Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: AEvliFsNOXxQpu0icTnuQdvssDQKL4Aeu+PXd9EgqyM=
Subject key identifier: 99:E7:EC:59:75:41:F1:B4:4F:B9:57:98:5E:ED:6A:C4:72:AC:21:74
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 7248D088384698244FDC414A23E195B7F4E0FDAF
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:08:58 +0000
ROA not before: Sat 02 Dec 2023 03:03:58 +0000
ROA not after: Sat 30 Nov 2024 03:08:58 +0000
asID: 151349
IP address blocks: 2a06:9f81:3000::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:48:d0:88:38:46:98:24:4f:dc:41:4a:23:e1:95:b7:f4:e0:fd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:03:58 2023 GMT
Not After : Nov 30 03:08:58 2024 GMT
Subject: CN=99E7EC597541F1B44FB957985EED6AC472AC2174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:32:7c:e9:57:80:fb:46:e6:fa:91:b5:ca:
d2:fc:f3:be:2f:43:46:b8:95:08:59:30:c8:84:1e:
51:c4:65:8e:f5:5f:73:67:00:95:86:f0:1b:1b:52:
f4:0b:c1:28:49:c1:88:e9:4a:bb:27:b8:27:9a:1a:
f4:69:97:89:c6:c0:81:a1:9e:8b:a5:46:3b:5e:6b:
08:fd:91:e6:a8:58:e3:4b:d4:74:8e:82:19:ba:c8:
a8:f7:c9:39:ef:2b:d3:9c:a8:6d:d7:ae:a5:77:6e:
07:2a:2a:21:cc:05:ad:b9:c9:db:0a:ca:c4:54:82:
6a:ba:89:0b:80:ea:1e:b9:cc:d3:7f:ad:8c:25:6c:
02:f1:c9:6a:1c:1f:9f:16:30:23:13:e3:dd:a9:ff:
41:52:a7:e1:22:24:22:ec:1e:af:67:e4:a5:11:30:
22:c2:ea:f9:b3:62:ec:13:1e:f4:e5:d4:eb:47:fe:
25:01:3c:66:92:63:6c:d4:3f:b0:e8:b9:15:88:21:
04:b4:3d:85:79:58:b8:6a:26:c1:e2:a1:71:13:69:
b2:83:d8:72:68:59:1c:3c:3e:50:8a:bf:78:8f:a2:
92:68:5f:e8:3d:47:35:a3:08:11:67:99:e6:91:bb:
ce:d4:d9:78:75:28:27:c8:f3:39:e1:12:15:47:f3:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:EC:59:75:41:F1:B4:4F:B9:57:98:5E:ED:6A:C4:72:AC:21:74
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3000::/48
Signature Algorithm: sha256WithRSAEncryption
1d:c0:b8:92:40:c7:e2:f7:40:62:fa:4d:70:e8:cd:f7:69:c2:
f4:f0:ce:59:85:ce:23:40:56:6d:2e:3a:8c:ad:13:c3:f6:9e:
fe:d4:cb:ce:da:84:51:98:4c:26:54:a8:51:fe:ef:d7:24:79:
32:41:56:73:ce:27:c2:f1:27:33:fe:d1:d8:d7:6e:6f:00:3e:
f1:98:cf:24:13:72:e4:c9:c3:6e:c4:70:63:78:95:84:b5:89:
49:e2:11:4b:bc:1a:df:3f:b6:8e:83:f4:22:7d:51:3e:c7:3b:
e6:68:d2:ec:31:f5:c2:16:2f:c6:30:c4:bf:0b:ef:41:89:b1:
57:c2:42:21:99:9b:56:c4:ca:87:e6:b4:93:88:45:ae:ff:2f:
69:40:9b:6f:40:60:07:51:17:d0:97:2f:1c:6d:b6:74:35:b7:
fe:96:1d:f9:99:27:76:1b:5a:d0:9d:d4:10:28:7c:10:9d:61:
d0:a9:6d:e0:32:28:5a:16:38:c2:2f:80:c9:38:76:54:17:d3:
1f:25:15:b4:45:8e:05:7e:43:db:d1:29:da:c5:9c:55:0d:95:
61:55:d7:5a:06:9f:ca:1b:3e:58:d7:3d:e0:47:02:a3:10:11:
72:34:de:d1:38:36:75:f1:bb:20:59:17:10:0f:cd:3d:ff:e6:
e9:fd:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org