Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: RJNfRL24Y5eteA1do/rHHdK8PFVk7XNeDFxi479QNxM=
Subject key identifier: D1:AD:4B:A2:6E:F3:76:95:C5:13:BA:C9:9B:F1:1E:B7:F6:C3:FF:D5
Certificate issuer: /CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Certificate serial: 1D9A77E7DCD3C02C25DE6C6D2A17C1A224C62ACE
Authority key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sat 02 Dec 2023 03:08:59 +0000
ROA not before: Sat 02 Dec 2023 03:03:59 +0000
ROA not after: Sat 30 Nov 2024 03:08:59 +0000
asID: 151349
IP address blocks: 2a06:9f81:30fe::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9a:77:e7:dc:d3:c0:2c:25:de:6c:6d:2a:17:c1:a2:24:c6:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
Validity
Not Before: Dec 2 03:03:59 2023 GMT
Not After : Nov 30 03:08:59 2024 GMT
Subject: CN=D1AD4BA26EF37695C513BAC99BF11EB7F6C3FFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:69:aa:17:3c:99:60:80:3a:45:9c:f9:5d:
f7:5a:34:3b:f6:85:21:1d:c5:6c:44:c9:ef:6e:20:
c8:92:b1:f3:41:5f:63:d9:48:d9:71:ef:51:89:95:
1a:46:c8:9a:3c:0b:58:d3:39:df:6f:91:25:fd:5c:
0c:ea:f2:1f:fb:8c:c5:18:50:64:f5:dd:0b:44:37:
97:fc:8b:e5:4b:58:e9:6a:28:c8:f9:b8:f3:93:26:
b2:42:a7:87:47:59:f6:bc:48:db:c4:36:c2:47:de:
c7:1b:53:73:7f:cf:8d:bb:cb:9f:36:11:7c:6c:0d:
ec:ed:d1:49:7a:aa:35:0a:87:31:a0:ab:66:43:f7:
41:02:93:a8:67:11:e5:bd:5c:38:9d:34:03:0a:98:
73:73:15:0c:4c:7a:7e:64:f5:6c:cb:1d:22:c4:bc:
4b:4e:ea:ff:a0:f0:5e:c3:cb:a1:83:61:3c:6b:57:
9f:cd:bf:d2:ad:1c:b0:fc:dd:6f:13:51:45:82:fa:
41:90:7b:d0:ff:78:05:b6:3b:12:d0:df:1a:f9:69:
e3:c7:40:e6:53:d1:07:e0:bc:aa:e9:83:6d:b8:df:
dd:1e:3c:c6:6d:47:aa:c5:3c:d1:de:03:ec:e8:8a:
86:88:8c:d9:3d:81:7c:02:91:a3:13:02:c8:83:92:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:4B:A2:6E:F3:76:95:C5:13:BA:C9:9B:F1:1E:B7:F6:C3:FF:D5
X509v3 Authority Key Identifier:
keyid:81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30fe::/48
Signature Algorithm: sha256WithRSAEncryption
76:bb:e2:ef:d4:8e:47:35:76:42:52:1f:e3:da:f9:5e:09:e4:
23:32:7c:39:81:2f:35:88:b0:bd:8b:98:e3:7a:c4:37:fb:20:
23:42:23:1d:e7:10:dd:83:09:07:29:45:83:de:ca:c7:2b:0c:
09:a3:d3:4b:cd:bc:25:10:15:96:bb:6c:4b:3f:58:1b:6d:e6:
7e:2b:a0:88:bf:b7:3a:d1:80:50:17:0a:6e:73:f4:b2:ef:bd:
85:ec:1c:b6:e0:fc:f0:ee:6f:42:af:bd:68:f5:e7:a7:f9:3a:
8b:d5:3c:6d:c3:55:5d:77:34:9c:d4:45:ff:df:e6:f7:e0:2d:
ff:2f:b5:07:94:78:72:b5:01:4b:87:1b:5c:60:26:41:e3:d2:
2a:09:67:97:21:7e:64:60:3f:d7:05:b1:76:61:c8:81:79:4f:
57:51:7f:6f:ca:e2:f6:38:3b:28:e4:32:f5:3f:d5:c9:b2:f1:
58:cf:0e:01:11:07:fc:17:06:59:e7:31:55:4e:ed:2e:da:39:
8b:04:54:a8:5a:1a:c2:e5:d8:fc:c7:1b:1c:e3:66:e9:33:a5:
ae:36:7d:78:48:be:e2:15:da:47:aa:7d:ee:1c:b1:8b:04:b0:
b3:20:39:88:72:99:59:8d:68:f4:af:b7:9a:3f:66:75:65:78:
0d:e8:91:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org