Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: iHaSELVoa1QoZg53ZjSLV1ihWbQsSC6CfRoE8Js0iM8=
Subject key identifier: C1:DF:42:71:3C:B2:52:88:D4:E0:1A:78:74:D0:84:FC:FB:9E:54:BE
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 5B19347C311B2BE90AD300C865BC8A812F294A12
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:08:58 +0000
ROA not before: Sat 02 Dec 2023 03:03:58 +0000
ROA not after: Sat 30 Nov 2024 03:08:58 +0000
asID: 151349
IP address blocks: 2a06:9f81:3003::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:19:34:7c:31:1b:2b:e9:0a:d3:00:c8:65:bc:8a:81:2f:29:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:03:58 2023 GMT
Not After : Nov 30 03:08:58 2024 GMT
Subject: CN=C1DF42713CB25288D4E01A7874D084FCFB9E54BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:04:28:ba:25:d2:b7:6f:62:bc:fb:38:78:
e6:79:17:45:44:81:40:92:7f:f7:54:bd:d8:22:a7:
5e:c9:e0:fd:c5:1a:74:9a:26:32:64:29:9d:55:81:
15:86:85:c9:d5:d5:71:5c:02:de:23:2b:8f:78:3e:
8d:ee:12:bc:49:6b:4a:b8:3e:53:2f:f8:22:2b:77:
7a:e1:cc:e9:c5:9a:72:5c:81:55:5f:26:9b:e0:f8:
98:da:9e:59:1e:e6:5b:bd:32:02:fe:2a:52:ed:b3:
86:06:1e:be:ab:cb:0f:52:af:38:50:de:90:3d:98:
ff:90:e8:69:c5:61:44:b1:9a:c4:97:6b:c2:2a:9a:
0a:15:1d:b2:96:98:f6:e5:58:14:69:17:40:02:51:
3e:5c:62:a5:58:80:2d:34:f5:ef:0a:04:26:02:c2:
35:5b:ec:f8:cb:dc:b8:6d:58:1e:ef:12:5d:57:86:
c4:71:92:bb:bd:c1:d4:5e:73:9a:8b:ce:62:f9:ec:
e4:f2:40:46:83:1c:db:6a:d3:9f:2b:b6:a7:3d:5c:
57:ad:26:53:e2:5a:d2:97:74:fc:ab:57:37:91:14:
6c:a0:7f:62:0c:93:66:87:fa:19:49:0e:91:8e:9f:
e5:0a:90:4b:2d:29:90:7e:0f:b2:26:1b:27:37:28:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:42:71:3C:B2:52:88:D4:E0:1A:78:74:D0:84:FC:FB:9E:54:BE
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3003::/48
Signature Algorithm: sha256WithRSAEncryption
5b:80:2f:1b:93:10:7b:98:10:ea:53:ae:43:5c:bf:88:50:c6:
4e:f7:83:55:9e:27:cb:69:90:b1:a5:ed:be:5a:27:32:11:9b:
7e:0f:ad:aa:a4:82:44:8c:fc:f2:2c:bc:a8:14:62:5f:89:1a:
88:01:87:4f:10:77:d0:4f:f1:47:52:c6:78:e7:51:de:89:a2:
5b:60:f4:72:15:2d:85:ad:18:be:1a:b1:20:99:42:21:96:0b:
ea:b6:4e:ac:d7:e5:34:7f:e2:9f:72:ce:54:2c:16:08:dd:30:
58:d2:b8:21:8f:97:a1:9f:da:ba:2a:1f:47:ef:f7:3f:2a:1b:
1b:b2:cc:53:9f:d6:9e:b3:02:a3:ce:2b:fc:0b:26:a1:61:9b:
57:49:c7:9d:7a:cc:41:3b:9c:94:02:59:5f:3e:a3:78:3b:36:
45:52:91:db:12:e5:2b:11:bf:2a:03:1b:82:9f:b1:f6:aa:05:
2e:5f:74:24:b4:ab:9f:37:0e:c9:13:08:0c:67:dc:08:9a:f1:
49:5d:6f:f6:47:59:7b:d6:42:54:6c:8a:2b:be:72:8d:94:bc:
0f:ae:15:f0:73:de:c3:7d:34:ef:d5:45:e4:9b:22:43:cc:b4:
0b:f3:11:56:bf:76:87:62:ad:90:3e:ee:ce:d1:60:6e:90:e9:
78:5c:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org