Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214480.roa
File: AS214480.roa (raw, json)
Hash identifier: Gi+JEDaVXNjDyZy+fg/QxUwqczv48gyXnHdfoh+yKKE=
Subject key identifier: AE:3E:FD:35:CD:35:AF:CE:6C:19:98:48:81:5B:BF:74:E7:55:EB:F1
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 3A9E253D1BF2EA675C1A659322447900C9E50496
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214480.roa
Signing time: Thu 25 Jul 2024 00:46:58 +0000
ROA not before: Thu 25 Jul 2024 00:41:58 +0000
ROA not after: Thu 24 Jul 2025 00:46:58 +0000
asID: 214480
IP address blocks: 2a0f:85c1:842::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9e:25:3d:1b:f2:ea:67:5c:1a:65:93:22:44:79:00:c9:e5:04:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 25 00:41:58 2024 GMT
Not After : Jul 24 00:46:58 2025 GMT
Subject: CN=AE3EFD35CD35AFCE6C199848815BBF74E755EBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:05:92:72:53:eb:55:58:e5:ec:fe:ae:f7:
b0:4f:fd:42:9b:49:85:3a:40:b3:52:6e:b7:11:14:
c9:07:e2:1f:11:df:12:7a:4b:4c:39:bd:30:54:13:
10:5c:40:83:77:0d:af:db:50:5c:53:e4:3b:a0:e8:
57:c9:f1:c2:08:f3:20:40:c6:b1:00:2a:53:98:27:
31:85:d6:a3:3a:6c:48:b8:4f:0c:d2:85:ec:49:2f:
ed:f0:af:3f:45:6a:81:f1:32:45:b7:4e:cd:06:33:
9c:fa:12:ec:bd:64:7f:83:91:54:2b:6a:2d:0a:1c:
7d:e2:31:03:a5:02:e4:96:b9:5f:80:ba:15:1b:77:
bb:3d:90:95:6c:69:1d:ab:20:a2:2c:f1:04:9d:2e:
b8:34:29:22:ea:af:a3:cb:d2:a3:15:3f:ba:52:0b:
6c:a1:c8:48:2f:47:b3:90:81:06:a3:b2:15:21:1d:
03:eb:03:5d:2e:eb:93:74:5b:ab:61:aa:31:d9:9f:
a4:66:56:e3:ac:25:c3:fc:17:69:d2:b7:76:b6:e7:
ba:6c:bd:0e:52:b1:81:27:e9:3c:65:11:64:84:be:
df:a8:0f:cb:0a:e5:86:98:d9:e0:d1:43:44:90:5d:
d4:85:ef:52:2d:ad:74:8a:19:a6:86:6a:85:97:71:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3E:FD:35:CD:35:AF:CE:6C:19:98:48:81:5B:BF:74:E7:55:EB:F1
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:842::/48
Signature Algorithm: sha256WithRSAEncryption
8b:ba:38:01:48:93:9c:ea:c6:95:37:59:28:9e:c1:97:c0:de:
b2:f0:52:86:90:ea:73:01:5c:c0:70:35:e1:76:d6:2d:4c:91:
47:3c:67:e4:e9:55:80:40:0c:79:4f:94:f8:af:20:43:dd:64:
39:59:79:1d:a2:64:a1:f1:3c:1c:4b:e3:50:e8:c2:84:98:08:
2e:5f:2c:87:0a:c5:8e:68:7f:41:61:10:6c:34:14:c5:35:c9:
eb:21:f9:c6:d3:6f:a7:b1:f9:00:92:21:31:c0:20:ce:13:47:
f4:be:bc:c8:76:8c:f3:47:fa:b4:d3:f3:6a:fb:52:73:9d:1e:
47:42:db:fa:a4:40:99:69:09:36:b3:03:8c:2e:a1:de:72:79:
5f:00:c6:b9:48:36:31:c9:a5:49:81:66:4b:7f:aa:55:38:24:
02:a2:75:73:ee:ea:1d:8d:97:d7:4f:68:37:7d:85:e2:7a:3c:
12:3f:41:1a:f4:cd:d5:51:0f:dc:b4:db:eb:a0:d6:44:d1:ae:
e3:0a:97:4e:1d:42:89:46:c4:f0:17:14:48:db:e8:5a:28:1c:
82:ba:d2:1d:e7:64:63:48:81:99:fd:87:1e:32:47:7a:18:b4:
ae:af:8c:8e:d1:0e:5d:2b:ec:60:08:a4:18:be:9f:84:5a:84:
82:b3:e1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 23:44:02 2024 by rpki-client on console-fra.rpki-client.org