Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa
File: 326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa (raw, json)
Hash identifier: 5RvQ11zqA87nSkgET1/LZB/8q01ICMdccwFzuDSJAMA=
Subject key identifier: 2C:4A:8E:42:B0:B7:95:C3:3B:77:56:13:62:6F:64:AA:63:B0:87:11
Certificate issuer: /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial: 6FFDD9BEADCF834EC970DCFA120E88984885BF45
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa
Signing time: Sun 07 Jul 2024 20:10:40 +0000
ROA not before: Sun 07 Jul 2024 20:05:40 +0000
ROA not after: Sun 06 Jul 2025 20:10:40 +0000
asID: 212895
IP address blocks: 2a14:7581:7200::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fd:d9:be:ad:cf:83:4e:c9:70:dc:fa:12:0e:88:98:48:85:bf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
Validity
Not Before: Jul 7 20:05:40 2024 GMT
Not After : Jul 6 20:10:40 2025 GMT
Subject: CN=2C4A8E42B0B795C33B775613626F64AA63B08711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:19:cb:71:06:44:c4:24:dc:ae:ca:eb:a1:
4c:8f:6d:29:2e:00:85:7a:84:b9:1c:c0:d2:18:a7:
c3:ae:3e:a3:ab:6e:40:00:44:4d:d0:5a:4d:18:d8:
d1:71:52:05:3f:2f:95:72:02:79:d2:b4:dc:e7:7e:
81:89:5e:d5:05:0c:b0:8d:83:37:1a:b9:87:7a:b6:
c2:16:bc:96:92:11:15:3b:c6:73:ca:bb:7e:a1:3d:
a3:d2:26:2e:e3:7f:3d:07:54:ce:47:27:b1:80:9c:
e7:57:e5:d0:dd:38:f1:66:49:17:9d:8e:62:bb:02:
53:5b:d9:6c:49:43:ed:a6:ad:5d:9b:63:dc:a9:ba:
ba:c1:f1:cc:07:dd:53:a3:04:ee:17:e0:c0:5f:54:
29:9d:f2:d8:bd:3b:31:bb:10:e3:e9:ac:f0:1e:97:
ba:7c:13:a9:2a:65:65:92:0a:7b:04:50:c1:9b:18:
08:5d:ec:5e:b8:18:36:50:83:9c:c4:32:65:18:d1:
f7:a5:98:7f:7b:a0:da:25:6f:35:d0:b2:71:d8:d7:
c5:73:37:cb:28:a6:ba:f8:d3:8c:83:c5:aa:52:08:
38:60:a8:15:de:3f:0d:f2:65:29:a0:1d:ca:c8:18:
7e:06:d1:d5:66:61:3e:c4:d7:51:5e:56:1d:e9:51:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:8E:42:B0:B7:95:C3:3B:77:56:13:62:6F:64:AA:63:B0:87:11
X509v3 Authority Key Identifier:
keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7200::/40
Signature Algorithm: sha256WithRSAEncryption
2b:5e:7d:be:9c:0f:8a:d6:dd:53:70:cc:b2:e5:3c:c1:2c:9a:
11:56:73:11:40:be:ca:a2:85:99:88:db:45:7d:cf:9a:aa:ac:
ac:8e:28:b3:82:57:d9:9f:c5:2c:7e:4c:6c:a2:0d:ae:e8:82:
10:e6:0c:c6:5d:84:8e:ce:43:2e:5d:c4:a6:91:0b:87:8b:22:
db:4a:62:bf:42:32:d4:bc:9b:f2:42:5d:d4:f9:93:3d:3f:d3:
4c:dc:9e:72:96:32:2d:e4:ad:9c:65:c9:38:3a:b7:ff:d9:2a:
2a:6a:37:d8:97:ea:e3:6e:cf:fb:d9:9e:4b:7e:a0:e5:ae:6c:
c5:e3:16:f5:9b:3d:e5:80:f2:4f:c8:1f:9a:99:fc:7c:a8:a3:
f3:1d:b8:bf:38:da:12:5c:c1:69:40:8f:ad:69:86:eb:5d:7f:
a1:9c:3f:b9:d6:ad:8d:49:07:1c:1e:c4:45:aa:a9:df:69:0a:
ea:0c:64:aa:18:ff:eb:33:48:98:15:d6:2d:9f:38:00:f9:9d:
87:4d:40:a8:c8:20:d1:27:be:a6:58:f0:c0:70:cf:5d:f4:da:
b4:71:a1:f1:1f:14:57:fe:db:3a:a9:e3:4a:82:d7:cb:23:85:
58:66:4a:00:48:77:71:79:60:18:94:1d:27:64:13:a3:c4:74:
25:19:01:2e
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUb/3Zvq3Pg07JcNz6Eg6ImEiFv0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFC
NzNDMDRFODAeFw0yNDA3MDcyMDA1NDBaFw0yNTA3MDYyMDEwNDBaMDMxMTAvBgNV
BAMTKDJDNEE4RTQyQjBCNzk1QzMzQjc3NTYxMzYyNkY2NEFBNjNCMDg3MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnchnLcQZExCTcrsrroUyPbSku
AIV6hLkcwNIYp8OuPqOrbkAARE3QWk0Y2NFxUgU/L5VyAnnStNznfoGJXtUFDLCN
gzcauYd6tsIWvJaSERU7xnPKu36hPaPSJi7jfz0HVM5HJ7GAnOdX5dDdOPFmSRed
jmK7AlNb2WxJQ+2mrV2bY9ypurrB8cwH3VOjBO4X4MBfVCmd8ti9OzG7EOPprPAe
l7p8E6kqZWWSCnsEUMGbGAhd7F64GDZQg5zEMmUY0felmH97oNolbzXQsnHY18Vz
N8soprr404yDxapSCDhgqBXePw3yZSmgHcrIGH4G0dVmYT7E11FeVh3pUU1tAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQULEqOQrC3lcM7d1YTYm9kqmOwhxEwHwYDVR0j
BBgwFoAUqxNA4ynM2WKHk0+nBmcNMbc8BOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzU4NDc5ZGYtZjViNy00NDUzLTkyYmYtZGUxZjYxYjNk
NGIwLzEvQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFCNzNDMDRFOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQjEzNDBFMzI5Q0NEOTYyODc5MzRGQTcw
NjY3MEQzMUI3M0MwNEU4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jNTg0NzlkZi1mNWI3LTQ0NTMtOTJiZi1kZTFmNjFiM2Q0YjAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTMyMzgzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gXIwDQYJKoZIhvcNAQELBQADggEBACte
fb6cD4rW3VNwzLLlPMEsmhFWcxFAvsqihZmI20V9z5qqrKyOKLOCV9mfxSx+TGyi
Da7oghDmDMZdhI7OQy5dxKaRC4eLIttKYr9CMtS8m/JCXdT5kz0/00zcnnKWMi3k
rZxlyTg6t//ZKipqN9iX6uNuz/vZnkt+oOWubMXjFvWbPeWA8k/IH5qZ/Hyoo/Md
uL842hJcwWlAj61phutdf6GcP7nWrY1JBxwexEWqqd9pCuoMZKoY/+szSJgV1i2f
OAD5nYdNQKjIINEnvqZY8MBwz1302rRxofEfFFf+2zqp40qC18sjhVhmSgBId3F5
YBiUHSdkE6PEdCUZAS4=
-----END CERTIFICATE-----
Generated at Sun Oct 27 08:33:22 2024 by rpki-client on console-ams.rpki-client.org