Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: fHQiA6k4Mw9zjO6cfelIKcp0P9AB/JdkmxuZXqHyZf0=
Subject key identifier: 26:EE:A8:AD:BD:33:74:B3:B0:4C:F6:3C:5E:8F:26:7B:78:45:49:1F
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 4B750FD585D7853E749D687EBBBDE69E0613F136
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:08:59 +0000
ROA not before: Sat 02 Dec 2023 03:03:59 +0000
ROA not after: Sat 30 Nov 2024 03:08:59 +0000
asID: 151349
IP address blocks: 2a06:9f81:3001::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:75:0f:d5:85:d7:85:3e:74:9d:68:7e:bb:bd:e6:9e:06:13:f1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:03:59 2023 GMT
Not After : Nov 30 03:08:59 2024 GMT
Subject: CN=26EEA8ADBD3374B3B04CF63C5E8F267B7845491F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:ca:f2:89:27:5a:64:44:d9:9f:95:6a:1f:
88:aa:10:83:06:d6:52:08:21:1f:f4:09:08:08:ca:
df:ba:7c:d3:5b:4a:1f:b0:a5:77:9c:fc:91:3d:e4:
4c:ac:27:54:53:01:4b:43:6c:32:11:ab:0a:78:41:
ba:17:7e:fb:bf:5b:8c:fb:ab:2c:c7:6a:70:a5:a6:
31:ca:a2:11:82:5d:4b:e1:b0:ce:86:1d:84:9f:6c:
8c:b9:d6:72:18:4c:73:59:e4:27:c5:ed:49:4e:0c:
e9:6c:c6:a8:73:c7:0f:f3:1f:da:39:7f:ce:c5:98:
b8:f0:40:41:4b:56:81:c5:89:51:03:e9:0f:38:f9:
c8:d6:9e:d5:e2:d5:5c:b0:d8:7e:40:2f:74:4c:c9:
01:f7:e5:d9:c1:44:3e:b3:6a:3c:cf:e4:86:76:eb:
0a:85:61:94:62:11:df:9b:72:e9:de:28:1a:ab:76:
d7:7c:08:01:0b:df:46:e3:d5:e5:9b:b6:78:f6:73:
43:3d:e9:1b:cc:db:16:51:ef:34:fb:5f:14:4e:64:
48:89:e4:4b:83:7b:7c:d3:04:69:c5:2b:5d:dd:ed:
5e:4e:9b:21:aa:26:7b:70:f6:6e:2f:0d:13:13:e7:
88:1f:35:76:1e:36:f3:6f:cf:b1:8d:8a:a4:87:a7:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:A8:AD:BD:33:74:B3:B0:4C:F6:3C:5E:8F:26:7B:78:45:49:1F
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3001::/48
Signature Algorithm: sha256WithRSAEncryption
97:53:24:e0:cd:77:94:f1:21:7f:ee:16:94:99:23:99:37:be:
7a:77:0c:8b:21:60:b0:5e:2c:42:26:91:50:82:9b:97:6c:ea:
6b:f2:71:a1:05:ea:98:73:de:f3:e1:d9:be:5d:57:78:f8:d2:
44:f2:8e:5f:f0:7f:85:ff:84:66:af:21:61:bf:1e:98:1a:9c:
ea:4a:94:5f:ed:c5:c5:e3:7d:08:ee:e3:08:24:ee:01:0e:66:
cf:13:7d:ed:a6:f4:a9:cc:bb:c9:ff:bb:f8:30:db:ff:b0:ad:
d3:f8:f1:bb:12:4b:0c:70:f0:a8:4c:d1:84:16:87:0c:f4:d8:
63:6f:8b:df:e5:0b:34:89:5b:5a:0b:e2:e2:1a:7e:0b:b1:d0:
12:d1:e2:db:5d:d9:2e:5a:8f:84:86:35:05:c3:c6:41:c5:a7:
2e:90:18:10:7f:d4:4f:b8:d2:06:a5:d4:48:da:d7:72:da:f2:
db:4c:2b:79:ad:71:ba:86:e8:e0:74:35:15:27:3b:e5:23:20:
fc:6a:48:e4:75:fa:25:20:54:2e:c8:bf:50:a9:cd:b6:fa:06:
cd:4a:9d:8d:65:ed:db:ef:62:bf:71:1e:b1:32:39:33:f1:5e:
93:87:f4:91:81:6c:a7:33:51:f6:7a:a6:56:56:a2:9e:66:c0:
48:c7:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org