Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a3a2f33362d3438203d3e20313939343539.roa
File: 326130363a396634343a3a2f33362d3438203d3e20313939343539.roa (raw, json)
Hash identifier: dF+ul8qucFwNhwS18S5luRCbpkOYSoLS05POUgZo/uo=
Subject key identifier: 5D:8E:DF:90:3D:FC:87:1E:F7:3C:67:F4:43:B5:8C:4E:9C:72:B5:2E
Certificate issuer: /CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Certificate serial: 5658CF7C6A659D3203B9AC4C84CF38A448CD8DAC
Authority key identifier: B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a3a2f33362d3438203d3e20313939343539.roa
Signing time: Thu 15 Feb 2024 03:15:03 +0000
ROA not before: Thu 15 Feb 2024 03:10:03 +0000
ROA not after: Thu 13 Feb 2025 03:15:03 +0000
asID: 199459
IP address blocks: 2a06:9f44::/36 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:58:cf:7c:6a:65:9d:32:03:b9:ac:4c:84:cf:38:a4:48:cd:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Validity
Not Before: Feb 15 03:10:03 2024 GMT
Not After : Feb 13 03:15:03 2025 GMT
Subject: CN=5D8EDF903DFC871EF73C67F443B58C4E9C72B52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:35:8c:94:1c:ae:ae:18:58:36:e9:31:63:
13:af:04:ef:a2:0e:fa:f2:cc:d3:c3:bc:b4:75:fc:
af:be:7f:cc:e1:da:fa:59:b3:c6:6d:85:9a:68:82:
c5:11:1c:c9:a0:91:af:1c:f6:00:6c:60:98:f1:9d:
ec:ee:2a:8f:02:89:7d:e5:11:54:02:98:ed:06:12:
fa:72:8e:f0:da:2f:2f:4e:75:7e:a8:01:5c:fd:c1:
5d:7f:68:18:f6:08:3e:45:e7:e8:c8:13:3c:de:b3:
5c:15:e9:d6:db:a0:d3:e6:8d:a1:73:98:4d:b1:4d:
07:fc:32:f2:e8:b0:8a:62:60:47:c8:39:ef:56:41:
33:0f:67:0a:c8:d2:07:e2:29:5a:00:5d:75:4f:e7:
a1:59:a1:64:86:c3:c5:b1:04:d9:2c:7d:4e:b7:00:
2b:cb:f1:a8:51:92:40:4d:43:7b:78:3d:cf:be:11:
08:c3:50:fc:78:ee:e0:30:bd:6f:7d:28:1a:45:e3:
ec:1b:d3:a4:b1:50:57:9f:be:75:6d:99:ea:93:02:
62:0b:98:78:a4:f5:df:4e:95:10:39:9c:77:ca:99:
a5:e7:41:fd:e3:f7:77:14:4d:2f:56:d4:4d:e2:f6:
7d:47:44:ec:60:3b:aa:1f:c9:ca:95:ed:93:c0:d7:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:DF:90:3D:FC:87:1E:F7:3C:67:F4:43:B5:8C:4E:9C:72:B5:2E
X509v3 Authority Key Identifier:
keyid:B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a3a2f33362d3438203d3e20313939343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44::/36
Signature Algorithm: sha256WithRSAEncryption
cd:d4:3c:4b:96:6f:3b:a5:07:ee:ec:a0:df:7c:59:de:e4:30:
e2:1f:6c:48:da:c3:7e:59:dc:64:af:13:82:15:a5:c4:8e:3f:
2b:96:9b:f2:c9:da:02:47:d8:43:a0:c4:3e:66:47:78:10:ef:
2b:a1:33:aa:66:b9:20:44:c4:f0:1d:ce:a3:5e:18:d7:ae:fb:
04:b3:12:66:48:1e:cd:8d:e6:5c:d3:e0:86:27:cc:fd:4f:a7:
f8:b9:8f:13:4c:5c:2c:2c:13:7e:20:da:df:20:66:0c:c6:03:
9c:1b:9e:21:a4:6a:bc:4e:77:49:37:4f:cc:91:08:9e:24:6e:
db:b4:19:ab:4c:2b:75:61:2b:89:a0:c7:90:f0:38:0b:9c:50:
b3:ce:af:5c:87:8f:33:ae:2c:05:18:54:d7:9a:83:ea:9b:09:
5d:24:e2:df:98:b9:0c:ef:14:aa:e9:43:76:1c:84:e6:f6:05:
3f:b3:0e:bf:a6:f7:6a:bb:d6:af:63:fd:7c:0c:1b:33:12:d6:
86:ab:7b:42:c9:92:e6:86:96:1c:5d:9d:4a:9c:5b:fc:4c:9e:
e8:c0:cb:95:41:04:ac:7b:b8:fd:cf:e3:b2:04:c4:df:9e:bb:
2e:4c:94:05:3f:12:e5:47:4f:a5:8b:e5:16:6f:94:79:45:2e:
2d:02:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:21:28 2024 by rpki-client on console-ams.rpki-client.org