Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/326130613a363034343a626630323a3a2f34382d3438203d3e20323135343732.roa
File: 326130613a363034343a626630323a3a2f34382d3438203d3e20323135343732.roa (raw, json)
Hash identifier: 4R9Wte1VqicYrDnNkoeg4X5RK1EC7vfpOO0dzVFLshk=
Subject key identifier: F7:05:85:57:03:D9:B9:5D:61:87:49:32:84:F5:4D:19:7C:C1:DD:17
Certificate issuer: /CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
Certificate serial: 3C7EA9B34DC37AFF955AC1A0A3AB8CBD35E767B5
Authority key identifier: 36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/326130613a363034343a626630323a3a2f34382d3438203d3e20323135343732.roa
Signing time: Mon 29 Jul 2024 18:54:23 +0000
ROA not before: Mon 29 Jul 2024 18:49:23 +0000
ROA not after: Mon 28 Jul 2025 18:54:23 +0000
asID: 215472
IP address blocks: 2a0a:6044:bf02::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7e:a9:b3:4d:c3:7a:ff:95:5a:c1:a0:a3:ab:8c:bd:35:e7:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
Validity
Not Before: Jul 29 18:49:23 2024 GMT
Not After : Jul 28 18:54:23 2025 GMT
Subject: CN=F705855703D9B95D6187493284F54D197CC1DD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:a1:9e:a6:e5:a5:c4:a1:07:2d:61:35:bc:
9a:21:3c:59:d6:13:1a:7f:fb:f2:6a:6d:8c:9a:34:
f7:21:3e:d3:44:ae:bb:2f:eb:e1:60:11:87:bb:55:
86:b4:6d:6a:bb:01:fb:7f:13:dc:0c:16:66:fa:67:
31:33:ba:1b:a4:1c:e4:75:f6:10:a1:fd:74:af:6e:
de:9f:c8:bd:4c:71:84:9f:fa:8e:a2:94:bf:a4:07:
2c:31:e0:01:d0:71:0a:5f:84:48:04:dd:80:78:45:
50:19:c6:85:03:68:85:78:0b:2d:21:0d:f0:22:7f:
ff:7c:fd:19:e1:36:f7:19:39:8d:99:35:3f:02:be:
31:bf:fc:c4:7d:49:ad:31:40:5e:f5:ed:1d:a2:75:
72:f6:02:e9:b0:9c:cf:0f:ba:b6:41:24:3c:a2:e8:
19:9c:fd:f3:2a:3d:cb:de:d3:45:1e:6a:51:07:e5:
c6:0e:9c:7c:f4:45:af:e6:49:21:0f:12:b1:18:59:
2c:60:b8:b8:3f:98:f6:d9:f9:0a:97:21:bb:75:b4:
28:5b:32:c5:ce:55:20:2b:4c:b9:7d:cb:5a:02:55:
a6:ea:64:05:ae:67:cf:69:12:24:b2:6c:46:22:65:
f3:9b:d0:be:99:06:ce:94:fe:3c:8f:db:9a:8a:f4:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:85:57:03:D9:B9:5D:61:87:49:32:84:F5:4D:19:7C:C1:DD:17
X509v3 Authority Key Identifier:
keyid:36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/326130613a363034343a626630323a3a2f34382d3438203d3e20323135343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bf02::/48
Signature Algorithm: sha256WithRSAEncryption
15:d9:9d:c7:04:82:e7:62:1c:68:7a:03:8b:11:a8:5d:8d:f8:
bc:48:42:03:ab:4a:bf:88:e9:c3:4c:4a:ed:60:64:ec:a2:17:
ba:f9:47:eb:19:06:00:88:01:6f:01:f3:94:51:64:10:6f:60:
17:a2:94:89:a9:c0:62:b7:01:66:bb:3d:96:41:c3:22:77:30:
5a:6a:ff:62:f6:b8:70:fb:39:6b:40:e5:34:d3:d7:52:c6:7c:
81:6d:ce:fd:c5:d4:9e:97:17:7e:25:23:b6:ae:d1:91:11:b4:
f8:ae:25:00:e6:48:a8:53:9b:f8:ab:b6:88:b5:4d:35:85:5c:
fa:1d:cc:4a:59:a7:af:ce:2e:97:98:08:ed:25:03:ce:8c:99:
cc:43:83:f9:cd:90:5d:0d:dc:64:1d:c7:d1:9f:61:25:96:38:
2b:16:47:f0:8b:95:6b:57:f2:b3:dc:cd:d7:c5:2b:88:fe:62:
f3:89:8b:41:4d:bd:5b:d7:12:45:2a:bf:63:71:0c:0e:3c:f6:
88:27:a7:9c:07:c8:ca:0e:cb:b0:9d:fa:8d:2a:78:14:4a:23:
1c:02:2d:16:ba:5c:2d:c6:00:df:bf:1d:80:08:44:46:47:03:
cc:e2:75:cd:c2:db:3d:09:87:e4:09:4b:cc:39:f4:cc:0e:be:
2d:26:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 10:31:20 2024 by rpki-client on console-fra.rpki-client.org