Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: MTAk59CytgyCdWqAIJP7n0+M9SkVZIAKI86GnpPzEds=
Subject key identifier: A3:60:AB:7D:9D:D2:D6:50:FB:E5:59:F3:C0:C2:9F:87:CC:22:28:F6
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 7D2A625A52D4FD6DF148FE367B6F297DD6B49CF6
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:09:55 +0000
ROA not before: Sat 02 Dec 2023 03:04:55 +0000
ROA not after: Sat 30 Nov 2024 03:09:55 +0000
asID: 151349
IP address blocks: 2a06:9f81:3031::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2a:62:5a:52:d4:fd:6d:f1:48:fe:36:7b:6f:29:7d:d6:b4:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:04:55 2023 GMT
Not After : Nov 30 03:09:55 2024 GMT
Subject: CN=A360AB7D9DD2D650FBE559F3C0C29F87CC2228F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:b9:b6:dc:5b:e0:0f:8b:06:73:5d:4e:40:
6a:e2:69:47:57:7d:1d:6e:82:92:7f:51:98:aa:ff:
af:a2:89:b5:ae:22:46:f5:dc:27:ec:a4:76:47:0e:
a7:3e:bc:c3:6e:d3:a9:19:d2:35:e1:c8:c5:93:d5:
e2:b1:67:a0:2f:14:41:0c:a9:17:1b:d9:19:27:f0:
e4:9f:e9:56:a4:16:8e:0a:11:35:6b:67:2e:81:87:
21:cc:b5:eb:fb:71:d4:05:47:d5:23:22:76:2a:a3:
1d:18:d0:6f:c2:cc:86:19:42:c1:53:d3:04:fd:7c:
1f:64:5f:22:a1:2e:b6:3f:ec:fa:98:12:38:b1:24:
5b:81:f3:59:86:ee:0a:13:40:cb:43:3a:18:d2:90:
70:c7:50:a7:44:a7:20:42:b6:12:4f:29:4f:8a:f7:
bf:78:bb:a8:e2:1a:2b:73:97:d8:d3:55:0c:27:d8:
99:88:1d:c8:38:26:7b:53:13:f4:7f:b1:cf:bc:15:
09:6c:5d:67:f6:f3:23:16:cc:af:c2:e2:6e:35:93:
ca:6d:48:97:85:df:95:bd:d4:e9:6e:35:3c:35:d1:
75:58:ad:a7:35:25:2e:b3:4e:61:87:8b:a0:e6:79:
f0:a1:3e:fd:5e:5d:17:7a:eb:bf:e9:a4:31:30:55:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:AB:7D:9D:D2:D6:50:FB:E5:59:F3:C0:C2:9F:87:CC:22:28:F6
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3031::/48
Signature Algorithm: sha256WithRSAEncryption
6a:f4:a5:c7:cd:12:7b:92:1d:cc:cc:61:ae:b1:c5:f9:f9:44:
20:10:37:79:f0:81:59:6b:aa:1d:56:e5:5b:85:db:52:5b:37:
7f:42:93:f2:3a:49:c6:54:47:ee:4d:e4:2f:2b:48:91:e5:f5:
c2:5d:d3:d6:f1:5a:df:5e:44:ae:22:9c:d6:e4:60:86:3d:89:
c7:40:7c:fe:32:95:d6:ad:4c:29:5d:fc:0b:d0:d7:01:85:7b:
d5:ee:d3:85:ac:91:9d:41:c4:31:c2:d9:4f:59:85:ae:27:3a:
0b:1e:34:55:28:04:79:8a:19:30:34:8a:8b:21:71:45:9c:b1:
03:5b:45:67:13:d9:ba:f9:6e:92:6d:77:9d:21:56:7c:a1:bf:
37:05:4b:2b:09:c5:4c:18:8a:97:62:9f:a6:71:d4:8a:ef:b1:
c0:11:e8:1f:25:ca:3e:6f:8c:d4:6b:e5:cd:ad:88:1b:15:f6:
78:2f:84:df:b7:65:73:3c:27:7b:16:81:fa:bb:ce:d5:b9:45:
3c:2b:65:70:d4:5e:99:6c:5e:d6:6a:ec:f4:33:37:b4:33:ec:
07:e5:68:37:12:b0:b3:72:e5:52:1e:e0:15:68:f8:10:4e:11:
16:34:7b:0e:00:71:b3:65:17:50:81:90:e1:b4:84:b5:ec:45:
ab:9e:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org