Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa
File: 326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa (raw, json)
Hash identifier: rHZTB3kVL2xVs0Ee1jcBNr5lknSMX5HvDTR6CULG7cA=
Subject key identifier: FC:21:73:C8:F3:A9:96:8B:EC:C0:66:98:2B:65:56:DA:E1:31:D7:5F
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 6B995A158DFDCDD1930DBE326802D2D29D20EBC3
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa
Signing time: Mon 25 Mar 2024 13:34:46 +0000
ROA not before: Mon 25 Mar 2024 13:29:46 +0000
ROA not after: Mon 24 Mar 2025 13:34:46 +0000
asID: 139311
IP address blocks: 2a06:9f81:3080::/44 maxlen: 44
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:99:5a:15:8d:fd:cd:d1:93:0d:be:32:68:02:d2:d2:9d:20:eb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Mar 25 13:29:46 2024 GMT
Not After : Mar 24 13:34:46 2025 GMT
Subject: CN=FC2173C8F3A9968BECC066982B6556DAE131D75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:4c:af:6d:da:80:93:19:a2:ba:87:b5:66:
9f:16:d0:6f:2d:b1:01:95:21:78:38:12:14:d2:25:
54:14:8a:b0:ed:8e:b8:5b:af:e6:1d:8c:3d:c0:28:
10:b9:be:81:49:07:6b:50:ca:82:d6:fd:3d:96:35:
21:be:ef:18:51:46:40:99:86:08:34:81:ac:f6:e1:
12:9f:9b:44:97:19:b6:5c:8c:ed:45:e5:b3:21:63:
05:42:d0:a6:4b:92:f6:02:fa:e5:1a:d3:39:49:be:
5a:84:3f:1f:07:ff:66:6e:44:58:f0:9a:9e:19:cf:
b9:27:95:bc:e4:8a:23:1d:8b:35:52:c5:ad:8b:0f:
0f:a7:16:3a:2c:7f:d0:95:88:83:36:3c:d5:df:d0:
81:f2:b2:98:15:c9:d4:d1:0f:2f:c1:ce:63:2c:5b:
28:03:3c:e5:ec:e1:dd:14:80:4c:24:5d:8c:eb:1d:
41:be:eb:94:08:d4:63:8f:39:61:9c:03:aa:4d:41:
d1:b7:e8:77:35:f8:2b:1e:7b:a4:f6:fd:87:e3:58:
a1:b5:94:8f:2a:bc:c7:93:c6:e1:63:b2:60:0c:c4:
f7:5b:94:31:39:a9:fd:07:ab:e4:b1:87:f7:e2:a8:
42:97:6b:d7:de:0f:7d:94:5d:86:fe:50:ce:df:1c:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:73:C8:F3:A9:96:8B:EC:C0:66:98:2B:65:56:DA:E1:31:D7:5F
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3080::/44
Signature Algorithm: sha256WithRSAEncryption
5e:e7:90:f7:b8:37:8a:d2:1f:b0:7e:b1:5e:70:7b:5e:45:63:
3d:7b:af:d5:41:a1:94:99:c0:37:30:ea:bc:c5:a0:f4:3d:01:
e8:a4:20:e3:a8:bd:bc:db:7f:f0:6d:08:c2:91:a9:90:54:bb:
b2:b5:1f:40:23:48:ba:f9:73:46:51:8b:40:8e:a2:03:9a:fb:
57:53:15:dc:60:ec:74:e9:ca:ca:ce:8c:d0:15:7a:8b:6f:e3:
91:73:89:42:84:32:86:63:22:0c:94:5e:b4:c0:dd:0b:30:ea:
21:55:c1:bc:ea:e1:fa:8d:2d:a2:57:c3:9d:4e:47:b0:f7:01:
24:65:4d:70:76:92:19:52:f9:91:bb:ac:f1:e3:55:18:5f:d0:
a2:23:b9:39:66:5a:5a:0f:c4:97:06:0b:00:10:28:40:14:c2:
51:cb:db:8e:99:8f:38:11:a3:6f:5d:0a:50:20:22:c7:43:70:
3a:f0:9d:98:c7:26:37:75:29:17:73:2b:14:b9:93:03:b4:dc:
40:7e:8d:86:7b:f6:19:17:d4:f5:74:98:7a:8b:45:c6:57:9d:
84:3c:76:96:ca:11:2e:f2:3d:4a:d3:b1:53:1b:52:f7:89:a9:
64:65:80:24:d5:cd:5e:19:d0:dc:d2:c3:31:47:9e:6d:65:71:
54:59:a8:1a
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUa5laFY39zdGTDb4yaALS0p0g68MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3NEY1MkYzRERBRDJDMzU3RTQxNkY4Q0U5NDk2MEQ2
RUZBNDMxQTAeFw0yNDAzMjUxMzI5NDZaFw0yNTAzMjQxMzM0NDZaMDMxMTAvBgNV
BAMTKEZDMjE3M0M4RjNBOTk2OEJFQ0MwNjY5ODJCNjU1NkRBRTEzMUQ3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42EyvbdqAkxmiuoe1Zp8W0G8t
sQGVIXg4EhTSJVQUirDtjrhbr+YdjD3AKBC5voFJB2tQyoLW/T2WNSG+7xhRRkCZ
hgg0gaz24RKfm0SXGbZcjO1F5bMhYwVC0KZLkvYC+uUa0zlJvlqEPx8H/2ZuRFjw
mp4Zz7knlbzkiiMdizVSxa2LDw+nFjosf9CViIM2PNXf0IHyspgVydTRDy/BzmMs
WygDPOXs4d0UgEwkXYzrHUG+65QI1GOPOWGcA6pNQdG36Hc1+Csee6T2/YfjWKG1
lI8qvMeTxuFjsmAMxPdblDE5qf0Hq+Sxh/fiqEKXa9feD32UXYb+UM7fHG+dAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU/CFzyPOplovswGaYK2VW2uEx118wHwYDVR0j
BBgwFoAUgXT1Lz3a0sNX5Bb4zpSWDW76QxowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFlNDg5MDEtZmFiZS00MWYxLTkzNTUtNWYxNDg4ZjUx
YmQ3LzAvODE3NEY1MkYzRERBRDJDMzU3RTQxNkY4Q0U5NDk2MEQ2RUZBNDMxQS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgxNzRGNTJGM0REQUQy
QzM1N0U0MTZGOENFOTQ5NjBENkVGQTQzMUEuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2ZhZTQ4OTAxLWZhYmUtNDFmMS05MzU1LTVmMTQ4OGY1MWJk
Ny8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM4MzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzMTMzMzkzMzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBp+BMIAwDQYJKoZIhvcN
AQELBQADggEBAF7nkPe4N4rSH7B+sV5we15FYz17r9VBoZSZwDcw6rzFoPQ9Aeik
IOOovbzbf/BtCMKRqZBUu7K1H0AjSLr5c0ZRi0COogOa+1dTFdxg7HTpysrOjNAV
eotv45FziUKEMoZjIgyUXrTA3Qsw6iFVwbzq4fqNLaJXw51OR7D3ASRlTXB2khlS
+ZG7rPHjVRhf0KIjuTlmWloPxJcGCwAQKEAUwlHL246ZjzgRo29dClAgIsdDcDrw
nZjHJjd1KRdzKxS5kwO03EB+jYZ79hkX1PV0mHqLRcZXnYQ8dpbKES7yPUrTsVMb
UveJqWRlgCTVzV4Z0NzSwzFHnm1lcVRZqBo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org