Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa
File: 326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: MZ0APLSfbNb0xVuGc62RE8Nm8JOKMhh4ln1PRDPOBwY=
Subject key identifier: CC:BA:98:0C:21:FF:D2:A5:46:46:87:DD:31:64:DD:76:14:3F:FB:94
Certificate issuer: /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial: 515BD8D9C895C1A3E070C4B9CC88988B4730FAD3
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Mon 09 Sep 2024 08:59:15 +0000
ROA not before: Mon 09 Sep 2024 08:54:15 +0000
ROA not after: Mon 08 Sep 2025 08:59:15 +0000
asID: 214757
IP address blocks: 2a09:54c6:d0a0::/44 maxlen: 44
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5b:d8:d9:c8:95:c1:a3:e0:70:c4:b9:cc:88:98:8b:47:30:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Validity
Not Before: Sep 9 08:54:15 2024 GMT
Not After : Sep 8 08:59:15 2025 GMT
Subject: CN=CCBA980C21FFD2A5464687DD3164DD76143FFB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:14:df:a3:59:96:7e:a4:37:1b:3e:23:e7:
c0:1e:bc:a5:9b:ac:a4:84:53:f2:15:34:7c:19:40:
f0:5c:2e:5a:e1:1b:d2:73:75:66:44:a5:1c:51:90:
0d:8e:5c:ac:b3:87:1b:c9:43:5c:bb:19:02:ab:79:
de:5a:24:0c:1a:dc:55:47:55:70:6a:92:91:9b:e1:
7d:0f:6e:4a:c1:88:eb:5b:71:2c:8f:b2:c7:f3:ad:
ac:ab:7b:10:0e:6d:b2:12:3a:2a:7a:c9:25:1f:1b:
97:1f:f5:f7:5b:8c:df:fd:e0:86:8f:2d:92:a2:a1:
fc:2c:71:1b:ac:be:f0:a9:3f:e3:3f:2d:b5:78:32:
d4:f4:67:51:88:2f:c8:20:44:ee:66:f7:20:a6:11:
62:31:13:71:11:12:6e:33:7e:7c:a8:79:73:4b:5f:
8c:dc:c9:4c:b2:ac:2e:fd:db:21:f7:73:5e:b4:d3:
5c:1e:3e:9c:17:b3:45:a4:63:75:ef:b9:7e:89:53:
27:ba:3e:fb:2f:fb:91:0b:3a:0f:38:14:03:1b:8b:
20:a4:6f:a2:04:0a:13:1d:c9:31:3f:2b:e0:8f:b2:
c0:0c:03:33:cd:3b:6f:20:ee:dd:f7:41:f6:0e:d0:
fd:58:ce:5d:7f:f9:6f:b4:e5:a0:b5:f5:c0:89:99:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:98:0C:21:FF:D2:A5:46:46:87:DD:31:64:DD:76:14:3F:FB:94
X509v3 Authority Key Identifier:
keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d0a0::/44
Signature Algorithm: sha256WithRSAEncryption
4c:f4:e1:3c:36:00:43:a3:2c:10:78:c0:5d:b7:1a:e3:e5:13:
77:ac:cf:ae:7a:64:7a:73:2f:1e:a0:b4:e2:bd:1c:ba:bf:b1:
37:2b:9e:9e:80:9e:b0:fd:58:81:9f:ac:46:61:7b:29:1e:2e:
12:61:c7:89:06:fb:f3:2a:d9:47:5c:ec:d6:68:26:1b:90:de:
b1:87:78:01:0b:18:ab:75:fe:8c:5d:ac:12:62:53:f8:5d:10:
aa:56:2d:69:5c:50:09:d4:0f:ce:bc:46:98:09:a4:b2:bc:42:
d6:78:cb:a7:b6:ff:43:e9:25:c2:10:01:ae:60:72:95:62:60:
1b:5b:7e:93:df:c5:9f:ce:bc:cd:60:0b:49:6b:cd:70:98:47:
24:8c:60:18:ba:53:60:3f:94:70:a7:84:2a:2e:ed:e9:62:03:
48:e0:85:32:bc:31:46:df:2d:74:b3:93:ad:aa:ef:bb:92:50:
83:9a:74:c9:3a:c1:78:7d:02:23:1b:9c:51:dd:e6:9d:ed:3e:
fd:fc:09:1c:c6:39:51:71:54:ec:c0:85:9f:01:72:8b:4d:99:
3b:ca:83:5f:75:3b:a9:fc:50:20:0c:85:1b:44:92:c0:f2:5d:
86:b5:f5:98:51:28:45:d5:e3:60:f3:e4:31:b4:96:4e:2c:9d:
f8:a7:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 19:45:41 2024 by rpki-client on console-fra.rpki-client.org