Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216461.roa
File: AS216461.roa (raw, json)
Hash identifier: pRBXKa3xhrXk4Nhe1SlIZRT+OJEb2qyyc9eujL2GzAw=
Subject key identifier: 90:31:EB:0A:D3:BC:A8:10:AC:4C:ED:34:E0:C8:1B:AC:D6:D0:FE:1D
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 032B06550EE431270E18FBDE7B1D5082D356F9FE
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216461.roa
Signing time: Wed 20 Dec 2023 16:21:28 +0000
ROA not before: Wed 20 Dec 2023 16:16:28 +0000
ROA not after: Wed 18 Dec 2024 16:21:28 +0000
asID: 216461
IP address blocks: 2a13:df85::/38 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2b:06:55:0e:e4:31:27:0e:18:fb:de:7b:1d:50:82:d3:56:f9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 20 16:16:28 2023 GMT
Not After : Dec 18 16:21:28 2024 GMT
Subject: CN=9031EB0AD3BCA810AC4CED34E0C81BACD6D0FE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:88:6e:8d:01:9f:83:9e:a7:c7:4a:d7:99:
b1:b8:1e:92:6d:6a:60:7b:00:82:4c:fc:c8:8b:c6:
2d:20:52:fe:20:f0:e4:4a:58:d3:95:0e:9e:60:93:
84:29:42:26:94:a7:48:b0:65:d3:20:47:99:8e:26:
62:fd:19:70:51:bb:a7:75:d1:96:51:a9:ed:ab:59:
2c:1c:ca:ce:f2:2b:3a:b8:02:3b:01:ba:de:24:b7:
e5:a5:95:60:f5:a9:3b:4c:14:d8:59:30:4f:31:21:
ab:91:57:b0:1a:3e:40:b3:0a:84:2d:51:6f:69:5a:
5c:4c:14:93:f3:df:15:7b:4e:da:25:1d:60:84:c2:
5f:13:71:4c:cb:3c:6d:48:cb:af:a4:37:27:f1:d7:
54:b6:6a:a9:0b:8e:5e:ac:25:8a:00:db:48:75:d0:
97:bb:bb:5c:9c:34:da:59:32:40:5b:69:da:72:25:
be:08:10:44:ac:b3:41:29:00:2c:a4:33:f0:02:65:
e2:e3:34:e2:c2:b1:90:6e:31:28:77:6d:a8:de:14:
5b:48:ba:d8:8d:ac:82:12:dd:5a:05:f9:61:90:c8:
c9:60:eb:9c:ec:c0:01:9d:f0:34:09:56:ac:d6:e8:
81:0a:bc:6b:2c:a0:16:fb:5d:3e:7e:b2:f9:5f:ef:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:EB:0A:D3:BC:A8:10:AC:4C:ED:34:E0:C8:1B:AC:D6:D0:FE:1D
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df85::/38
Signature Algorithm: sha256WithRSAEncryption
0d:56:e0:bf:23:4e:0e:2d:f8:43:5b:b4:77:55:31:69:31:fa:
7d:12:b9:2b:df:c9:b0:1b:67:ed:cd:44:ff:33:47:75:bc:28:
d8:12:d4:7d:94:26:16:10:6f:8a:e5:72:f1:9c:c3:3c:0e:94:
6f:ce:ec:3b:f9:a3:51:e1:c4:81:cd:8d:c9:f3:b4:ce:52:6a:
01:8f:8f:80:4c:5a:ba:46:6f:33:d1:2c:ca:fe:50:1a:15:9f:
d9:2f:d5:af:13:4f:a0:30:bf:32:e8:50:b1:b8:f3:71:c6:79:
60:3b:68:77:5e:e9:55:1d:90:e5:eb:51:4e:4b:28:c3:43:c7:
a5:51:b1:f2:34:26:63:d8:5d:1d:e8:f9:56:b6:b5:a0:5b:4f:
48:30:2b:03:b0:5e:45:61:cf:d8:67:10:65:dc:37:c4:8c:22:
57:76:32:3e:d0:dc:a5:ca:23:c0:3f:aa:0a:47:b7:f1:65:46:
5e:b7:6c:57:fb:b8:53:7e:b5:a4:36:b7:53:3c:80:8a:02:ba:
ac:80:b0:31:36:6f:fc:38:c0:00:ea:55:00:91:23:55:0c:66:
97:49:81:e1:34:35:a0:20:7c:d1:4d:22:cf:e6:35:6f:f3:5c:
84:18:33:5f:7e:8e:a6:95:92:e8:1c:71:c6:ed:89:64:0d:6f:
dc:81:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org