Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: mEp+M0nf1HR0xsKQJJAZkV58vN/aqJhUGAKwPSGe3j0=
Subject key identifier: E4:6D:99:D7:DB:1E:8D:94:EA:63:6A:04:72:F6:89:AF:78:CD:47:C7
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 71B427A11AB196F88CF4DD8B743A0F7E6A32FBE6
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:08:59 +0000
ROA not before: Sat 02 Dec 2023 03:03:59 +0000
ROA not after: Sat 30 Nov 2024 03:08:59 +0000
asID: 151349
IP address blocks: 2a06:9f81:3030::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b4:27:a1:1a:b1:96:f8:8c:f4:dd:8b:74:3a:0f:7e:6a:32:fb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:03:59 2023 GMT
Not After : Nov 30 03:08:59 2024 GMT
Subject: CN=E46D99D7DB1E8D94EA636A0472F689AF78CD47C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:a3:d1:9c:5a:81:a5:4a:bc:c4:b7:d8:a6:
c4:5b:d8:54:40:e2:20:c5:f7:f0:ac:7c:6c:b6:e9:
fe:10:b4:ff:51:f2:16:f3:b2:7c:36:cf:d7:f3:c7:
85:ae:3d:b2:e8:b2:ac:f9:a2:ae:a5:47:f7:3a:0d:
e3:ce:8e:8f:89:f2:ff:c6:13:37:6f:de:31:42:db:
8d:02:de:f0:ab:20:ee:05:8e:71:7d:bd:19:76:da:
93:4c:85:a0:49:6c:62:c3:cb:82:a0:9a:e3:53:bf:
c5:56:70:25:9f:cc:84:ed:ce:80:6e:2c:f1:d9:7c:
b0:e5:9d:84:7f:f2:45:27:1d:09:f2:23:34:c0:ed:
f3:d1:7f:bb:fb:03:00:3b:8d:fd:a8:2d:a7:0b:90:
ea:86:68:74:c3:23:2d:c0:09:52:49:1f:4a:58:a5:
a9:8e:78:c1:b3:0a:33:7c:f4:f5:ba:19:02:c3:83:
64:d2:d0:27:0e:cf:7d:36:fe:2e:d8:b6:75:6f:05:
a3:cb:bc:9e:e4:c1:12:43:ed:27:1f:35:4a:9a:bb:
31:17:d4:7c:e3:c4:fe:e1:e7:d7:59:74:e7:c7:92:
e6:8b:43:3a:7e:0a:a0:10:91:70:cd:a3:e3:2c:d6:
c7:56:f3:a0:99:e1:c1:04:99:94:50:56:5b:66:50:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6D:99:D7:DB:1E:8D:94:EA:63:6A:04:72:F6:89:AF:78:CD:47:C7
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3030::/48
Signature Algorithm: sha256WithRSAEncryption
5d:42:73:a1:e5:de:d8:a6:b5:00:8b:6e:ec:58:e0:a7:f2:85:
53:ef:cf:1c:82:40:7c:af:a7:55:be:52:37:59:f1:9d:8e:e4:
47:6e:10:ff:de:cb:8b:79:51:30:81:57:c8:f2:4e:52:11:ac:
5a:5a:f2:05:87:af:49:6d:16:e8:9a:96:db:71:91:e7:ea:a0:
84:1f:97:99:c8:fd:ae:97:3b:98:13:f8:f5:15:e5:4e:4d:6c:
1f:a0:1b:96:8c:42:fe:2f:be:2b:f4:00:9a:07:e9:b6:d0:fa:
e6:3e:7f:83:b4:6f:ce:9d:93:2a:63:27:03:83:25:eb:4f:a1:
1c:bc:a3:30:b2:c0:a8:0f:df:b6:88:5f:8c:c7:e8:a1:89:87:
90:75:44:62:e1:73:37:7b:27:c1:63:a4:39:f4:ce:05:09:0e:
2f:8c:1a:ee:ea:a7:4d:48:29:95:e3:1d:b5:87:3a:40:7a:66:
f8:6a:84:53:19:18:de:85:6c:32:c7:c1:9f:f8:51:61:77:8b:
bc:3a:77:89:ab:69:89:ed:29:92:f2:0b:84:cf:28:7c:54:3a:
28:ff:ce:2e:74:88:c5:67:89:6d:90:c9:27:b4:79:25:94:8b:
e6:db:00:36:0e:97:a0:ea:04:0e:19:c3:c5:52:5a:84:c8:c5:
52:ad:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org