Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333034303a3a2f34382d3438203d3e203230343733.roa
File: 326130363a396638313a333034303a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier: glVqWE15UvXB1RTcvYFkwPjm3PrN75wimrSdIs1MhNc=
Subject key identifier: DF:0D:C9:14:25:31:17:6A:37:FA:6C:66:0C:BB:F5:FE:95:13:90:01
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 46EAD3FBA6DDF12058D26C9A3626CDB13B0F9AF9
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333034303a3a2f34382d3438203d3e203230343733.roa
Signing time: Wed 20 Mar 2024 07:05:50 +0000
ROA not before: Wed 20 Mar 2024 07:00:50 +0000
ROA not after: Wed 19 Mar 2025 07:05:50 +0000
asID: 20473
IP address blocks: 2a06:9f81:3040::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ea:d3:fb:a6:dd:f1:20:58:d2:6c:9a:36:26:cd:b1:3b:0f:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Mar 20 07:00:50 2024 GMT
Not After : Mar 19 07:05:50 2025 GMT
Subject: CN=DF0DC9142531176A37FA6C660CBBF5FE95139001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:96:50:fd:9d:12:80:f4:55:29:35:6a:d4:
95:fb:e5:a2:f8:00:ef:17:f3:b4:3e:73:ac:f4:32:
ee:4c:ff:71:b1:ad:bd:b0:d6:9d:50:64:de:3f:a6:
de:05:d3:cb:b3:84:e9:b7:c7:79:c9:fc:09:35:77:
c8:e4:59:eb:df:c8:df:b2:21:e1:53:e3:c8:f1:0e:
35:e7:08:c7:b9:57:d5:ea:2d:2b:78:56:7d:e9:9e:
31:8a:40:a8:90:05:ec:24:b1:bf:68:f2:f4:10:b4:
56:44:53:71:36:22:87:88:4d:77:a7:48:eb:38:f7:
c8:c0:d9:4c:f8:90:4a:11:fa:af:6f:25:23:a4:9b:
d4:e0:59:36:67:c5:4f:81:96:d7:ad:23:46:2e:38:
f2:5d:28:43:3b:5c:fc:dd:50:58:87:28:cc:79:8e:
aa:e7:f3:a8:ed:31:ef:50:a2:20:3b:52:8b:66:16:
84:31:45:1c:0f:aa:b6:6d:85:1d:63:0d:b7:66:e7:
28:94:22:a1:95:75:83:24:fa:16:58:24:e0:47:2b:
32:b4:ba:9e:09:bd:8b:82:79:c2:b4:8e:72:c7:b1:
bd:3a:9f:65:e2:33:5f:3e:c5:cb:48:bc:e7:fc:58:
0b:9b:b6:28:cd:06:58:1f:4d:a4:b8:47:60:87:8d:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:C9:14:25:31:17:6A:37:FA:6C:66:0C:BB:F5:FE:95:13:90:01
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333034303a3a2f34382d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3040::/48
Signature Algorithm: sha256WithRSAEncryption
5b:fe:55:ef:d8:85:2b:51:cb:ba:9f:0b:5e:6e:7a:61:de:93:
ef:71:bc:1d:5d:52:a3:ef:ba:45:59:76:a9:7c:10:e2:8f:25:
a6:2a:b9:06:6f:07:ce:35:95:a6:65:49:49:f2:a3:69:25:fb:
f2:86:94:a7:3b:5a:11:f8:31:4b:dc:45:5d:15:98:47:32:28:
10:e7:2e:eb:05:1f:3a:da:37:93:63:e8:a2:24:8b:39:f7:74:
a0:6f:d9:e4:85:62:cc:68:e5:c4:98:b0:f8:7c:60:4c:0a:af:
31:00:8c:05:cc:2c:90:ef:5f:58:59:4c:f3:e7:7b:36:53:0d:
07:2a:79:55:c2:2d:f1:79:fd:af:1c:d4:3c:df:b0:b3:de:55:
69:d1:0d:bd:fb:6a:1c:03:9a:4c:fc:8b:5a:61:40:33:aa:5e:
ac:ee:f1:11:03:93:19:45:02:27:08:9c:ab:80:0c:8c:b3:5d:
f2:43:57:ae:ee:6d:e1:40:65:38:03:e9:a9:67:0d:54:f3:77:
58:45:cb:a7:91:e2:88:dd:7b:0f:95:56:00:68:6e:ed:87:fd:
7d:2e:ad:50:90:cb:97:a9:e8:e7:68:b6:0d:ea:0a:b4:a8:e9:
8a:53:29:66:5c:e1:22:4d:cf:16:22:27:79:af:53:4b:3a:87:
a6:39:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org