Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
File: 326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: 8DrvjeBgrpMBB8eM1za7EbWZA+aZBcuQe+hLVYGWAig=
Subject key identifier: A8:2D:4D:B0:BA:02:0D:3E:94:DD:A8:57:37:DB:9F:15:AE:F4:8F:80
Certificate issuer: /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial: 1C2DBE7EB083E933EA31AFF612FE2FDC3007ACB8
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Mon 09 Sep 2024 16:43:58 +0000
ROA not before: Mon 09 Sep 2024 16:38:58 +0000
ROA not after: Mon 08 Sep 2025 16:43:58 +0000
asID: 214757
IP address blocks: 2a09:54c6:d000::/44 maxlen: 44
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2d:be:7e:b0:83:e9:33:ea:31:af:f6:12:fe:2f:dc:30:07:ac:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Validity
Not Before: Sep 9 16:38:58 2024 GMT
Not After : Sep 8 16:43:58 2025 GMT
Subject: CN=A82D4DB0BA020D3E94DDA85737DB9F15AEF48F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:a9:e8:d2:ab:28:95:7b:0f:b3:6c:eb:96:
a4:b4:ed:69:07:25:7d:bc:fd:d7:0f:4d:f1:36:44:
cf:4e:ab:1b:3d:1c:79:b4:71:29:31:72:2e:9e:79:
09:ec:96:2c:1b:51:f8:cc:8a:5f:cf:d1:8b:ce:9d:
9d:61:75:63:87:99:82:c8:77:72:2d:bb:d3:74:82:
e1:db:51:7e:0d:ff:d4:86:d0:21:46:b5:d4:b0:69:
58:4b:a8:65:58:d5:0a:03:27:98:7c:32:c3:5e:97:
22:ab:21:51:f1:b2:88:05:8f:1c:fd:e9:17:5f:5b:
36:f8:f8:75:c2:74:f5:6d:3d:7a:8d:ca:66:6f:10:
ad:ed:7e:cb:70:1b:5c:46:e8:0d:57:28:18:59:fa:
a9:ce:f5:bf:b1:96:6c:52:3b:1d:d1:66:e2:b4:81:
2f:ea:56:85:b1:4e:de:3f:8c:b2:cc:d1:a0:04:6a:
78:a4:be:ff:27:da:3f:88:9b:fe:f4:79:df:2e:f1:
41:17:67:09:28:c1:dc:ee:4b:45:75:5c:12:15:98:
3a:0b:ec:76:1e:41:81:66:49:15:23:3d:1c:8b:cf:
2e:2e:a8:be:13:0e:30:ac:d2:09:5f:17:c5:6c:13:
59:8e:8f:d8:32:bf:9b:d3:70:c5:ac:d7:16:23:8c:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:4D:B0:BA:02:0D:3E:94:DD:A8:57:37:DB:9F:15:AE:F4:8F:80
X509v3 Authority Key Identifier:
keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d000::/44
Signature Algorithm: sha256WithRSAEncryption
8f:87:02:65:65:65:c6:c6:ec:c1:d5:4b:c5:ec:bd:e7:a6:d0:
bf:5b:3d:aa:59:94:2b:d7:47:7b:55:53:15:fc:9a:e1:03:23:
ef:b7:be:57:72:83:59:63:dc:9d:bc:a5:0f:e5:d6:29:82:eb:
d6:21:bf:2c:cb:6a:bc:be:6e:3a:c1:cc:e3:bb:53:35:d1:47:
88:cc:7f:29:0a:b7:55:90:74:44:6d:a0:d2:fa:1d:b1:d4:9c:
12:13:ca:0b:62:48:4e:f4:05:3a:65:a9:9a:94:ca:66:fc:4d:
be:85:f9:ea:e4:2e:98:a7:f2:25:7c:91:2c:fc:49:91:2b:5d:
c9:c3:29:7f:6b:15:fc:a1:2e:53:7f:6e:a0:55:09:fc:fc:5d:
46:0d:27:10:80:d4:be:9d:8d:fb:64:41:b8:a1:47:0a:55:a2:
19:9d:79:19:8b:33:d2:62:7c:a6:75:35:96:6f:04:4f:f4:c9:
d9:94:ae:25:2c:f7:1e:9e:fc:35:1c:96:2b:12:fe:db:95:7f:
57:27:0f:7d:a4:25:78:3c:01:ed:b5:61:dd:b5:c9:0a:41:c0:
76:ee:65:af:2c:0a:b2:f0:79:92:f3:6d:6d:5d:82:ec:77:01:
f8:c6:d6:3d:50:1f:ed:c0:b0:bf:27:37:95:02:26:c0:cc:85:
ce:7e:91:94
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUHC2+frCD6TPqMa/2Ev4v3DAHrLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZEOUQyQjU4ODhENjhCMDUxMzBDMkIyMDRGRjk0Njgx
QTc2NEQ0MTAeFw0yNDA5MDkxNjM4NThaFw0yNTA5MDgxNjQzNThaMDMxMTAvBgNV
BAMTKEE4MkQ0REIwQkEwMjBEM0U5NEREQTg1NzM3REI5RjE1QUVGNDhGODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmh6no0qsolXsPs2zrlqS07WkH
JX28/dcPTfE2RM9Oqxs9HHm0cSkxci6eeQnsliwbUfjMil/P0YvOnZ1hdWOHmYLI
d3Itu9N0guHbUX4N/9SG0CFGtdSwaVhLqGVY1QoDJ5h8MsNelyKrIVHxsogFjxz9
6RdfWzb4+HXCdPVtPXqNymZvEK3tfstwG1xG6A1XKBhZ+qnO9b+xlmxSOx3RZuK0
gS/qVoWxTt4/jLLM0aAEanikvv8n2j+Im/70ed8u8UEXZwkowdzuS0V1XBIVmDoL
7HYeQYFmSRUjPRyLzy4uqL4TDjCs0glfF8VsE1mOj9gyv5vTcMWs1xYjjBTpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUqC1NsLoCDT6U3ahXN9ufFa70j4AwHwYDVR0j
BBgwFoAUj9nStYiNaLBRMMKyBP+UaBp2TUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDg2OWIzM2ItNTEyMi00YWI4LWJiNTktOTgwMjJkNjM5
MWEwLzEvOEZEOUQyQjU4ODhENjhCMDUxMzBDMkIyMDRGRjk0NjgxQTc2NEQ0MS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC84RkQ5RDJCNTg4OEQ2OEIwNTEzMEMyQjIw
NEZGOTQ2ODFBNzY0RDQxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kODY5YjMzYi01MTIyLTRhYjgtYmI1OS05ODAyMmQ2MzkxYTAvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY0MzAzMDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKglUxtAAMA0GCSqGSIb3DQEBCwUAA4IBAQCP
hwJlZWXGxuzB1UvF7L3nptC/Wz2qWZQr10d7VVMV/JrhAyPvt75XcoNZY9ydvKUP
5dYpguvWIb8sy2q8vm46wczju1M10UeIzH8pCrdVkHREbaDS+h2x1JwSE8oLYkhO
9AU6ZamalMpm/E2+hfnq5C6Yp/IlfJEs/EmRK13Jwyl/axX8oS5Tf26gVQn8/F1G
DScQgNS+nY37ZEG4oUcKVaIZnXkZizPSYnymdTWWbwRP9MnZlK4lLPcenvw1HJYr
Ev7blX9XJw99pCV4PAHttWHdtckKQcB27mWvLAqy8HmS821tXYLsdwH4xtY9UB/t
wLC/JzeVAibAzIXOfpGU
-----END CERTIFICATE-----
Generated at Sun Sep 29 19:45:41 2024 by rpki-client on console-fra.rpki-client.org