Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: YEqnftMw4d2m7ETg8+GmGzS8S0KDTkD0Ekp2X2ReccI=
Subject key identifier: 89:60:87:D0:C8:55:2E:1A:D4:9D:31:94:C7:F9:48:D0:F1:EC:FD:F5
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 4C6E266C865C0AC1E77113E8F6DA9801000EC8AF
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:08:59 +0000
ROA not before: Sat 02 Dec 2023 03:03:59 +0000
ROA not after: Sat 30 Nov 2024 03:08:59 +0000
asID: 151349
IP address blocks: 2a06:9f81:3002::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6e:26:6c:86:5c:0a:c1:e7:71:13:e8:f6:da:98:01:00:0e:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:03:59 2023 GMT
Not After : Nov 30 03:08:59 2024 GMT
Subject: CN=896087D0C8552E1AD49D3194C7F948D0F1ECFDF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:8a:5a:5b:41:69:d1:1a:a6:ba:d1:dd:14:
57:7e:ba:01:8f:8e:b1:72:b9:e3:5c:bd:b0:3a:fd:
65:48:ce:58:4c:70:02:d0:8f:76:87:15:d8:e9:65:
1d:ff:2a:a1:6f:18:98:1f:1d:ed:8b:7e:32:49:18:
6c:3c:9a:b0:7e:f1:8c:30:ae:00:42:36:22:54:f8:
81:cf:af:90:71:aa:a3:a5:87:90:9a:6e:17:6d:87:
ad:d0:a9:dd:8f:12:81:ab:25:44:c1:b3:48:d7:02:
53:93:a5:a7:40:fb:9d:0d:20:0c:56:82:1a:ae:af:
0b:55:8b:e2:60:e6:a3:6b:ba:bd:93:49:45:4f:ff:
a9:aa:07:14:8e:b3:12:dd:cc:c9:2b:5b:d2:dd:a8:
4e:5d:c5:30:d2:ee:0b:52:da:79:9b:ef:45:70:3d:
5e:9a:f0:3f:94:68:7b:29:b6:a8:93:08:3a:ac:3b:
4f:c7:af:3c:f6:f8:28:89:30:d2:fe:a1:56:06:de:
c8:c6:1d:23:72:9b:2d:ca:f9:27:f0:bc:fe:79:c0:
b2:38:20:67:af:59:62:be:c7:91:51:f6:5c:14:3f:
cc:a2:c6:cf:96:a3:49:5f:0e:3b:9f:6b:83:f4:66:
5d:df:7a:fc:53:d0:83:a7:c8:42:ac:34:37:4c:42:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:87:D0:C8:55:2E:1A:D4:9D:31:94:C7:F9:48:D0:F1:EC:FD:F5
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3002::/48
Signature Algorithm: sha256WithRSAEncryption
a5:36:c9:d5:b3:ba:d5:a4:9f:d8:cd:ae:2f:9b:7b:6a:b3:de:
2b:38:88:b3:55:f2:12:bc:99:12:2e:6e:36:33:8a:6f:25:6a:
78:d1:47:46:5e:8b:04:c0:92:c0:5a:d7:1a:d4:60:e1:01:61:
eb:f5:52:91:9d:71:ee:ba:dd:7e:b0:26:5b:71:8b:23:c4:ee:
2f:5c:41:3a:de:a8:c8:1b:4e:14:30:99:42:06:31:fa:62:54:
33:70:d9:16:75:3a:f3:4b:3d:b2:c9:09:da:f8:e3:57:e9:28:
51:1a:cf:a5:0e:f4:e1:1b:9f:9d:64:4f:93:40:70:fb:16:f8:
1d:ad:98:ef:7c:36:d8:6d:c7:bc:d3:0c:f5:fe:3e:7a:3f:0d:
ee:e2:82:67:a8:27:ad:8d:5f:30:ef:2e:11:95:e5:97:09:f9:
b4:a7:22:62:d4:9d:a7:80:48:e5:3e:bb:34:38:4d:ed:a4:44:
7d:7a:3e:5d:45:89:8f:13:f7:e4:a9:79:2a:7f:4c:cd:02:5c:
8c:90:eb:00:8c:24:ed:3d:40:6c:f1:93:44:86:34:6e:17:ac:
b0:98:a2:7b:18:30:14:15:6f:aa:a8:28:31:c1:39:36:e4:18:
a2:bb:68:ba:23:82:56:71:86:90:93:2e:21:c5:12:44:d2:88:
42:7e:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org