Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: bEwZrg+/ekpfQYCk+rwx3frATv/aLpF5/Z+q/0ezlok=
Subject key identifier: A2:B2:30:E8:92:84:58:0D:8E:AA:25:E6:00:AF:B2:17:10:FA:33:FA
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 7E7ED9D1510CA9778416BCC31BB6822F6A9CCA34
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:08:58 +0000
ROA not before: Sat 02 Dec 2023 03:03:58 +0000
ROA not after: Sat 30 Nov 2024 03:08:58 +0000
asID: 151349
IP address blocks: 2a06:9f81:3011::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7e:d9:d1:51:0c:a9:77:84:16:bc:c3:1b:b6:82:2f:6a:9c:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:03:58 2023 GMT
Not After : Nov 30 03:08:58 2024 GMT
Subject: CN=A2B230E89284580D8EAA25E600AFB21710FA33FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:9a:c6:b7:df:65:48:6c:e1:a7:b3:60:60:
9c:c4:78:ad:97:59:a4:5e:04:65:28:a8:64:75:f2:
4a:62:7c:9e:02:3f:78:19:51:fd:4f:8c:8c:ff:21:
1a:5d:bf:f7:6e:34:71:36:40:1d:54:28:a1:06:0d:
c6:f7:50:76:5c:fa:6b:49:d2:7a:f1:54:8d:2c:fc:
6e:2d:0b:bf:c9:3f:75:a0:7a:ba:da:d1:fa:0e:33:
e9:4f:db:9e:ae:e2:91:d1:00:02:de:6b:65:8b:fc:
5e:49:f6:2c:34:be:4b:66:0e:35:75:f3:55:81:c9:
73:7f:3c:96:36:68:39:3d:48:b5:06:4b:bd:19:03:
e6:63:62:16:20:e7:75:57:96:32:17:1b:4d:29:b2:
bd:a7:1d:c9:ae:e6:51:96:f7:6c:99:70:38:d1:36:
b0:32:1a:94:4d:b6:01:22:8e:f8:20:da:74:91:95:
66:e0:d3:2d:7a:35:f7:67:55:09:7f:16:52:14:54:
49:54:12:23:0b:e9:cb:e7:71:ee:5a:5b:c7:ea:da:
58:fd:91:87:9c:a9:fa:70:5d:43:4e:4f:e5:2e:4c:
1a:e7:91:0d:d2:f7:31:3b:f3:04:45:d5:eb:d5:f7:
1d:eb:73:71:25:a3:7d:af:63:9f:42:00:fa:78:17:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B2:30:E8:92:84:58:0D:8E:AA:25:E6:00:AF:B2:17:10:FA:33:FA
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3011::/48
Signature Algorithm: sha256WithRSAEncryption
1e:8d:43:02:29:cf:0b:f7:28:37:87:b7:2a:00:94:4f:59:c8:
ce:6c:62:45:97:40:96:32:85:2a:6d:ba:72:02:11:47:84:7e:
d2:66:22:2f:42:74:e6:ff:e3:da:18:db:9e:05:a8:5f:19:b3:
72:de:a9:e2:ab:18:aa:89:40:e2:7d:2f:6c:a1:b6:8a:97:63:
5c:3b:21:f6:ea:ba:29:ea:68:7f:6e:0d:d1:13:b1:1a:4c:bf:
f4:e8:e5:8e:f4:70:7e:76:2b:48:e1:89:d5:4a:d6:65:fa:b6:
e1:2c:8c:1b:09:b7:c3:a0:7f:bb:b9:97:59:65:ad:77:8b:7a:
92:0f:d2:9d:5f:90:5b:ff:20:7c:6d:5d:55:1c:84:65:9e:1d:
b2:f2:aa:e0:eb:6e:6f:5b:eb:75:20:16:ef:01:7c:51:60:3e:
64:78:e0:01:39:61:eb:49:15:ff:9f:a0:bb:b1:60:54:2a:7d:
d0:3d:44:b4:dd:6e:c0:c7:ec:c7:34:01:f9:85:e0:ab:c3:3b:
67:a1:85:b0:a1:25:c8:80:62:05:c1:d2:3f:68:62:07:42:4c:
a6:2d:bc:fc:ba:41:24:03:81:52:97:4e:aa:59:58:33:60:01:
f5:c4:e0:d5:54:00:0d:8d:8c:be:e4:09:63:95:d5:67:40:5c:
b8:dd:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org