Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
File: 326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa (raw, json)
Hash identifier: Y71nTwyf9L/23rGVuiHWhg0ML6b4hQblZScmx3cQkMI=
Subject key identifier: 6D:ED:56:7D:9F:2E:55:34:8C:1D:D0:44:D0:A6:4E:0C:F3:DE:44:E2
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 2E17E69905F8B5C02666D077025C82A4F430375B
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
Signing time: Sat 09 Dec 2023 12:40:31 +0000
ROA not before: Sat 09 Dec 2023 12:35:31 +0000
ROA not after: Sat 07 Dec 2024 12:40:31 +0000
asID: 203979
IP address blocks: 2a06:9f81:30fd::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:17:e6:99:05:f8:b5:c0:26:66:d0:77:02:5c:82:a4:f4:30:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 9 12:35:31 2023 GMT
Not After : Dec 7 12:40:31 2024 GMT
Subject: CN=6DED567D9F2E55348C1DD044D0A64E0CF3DE44E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:38:d3:50:bb:6d:98:94:92:cc:43:2c:51:
ab:a3:2e:ac:fd:ed:f8:9b:f4:47:50:e8:89:42:45:
83:20:1e:07:b3:91:18:29:39:31:5c:11:2d:99:75:
42:2f:2b:c6:87:52:60:0f:36:74:94:94:c8:9b:7c:
49:30:45:43:12:97:6f:24:7f:ef:7f:99:a1:98:a7:
46:a9:ee:d6:ab:da:81:a5:dc:73:97:7a:43:40:b9:
71:77:0d:c7:2c:4d:c5:1d:05:56:56:6a:ff:72:3e:
e7:de:7a:26:cc:a9:ae:74:57:58:de:5d:53:1f:ee:
91:1a:a6:31:d4:58:c7:b1:98:87:74:39:ee:d5:b2:
2e:ad:59:88:7e:4e:41:ec:b7:f9:5e:73:01:7a:6f:
1b:fa:ef:ae:0f:ad:8a:02:c0:ad:45:36:d2:80:bd:
90:bf:64:7c:6b:3c:23:c8:52:21:36:61:f8:24:89:
f8:e6:98:da:cf:0f:57:cb:c4:69:bb:68:1c:ae:b4:
4c:20:3e:de:f6:6d:9c:2b:14:ec:ae:b9:81:1f:32:
19:79:49:19:34:ab:a6:9c:5a:44:b0:92:f6:b4:a7:
3a:ab:83:a0:10:93:4d:b1:61:1d:a7:76:77:71:03:
9e:ab:81:63:b7:11:87:1e:3a:65:d7:7b:89:3e:3a:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:ED:56:7D:9F:2E:55:34:8C:1D:D0:44:D0:A6:4E:0C:F3:DE:44:E2
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30fd::/48
Signature Algorithm: sha256WithRSAEncryption
35:a7:c7:9a:21:79:bb:23:2c:9e:b9:38:f7:34:62:e7:bf:5b:
d9:db:a0:42:0c:98:68:f9:de:c7:f0:09:10:db:80:e4:36:0c:
3b:55:58:cc:a2:27:67:ab:9a:fb:06:54:b9:f5:96:da:04:69:
c6:6c:fc:a1:15:6b:0b:fc:72:ce:31:72:a7:76:67:37:45:5c:
b1:6e:d2:28:9e:67:7f:dc:2a:17:1e:7a:65:a6:ea:b7:67:ef:
3f:63:49:7a:2f:c1:17:bc:f6:e0:2f:bf:f5:2b:c4:6b:0b:18:
b9:15:23:94:41:1d:9a:99:9f:7e:d7:43:b6:79:17:e9:15:ae:
52:f6:60:10:3c:a8:8e:ea:b9:2e:b4:e3:f4:75:1c:89:17:50:
1d:59:6f:3d:22:8d:d9:95:13:f5:41:a2:d3:44:08:15:24:53:
07:8d:05:68:0e:a3:12:5d:79:b9:02:41:d0:0b:47:c8:21:1e:
da:99:0e:4d:8d:e0:00:41:15:22:4b:3c:24:76:30:4b:e0:ba:
e5:8e:61:76:98:c6:c8:04:a0:ab:1b:d0:0c:e5:94:0c:2d:cc:
24:a9:ac:1e:b3:f3:a7:6a:40:a4:a1:46:c9:6d:5e:77:bc:34:
33:51:4d:9c:21:04:44:a4:eb:80:db:c4:83:91:b3:69:27:40:
60:49:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org