Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214575.roa
File: AS214575.roa (raw, json)
Hash identifier: fF8A1GgP40V0/02p3dtKHiNAiUgFxBnpWnrs1C6Te+0=
Subject key identifier: C3:16:2E:31:9C:17:AF:73:15:8F:94:D6:08:15:3E:AE:7A:30:B9:CD
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 3FEF585E5FDDB69EDA4F159DF36E25F83DB2D215
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214575.roa
Signing time: Wed 17 Jul 2024 19:52:21 +0000
ROA not before: Wed 17 Jul 2024 19:47:21 +0000
ROA not after: Wed 16 Jul 2025 19:52:21 +0000
asID: 214575
IP address blocks: 2a0f:85c1:804::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ef:58:5e:5f:dd:b6:9e:da:4f:15:9d:f3:6e:25:f8:3d:b2:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 17 19:47:21 2024 GMT
Not After : Jul 16 19:52:21 2025 GMT
Subject: CN=C3162E319C17AF73158F94D608153EAE7A30B9CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a0:6c:36:2f:06:cd:2b:da:d3:7d:a5:be:3c:
de:40:99:d2:fc:cb:64:f1:b0:61:85:82:97:6f:d7:
74:ce:cc:7a:fe:71:6a:e0:01:a3:05:63:77:cf:32:
62:b5:fb:68:6c:78:3c:2a:3f:d5:45:64:20:8d:cf:
af:f8:9a:1d:00:6d:bf:d5:ea:04:57:39:a5:ee:ad:
ae:52:52:f4:45:3e:8c:5c:48:b9:1a:9f:a5:f4:1b:
88:ff:1e:b5:c3:4e:2c:53:39:00:97:cb:a3:0d:b2:
90:c0:44:ee:5b:b9:66:39:b7:b0:72:0f:67:e5:0b:
f5:84:6a:77:5f:34:6a:c1:6c:43:4c:20:32:9f:45:
2e:e2:5c:61:c6:57:85:11:f3:0e:0c:9b:c7:98:10:
f4:94:87:4d:27:7d:ef:19:fa:71:10:9d:af:0b:21:
e7:27:1b:ca:f8:a1:01:26:5e:84:41:18:74:79:f5:
59:7a:2e:05:9d:ef:6a:5a:ed:08:3e:b9:db:21:70:
bd:91:69:d6:c8:38:fc:fb:5a:d0:f9:ef:4e:4e:8c:
5f:39:f6:6e:55:dd:04:40:85:fb:6f:b4:1b:dc:4b:
60:36:3e:2e:f2:1b:67:3a:21:8d:b1:a5:ef:af:86:
64:73:c4:4b:0a:c0:8f:fd:e8:30:7e:3e:ff:20:4b:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:2E:31:9C:17:AF:73:15:8F:94:D6:08:15:3E:AE:7A:30:B9:CD
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:804::/48
Signature Algorithm: sha256WithRSAEncryption
02:0e:0b:97:6e:0d:67:50:f6:d6:47:dc:0e:d3:b2:1b:ca:c4:
10:fb:8c:0a:df:29:48:a5:f1:d2:31:ca:50:75:79:4a:9d:0a:
36:31:69:ca:e5:9a:af:47:96:43:73:28:cc:ea:e9:5f:23:e1:
df:35:bc:c6:3d:20:7d:d2:93:28:d0:07:75:fa:e3:64:a3:c9:
99:aa:cd:c3:52:da:6e:58:f5:9b:18:59:57:7c:41:74:dd:31:
64:37:6b:79:ac:54:37:7e:93:70:cc:d6:c4:5e:b6:b1:40:7e:
bb:10:de:1e:01:fd:57:e5:18:6b:f8:3a:4e:1e:50:6c:55:1f:
ca:47:4d:20:ae:6f:a6:11:cb:e4:9f:02:83:49:00:ba:9a:9a:
79:f3:33:37:c9:bc:4e:ba:ee:91:3c:48:93:dc:1b:96:40:01:
ef:54:bf:a7:b5:90:78:c7:37:70:2e:d7:72:c1:d4:02:de:3e:
c7:25:c5:2a:ee:84:a8:25:87:7d:9d:90:7c:51:74:b4:18:23:
ad:ae:b0:03:bf:25:03:7f:19:82:bb:e9:a4:44:1a:d2:e3:d0:
5f:0e:fd:a7:5d:53:a7:bc:1a:34:55:e6:3f:99:f0:a3:f2:de:
e1:ec:97:33:67:61:0f:44:65:f6:3f:36:34:ab:2e:06:47:5a:
de:0e:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 23:44:02 2024 by rpki-client on console-fra.rpki-client.org