Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: nxeBZHZSCQzupaFZbD01xaSVx/GD6o0xRQEhHGo0doo=
Subject key identifier: 74:BC:44:2A:77:6F:D1:3C:5C:CD:E8:84:35:43:38:20:13:7C:31:4C
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 729A38F8CA7022C2EE2C82EBBE5F5A3B2F85E892
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa
Signing time: Wed 27 Mar 2024 04:45:58 +0000
ROA not before: Wed 27 Mar 2024 04:40:58 +0000
ROA not after: Wed 26 Mar 2025 04:45:58 +0000
asID: 151349
IP address blocks: 2a06:9f81:3004::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9a:38:f8:ca:70:22:c2:ee:2c:82:eb:be:5f:5a:3b:2f:85:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Mar 27 04:40:58 2024 GMT
Not After : Mar 26 04:45:58 2025 GMT
Subject: CN=74BC442A776FD13C5CCDE88435433820137C314C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:32:ba:12:28:5c:8c:01:75:fa:a9:2d:1e:
7a:9a:79:3c:b1:cc:41:35:bb:31:fa:e6:5e:67:e8:
cb:d9:11:1d:29:64:d5:e0:97:6e:15:34:26:9e:9b:
c5:7a:83:af:4c:e7:48:c0:e6:17:33:71:53:8a:4e:
2d:6c:ec:d6:6b:0d:21:12:47:32:71:96:e1:e4:7f:
70:7d:48:a2:97:94:7b:e9:7e:eb:dc:03:15:f9:72:
13:5a:aa:0f:3c:b5:bf:95:51:66:35:44:a9:46:51:
87:3c:e2:af:d6:86:4a:e2:45:63:6d:54:78:27:f2:
3c:08:82:f6:95:72:34:fb:42:73:b4:fa:52:8d:32:
10:6e:d7:6a:9a:be:5c:6c:af:1c:f3:96:f2:5d:a6:
4e:2a:03:cf:97:34:72:cf:93:4f:24:c6:bc:9f:c7:
e8:ea:d2:1f:20:06:72:87:b1:f3:10:63:d7:11:71:
b2:17:e7:5b:03:ef:8c:a1:62:a6:a6:52:3c:89:76:
f6:e9:3b:71:48:d8:ef:01:e7:52:4a:72:43:89:6d:
30:c3:cf:19:82:6b:df:95:4a:bc:4b:70:a8:0d:8e:
b0:46:a3:e8:eb:82:58:2d:3c:a8:dc:e8:b0:d4:86:
02:b4:48:32:eb:e6:33:bb:94:51:f2:26:3e:8d:c7:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BC:44:2A:77:6F:D1:3C:5C:CD:E8:84:35:43:38:20:13:7C:31:4C
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3004::/48
Signature Algorithm: sha256WithRSAEncryption
84:09:1e:17:04:b2:d5:9b:af:df:c3:f8:5f:4c:0e:7c:c2:fe:
a9:9e:e5:92:54:3f:db:20:13:f6:23:93:2e:05:9b:d6:cb:89:
c5:c2:40:fe:48:c5:19:ef:56:81:dc:32:6d:51:b0:d0:54:45:
a3:f9:0c:d8:e9:dc:29:84:cc:22:fb:8d:10:c2:55:e8:fa:99:
14:50:5b:4c:80:8d:75:a6:81:ed:17:f6:1c:e2:da:1a:11:19:
06:a2:c5:e8:d1:1b:a0:b1:fe:ae:10:4a:12:49:1f:6e:99:b3:
98:07:3d:14:4f:51:93:67:4b:a8:24:49:86:3a:0e:8c:da:b6:
49:ba:c4:bb:fb:14:e3:da:10:d5:1c:69:50:64:16:bd:b5:ed:
1d:e0:79:c0:f7:98:64:74:73:a7:ff:d1:9a:ab:a6:aa:f5:f7:
dc:53:6f:27:c1:d0:57:53:be:fe:26:6d:96:3b:be:49:f5:04:
89:72:ab:ab:fb:85:aa:c2:02:fb:85:d5:a6:cd:0e:d3:a3:a8:
ff:e5:87:95:12:82:52:6d:d9:34:14:5b:d1:2f:00:7c:20:46:
7b:10:88:91:2f:ed:14:7f:ae:eb:41:9a:8f:c5:fc:a7:30:e5:
75:1b:9d:3a:e2:7d:a1:81:15:08:f6:e2:68:d5:93:0e:f3:c2:
c4:aa:3b:9f
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUcpo4+MpwIsLuLILrvl9aOy+F6JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3NEY1MkYzRERBRDJDMzU3RTQxNkY4Q0U5NDk2MEQ2
RUZBNDMxQTAeFw0yNDAzMjcwNDQwNThaFw0yNTAzMjYwNDQ1NThaMDMxMTAvBgNV
BAMTKDc0QkM0NDJBNzc2RkQxM0M1Q0NERTg4NDM1NDMzODIwMTM3QzMxNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsTK6EihcjAF1+qktHnqaeTyx
zEE1uzH65l5n6MvZER0pZNXgl24VNCaem8V6g69M50jA5hczcVOKTi1s7NZrDSES
RzJxluHkf3B9SKKXlHvpfuvcAxX5chNaqg88tb+VUWY1RKlGUYc84q/WhkriRWNt
VHgn8jwIgvaVcjT7QnO0+lKNMhBu12qavlxsrxzzlvJdpk4qA8+XNHLPk08kxryf
x+jq0h8gBnKHsfMQY9cRcbIX51sD74yhYqamUjyJdvbpO3FI2O8B51JKckOJbTDD
zxmCa9+VSrxLcKgNjrBGo+jrglgtPKjc6LDUhgK0SDLr5jO7lFHyJj6NxzIHAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUdLxEKndv0TxczeiENUM4IBN8MUwwHwYDVR0j
BBgwFoAUgXT1Lz3a0sNX5Bb4zpSWDW76QxowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFlNDg5MDEtZmFiZS00MWYxLTkzNTUtNWYxNDg4ZjUx
YmQ3LzAvODE3NEY1MkYzRERBRDJDMzU3RTQxNkY4Q0U5NDk2MEQ2RUZBNDMxQS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgxNzRGNTJGM0REQUQy
QzM1N0U0MTZGOENFOTQ5NjBENkVGQTQzMUEuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2ZhZTQ4OTAxLWZhYmUtNDFmMS05MzU1LTVmMTQ4OGY1MWJk
Ny8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDMwMzQzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzEzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMAQwDQYJKoZIhvcN
AQELBQADggEBAIQJHhcEstWbr9/D+F9MDnzC/qme5ZJUP9sgE/Yjky4Fm9bLicXC
QP5IxRnvVoHcMm1RsNBURaP5DNjp3CmEzCL7jRDCVej6mRRQW0yAjXWmge0X9hzi
2hoRGQaixejRG6Cx/q4QShJJH26Zs5gHPRRPUZNnS6gkSYY6Dozatkm6xLv7FOPa
ENUcaVBkFr217R3gecD3mGR0c6f/0Zqrpqr199xTbyfB0FdTvv4mbZY7vkn1BIly
q6v7harCAvuF1abNDtOjqP/lh5USglJt2TQUW9EvAHwgRnsQiJEv7RR/rutBmo/F
/Kcw5XUbnTrifaGBFQj24mjVkw7zwsSqO58=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org