Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa
File: 326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa (raw, json)
Hash identifier: ObW606lQaDERbAr1Jku+z8Hd36wvXxKH7PV6hqKvMXE=
Subject key identifier: 5F:D5:F8:5B:83:BA:F3:BD:14:8D:00:8F:C6:24:F0:F3:CD:8C:37:00
Certificate issuer: /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial: 41A8EC889693134B0DDCD3192DFF8FEBC4778B94
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa
Signing time: Mon 04 Mar 2024 01:05:40 +0000
ROA not before: Mon 04 Mar 2024 01:00:40 +0000
ROA not after: Mon 03 Mar 2025 01:05:40 +0000
asID: 201938
IP address blocks: 2a07:54c7:6100::/44 maxlen: 44
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a8:ec:88:96:93:13:4b:0d:dc:d3:19:2d:ff:8f:eb:c4:77:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Validity
Not Before: Mar 4 01:00:40 2024 GMT
Not After : Mar 3 01:05:40 2025 GMT
Subject: CN=5FD5F85B83BAF3BD148D008FC624F0F3CD8C3700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:8f:4a:7f:f1:b3:9a:af:99:6b:f5:66:0b:
26:e5:a9:c6:bd:44:99:69:fa:af:5d:86:d2:19:0a:
11:16:65:e1:23:60:8d:2c:d5:82:42:11:00:dc:66:
5a:1f:09:b8:5b:d8:38:dc:2e:b8:20:f7:a9:98:3c:
af:5a:21:d0:81:26:bb:ec:c0:3c:52:26:dc:80:84:
81:d8:51:57:e4:67:54:65:b9:78:81:d0:ac:1d:dd:
6a:ca:d7:20:82:82:83:e8:1e:6e:f7:68:06:45:03:
ca:53:d4:db:7b:b6:4c:7f:52:5f:ec:ee:2d:20:43:
0c:cc:1e:d6:33:09:a3:5c:32:c4:1d:49:00:20:eb:
82:c9:82:41:30:80:ab:18:5c:6b:88:e9:f3:fb:17:
ac:68:9f:ce:89:62:53:ac:68:b1:20:1c:34:80:4f:
67:fd:70:31:08:aa:54:14:b1:aa:ca:fc:aa:b3:85:
36:bf:07:8a:3e:f2:2c:73:96:97:a7:d1:be:9e:1f:
b9:b4:21:c4:b8:ce:e8:d3:79:4e:9b:cd:7d:39:e8:
cc:d5:d5:6e:5d:15:31:c1:ce:c7:32:ed:65:da:ac:
73:88:87:97:04:66:16:37:67:bd:2c:43:a4:92:4f:
c2:91:a6:95:10:55:7e:81:bd:53:38:01:45:42:6b:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D5:F8:5B:83:BA:F3:BD:14:8D:00:8F:C6:24:F0:F3:CD:8C:37:00
X509v3 Authority Key Identifier:
keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:6100::/44
Signature Algorithm: sha256WithRSAEncryption
92:64:35:95:32:14:40:db:4f:a7:29:8d:b6:68:0c:60:2a:76:
ea:a2:ac:23:77:58:ab:bf:58:67:bb:07:8d:2c:3e:82:24:fc:
67:89:5d:34:8e:8e:4d:a3:45:00:2d:e6:bb:a7:97:f2:55:a3:
e3:bc:17:7f:05:ff:eb:ad:af:5e:71:00:f2:23:6c:a5:54:05:
a1:d6:e6:ce:1f:2e:6b:29:d8:dd:47:f5:69:15:b9:ee:ed:ba:
95:ca:59:e4:68:47:49:c7:2d:93:14:48:a6:85:4c:c8:95:ea:
4f:cf:99:b7:07:ba:a7:6d:36:e2:2e:5e:61:f9:0b:b6:f7:38:
55:01:fa:9a:2a:b8:98:6e:a0:96:65:2b:7e:7b:f5:8b:fd:6a:
89:78:b1:fa:21:3d:bc:18:e3:d6:58:23:3e:ce:7b:bf:21:2d:
00:91:c3:67:80:9f:6d:90:d0:da:23:6c:a6:c6:e1:c7:3c:4a:
02:dc:4b:c1:46:01:57:73:2c:d7:f7:ab:fc:0a:c1:dc:5c:19:
f0:32:96:e6:5c:5c:0f:f6:8b:1a:41:92:e7:2a:c2:2d:f6:48:
5b:03:ed:18:b8:40:c5:0a:af:c4:78:26:8b:4f:e5:9c:99:e6:
4c:c3:30:31:13:c8:c5:5a:e4:db:50:ee:6c:b7:f2:e2:6f:4a:
40:93:35:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 19:13:57 2024 by rpki-client on console-fra.rpki-client.org