Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34302d3438203d3e20323136313037.roa
File: 326130353a646663313a6330303a3a2f34302d3438203d3e20323136313037.roa (raw, json)
Hash identifier: 6Q3Vzv4+h98BNeIhSKdnhWBmemZCiJtG268LYCeFqMo=
Subject key identifier: 12:D0:5D:5A:34:62:62:FE:8A:79:0F:59:E3:B4:DE:9F:03:9C:BD:20
Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial: 06366BCCDAA13451B31432A58E068838C3BC77D0
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34302d3438203d3e20323136313037.roa
Signing time: Tue 09 Jan 2024 10:12:36 +0000
ROA not before: Tue 09 Jan 2024 10:07:36 +0000
ROA not after: Tue 07 Jan 2025 10:12:36 +0000
asID: 216107
IP address blocks: 2a05:dfc1:c00::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:36:6b:cc:da:a1:34:51:b3:14:32:a5:8e:06:88:38:c3:bc:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Validity
Not Before: Jan 9 10:07:36 2024 GMT
Not After : Jan 7 10:12:36 2025 GMT
Subject: CN=12D05D5A346262FE8A790F59E3B4DE9F039CBD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:aa:95:c7:fc:e5:f0:1e:93:8d:c0:b2:ca:
07:e4:bc:1b:1d:11:b8:42:97:9a:95:c2:5c:cf:10:
6b:8d:c2:d4:6e:0b:78:3b:77:41:f3:00:d8:c3:96:
35:d6:6a:af:08:93:69:35:71:b7:1a:42:16:ba:ea:
6f:83:f3:d8:6e:5c:46:ec:34:29:16:bb:6a:54:12:
96:60:33:ac:65:14:3f:8b:22:d2:d0:36:a9:4a:45:
ac:50:ba:75:eb:7a:de:50:e5:42:59:4a:f6:c3:46:
79:69:54:b4:58:33:0a:02:39:ba:e4:14:b7:01:9c:
13:9f:bd:86:87:b3:0f:ef:62:e7:7f:95:bb:ca:37:
65:53:75:66:19:02:c3:fd:13:67:ef:d2:36:1d:d9:
a7:e7:b9:0e:f3:56:ee:5c:a0:3e:47:e2:3b:24:c1:
e4:17:c9:db:59:04:1e:dd:f4:aa:cf:9e:63:6a:ad:
f7:38:74:c1:5f:4e:e0:3c:f3:9e:98:49:9c:4f:0d:
3c:4a:75:1a:57:69:f6:ca:c5:bb:18:dd:8b:64:9b:
fa:b5:42:f7:c7:0f:e1:d8:80:44:b3:81:7e:99:e2:
53:a2:80:34:c0:a4:c3:43:cb:5a:ad:13:bf:75:79:
cd:d7:8a:0b:8e:ec:62:85:ff:a5:f2:83:1f:17:89:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:5D:5A:34:62:62:FE:8A:79:0F:59:E3:B4:DE:9F:03:9C:BD:20
X509v3 Authority Key Identifier:
keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34302d3438203d3e20323136313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c00::/40
Signature Algorithm: sha256WithRSAEncryption
97:9e:e2:8d:4c:66:d7:ad:8d:e9:5c:fe:6e:0c:12:20:fd:ad:
8c:8d:0e:38:6c:01:3e:39:1f:ea:7e:a8:ad:75:fe:4d:7f:9b:
e4:a4:bc:71:d3:a3:90:36:a8:0a:64:0e:a0:e8:35:9f:da:5d:
03:53:37:65:f0:2b:e2:46:90:3b:e8:ef:10:60:b8:5e:fa:a3:
a6:e5:1a:15:22:ca:6e:b6:8b:e7:bf:c2:3a:4f:5c:8a:93:80:
b0:d4:09:fc:ef:b5:12:8e:39:8a:c9:54:69:3e:f3:b7:dd:62:
70:90:54:67:ce:1b:fa:ba:be:15:b1:6f:b4:38:2a:c7:97:50:
9d:76:aa:ec:c0:a8:11:72:8a:dd:5a:8b:a8:d7:5a:10:72:44:
3a:87:8b:8d:f1:fe:af:94:da:5f:09:41:62:95:fc:98:a7:81:
85:63:41:67:b0:c8:d0:30:00:0e:ca:69:79:1a:b6:73:b1:76:
a9:f9:8c:9c:10:9c:68:a5:77:6b:49:ae:8f:ad:53:8c:9e:0c:
41:2e:de:29:4f:bf:82:c3:4c:bd:6f:0c:7d:16:22:dc:2a:72:
f3:7e:b3:86:99:dc:9e:e8:c1:79:cc:30:bc:f5:eb:8c:6a:fc:
91:29:1e:40:8d:95:80:a4:7c:86:e5:39:31:c3:5c:d5:66:b5:
f7:24:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org