:2d:29:68:7c:aa:57:4b:55:41:31:ba:3f:16:20:
fc:54:7b:33:46:66:e7:da:dc:36:27:fe:c1:e3:62:
ff:18:40:e0:71:43:0b:b8:5a:04:18:8f:5a:d8:5a:
06:b5:aa:76:d6:d4:1a:19:7b:04:4e:6e:2c:68:49:
3b:c4:64:04:4e:32:11:84:02:85:33:0b:cc:ab:e2:
5c:c2:e5:49:b8:b1:b2:2a:31:fe:f3:a3:f6:7f:d2:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0B:3A:78:00:BE:F5:B5:95:27:2F:7C:33:29:71:D8:40:BC:B2:A7
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS215200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:7d10::/44
Signature Algorithm: sha256WithRSAEncryption
3e:6b:e9:8e:e4:4c:30:04:d0:56:f5:c0:0f:23:f5:de:f8:e9:
23:26:87:c4:fb:52:dd:e0:63:7a:56:09:67:dc:94:da:54:b6:
52:70:69:40:a1:72:52:69:4b:ad:a5:20:8b:85:e0:0b:f0:b7:
fd:17:d9:1c:85:67:70:06:d2:93:d3:3c:5a:03:4e:97:d9:f8:
31:5a:a9:2e:c8:83:d1:9b:1d:1f:90:99:8b:e8:21:05:16:ea:
1e:fc:75:50:24:8c:4c:ac:fb:b1:90:6c:99:fc:e5:83:80:98:
32:1f:84:cc:4c:52:48:5b:93:a3:7b:63:1c:41:cd:d8:6d:a8:
98:b8:cd:eb:63:bd:84:bf:72:14:b0:e5:40:8e:0f:f2:d4:5a:
6a:e6:70:95:f7:99:09:ee:e8:16:4b:6b:19:27:0a:05:9c:8c:
80:d5:33:64:b4:21:49:ba:b3:35:86:ac:74:6c:2f:40:6b:c9:
89:8f:00:a2:e6:65:f3:57:79:4f:7d:bd:cf:c6:38:f3:0a:db:
5c:36:ea:99:c8:3e:0a:eb:90:3f:61:64:f0:eb:b5:b8:10:a2:
01:cc:28:91:af:70:df:ef:32:d0:1d:95:23:48:cc:98:3e:bb:
da:15:75:0d:6f:48:e2:88:ae:5b:6b:f0:c0:f2:4e:0f:ed:13:
1c:2c:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org