Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa
File: 326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: w7jGlBeudsxDuBybj2Z7foNpsZ2ejEKlrbT9NuMG4+A=
Subject key identifier: 59:45:C1:18:2E:B2:37:03:71:37:94:57:E0:BF:2D:A5:DC:0B:95:79
Certificate issuer: /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial: 738790CFCAE55D35BB74F7897E405241C5779B18
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa
Signing time: Sat 04 May 2024 20:43:43 +0000
ROA not before: Sat 04 May 2024 20:38:43 +0000
ROA not after: Sat 03 May 2025 20:43:43 +0000
asID: 215956
IP address blocks: 2a0a:6044:a518::/46 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:87:90:cf:ca:e5:5d:35:bb:74:f7:89:7e:40:52:41:c5:77:9b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Validity
Not Before: May 4 20:38:43 2024 GMT
Not After : May 3 20:43:43 2025 GMT
Subject: CN=5945C1182EB2370371379457E0BF2DA5DC0B9579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:55:23:d5:67:70:1b:47:81:cf:3d:e7:59:
bd:83:15:02:4f:b9:70:2b:3d:b8:28:35:62:12:dd:
28:d2:8d:d3:66:1f:65:c6:07:e5:dc:b9:ea:28:e0:
6f:38:5e:3b:da:9f:34:cb:6c:62:fd:6c:be:a3:43:
32:f1:e5:ac:a1:b1:65:49:c7:0e:d9:ca:2b:d5:a5:
a2:5c:72:df:e8:66:29:55:c5:10:28:cb:fd:df:a7:
7c:ad:29:cb:65:f3:cc:25:22:d2:8a:c3:b3:0b:43:
9d:38:c6:a4:1b:cd:a7:2b:9f:11:c6:90:58:5f:82:
69:b9:7a:28:d0:85:60:62:c4:e7:ae:22:52:4e:6b:
c7:a4:77:52:e7:58:23:88:c7:4e:d4:53:76:88:72:
85:24:5d:68:27:1f:f6:50:0a:04:6f:4b:27:4e:13:
15:16:bf:d0:6f:c2:76:fb:08:a1:8a:25:03:34:3d:
14:c3:76:1e:64:33:6b:9b:33:98:64:cd:fe:ec:d3:
0b:81:89:20:c4:93:84:74:f6:40:a4:92:7e:3d:ee:
fd:89:31:2f:02:6d:d8:33:ae:b3:aa:87:1a:86:79:
c1:79:c6:f2:00:f4:a8:f2:ce:f1:19:df:85:5a:96:
e5:67:bc:35:b5:64:1f:0b:2c:48:8f:6f:97:3d:99:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:C1:18:2E:B2:37:03:71:37:94:57:E0:BF:2D:A5:DC:0B:95:79
X509v3 Authority Key Identifier:
keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a518::/46
Signature Algorithm: sha256WithRSAEncryption
89:80:63:60:f2:a3:81:a3:94:78:c6:8a:e9:28:2c:c4:db:15:
40:1d:96:ed:42:5c:4c:d9:00:e4:2f:91:35:b1:90:3d:c1:a4:
e0:84:00:8f:29:44:9d:bc:45:41:6b:41:f3:94:bd:1f:62:e5:
de:65:52:2b:63:41:fc:7b:a3:c3:87:98:0f:ab:50:fa:12:d5:
84:ab:39:38:6a:43:f9:66:41:69:7c:c7:36:72:11:63:a9:ee:
c3:49:aa:b7:1b:76:1b:ff:d1:d2:12:55:32:30:54:36:d2:17:
af:02:f9:84:32:9d:d2:bf:f7:65:4f:18:ab:8b:cc:04:78:c7:
07:88:4f:4b:35:77:c1:3b:4f:2b:68:90:9b:f4:86:21:e4:5a:
4f:a5:12:a6:4b:4b:cd:2a:3d:8b:5c:6e:d1:a0:c0:e3:2c:4f:
4c:69:db:65:96:6e:bd:bd:c7:37:e6:35:45:f7:5d:19:11:75:
9d:7b:ef:37:17:50:db:7c:4c:c1:8b:85:3e:70:1a:59:79:46:
2d:79:6b:97:38:f8:7c:69:cf:12:ee:44:de:08:5b:22:4c:4d:
59:86:f9:6f:f8:4c:53:48:25:f0:75:97:54:5f:1b:05:7d:42:
bd:38:5f:14:8e:51:30:b0:96:6b:01:d9:ae:e2:98:53:e2:0b:
3a:31:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:04 2024 by rpki-client on console-ams.rpki-client.org