Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216452.roa
File: AS216452.roa (raw, json)
Hash identifier: Dev3lFEtfIrpnfjXWSa2s3qYMxetyfe+3Ch3GB82iX8=
Subject key identifier: B7:69:9B:16:40:9E:A8:5D:9A:E9:A3:C0:CB:E4:98:28:61:E5:95:FE
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 23A8909FD5072A7378DC6F7580A7A03D8964C14C
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216452.roa
Signing time: Wed 18 Jun 2025 23:46:37 +0000
ROA not before: Wed 18 Jun 2025 23:41:37 +0000
ROA not after: Wed 17 Jun 2026 23:46:37 +0000
asID: 216452
IP address blocks: 2a05:dfc1:8200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a8:90:9f:d5:07:2a:73:78:dc:6f:75:80:a7:a0:3d:89:64:c1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Jun 18 23:41:37 2025 GMT
Not After : Jun 17 23:46:37 2026 GMT
Subject: CN=B7699B16409EA85D9AE9A3C0CBE4982861E595FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:01:59:da:e8:9a:54:f1:b8:c4:29:a0:2d:92:
b6:dc:2f:b2:1b:74:b3:3d:0e:3b:1d:54:4b:ef:c5:
71:3d:24:3a:83:2f:00:05:41:38:92:3f:c0:9e:07:
1e:12:15:b6:16:72:a3:75:64:d1:69:70:c7:c1:ec:
f6:1b:eb:1f:c2:a1:89:f7:1d:80:e6:9b:81:95:e9:
9a:a3:21:c1:6f:43:c7:23:8a:47:5e:65:f9:74:8f:
bc:32:93:18:35:01:e1:41:08:81:9e:e1:5c:2c:14:
69:7e:13:e7:ef:93:e5:e2:7d:56:b3:86:ce:8e:3f:
7a:b9:31:00:ee:77:8e:9b:dd:82:b3:bf:7e:4e:f8:
e9:3d:37:3c:cc:b6:d4:ad:89:f9:09:5e:24:6b:6c:
b4:9f:a9:99:4d:5f:53:86:0a:61:a7:98:c2:44:4c:
bc:b5:3f:f5:14:d2:e7:b5:5e:e2:c0:86:ef:42:ee:
51:76:62:fc:65:61:21:c2:b8:0d:34:48:1c:10:ac:
d3:ea:3c:d8:a4:f9:aa:b0:fa:14:b3:98:78:4c:8e:
2b:22:e4:d5:42:c0:6d:4a:14:24:f0:b2:d3:32:1f:
d8:b2:73:0f:96:ff:64:7c:94:2d:37:e7:66:94:03:
87:d6:02:2a:16:d2:e4:b1:b6:79:c2:b5:7e:f3:0a:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:9B:16:40:9E:A8:5D:9A:E9:A3:C0:CB:E4:98:28:61:E5:95:FE
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216452.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8200::/40
Signature Algorithm: sha256WithRSAEncryption
4a:f1:03:cb:57:ad:b9:c7:e7:3d:62:59:99:be:91:5f:90:34:
f1:31:4e:e4:6f:03:4b:8d:a8:e1:24:f9:d8:96:65:cf:78:cf:
e4:28:a5:d5:ef:41:dd:dd:8d:13:2d:4e:89:67:e7:ba:7f:f5:
3d:32:78:46:2e:00:03:3e:a8:ec:01:54:0c:0b:db:c6:ca:ac:
d2:a7:f9:a9:c5:0a:f2:58:a4:d0:2b:ad:99:1f:28:e8:74:98:
7e:62:2f:cf:41:1b:76:6e:77:16:7d:20:7f:2a:28:98:94:49:
43:fd:3f:b7:f4:0f:88:2f:37:1c:0c:89:8f:d7:3c:19:f5:9f:
4e:24:56:6b:7b:73:bb:97:61:96:37:0a:80:ed:fc:e9:61:09:
d7:fe:c8:e4:e0:14:ce:66:d2:59:a9:24:21:0a:83:93:60:0c:
1f:2e:09:02:e6:6e:cb:99:0f:02:68:95:78:77:6a:3f:39:f0:
1d:d4:5b:51:78:ac:a3:2c:5c:52:8f:47:ff:be:15:77:6b:0a:
0d:ae:1a:50:49:40:93:3c:46:0c:35:e2:0d:9d:00:42:e8:d7:
7e:86:8c:1f:0a:a6:0f:32:b4:7f:d4:34:e0:62:70:24:51:2d:
e4:34:a5:2c:ed:54:dd:52:d2:43:8d:04:d0:4f:8b:ab:5f:58:
2f:43:8b:7c
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUI6iQn9UHKnN43G91gKegPYlkwUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNTA2MTgyMzQxMzdaFw0yNjA2MTcyMzQ2MzdaMDMxMTAvBgNV
BAMTKEI3Njk5QjE2NDA5RUE4NUQ5QUU5QTNDMENCRTQ5ODI4NjFFNTk1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzAVna6JpU8bjEKaAtkrbcL7Ib
dLM9DjsdVEvvxXE9JDqDLwAFQTiSP8CeBx4SFbYWcqN1ZNFpcMfB7PYb6x/CoYn3
HYDmm4GV6ZqjIcFvQ8cjikdeZfl0j7wykxg1AeFBCIGe4VwsFGl+E+fvk+XifVaz
hs6OP3q5MQDud46b3YKzv35O+Ok9NzzMttStifkJXiRrbLSfqZlNX1OGCmGnmMJE
TLy1P/UU0ue1XuLAhu9C7lF2YvxlYSHCuA00SBwQrNPqPNik+aqw+hSzmHhMjisi
5NVCwG1KFCTwstMyH9iycw+W/2R8lC0352aUA4fWAioW0uSxtnnCtX7zCrlRAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUt2mbFkCeqF2a6aPAy+SYKGHllf4wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjE2NDUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYIwDQYJKoZIhvcNAQELBQADggEBAErx
A8tXrbnH5z1iWZm+kV+QNPExTuRvA0uNqOEk+diWZc94z+QopdXvQd3djRMtToln
57p/9T0yeEYuAAM+qOwBVAwL28bKrNKn+anFCvJYpNArrZkfKOh0mH5iL89BG3Zu
dxZ9IH8qKJiUSUP9P7f0D4gvNxwMiY/XPBn1n04kVmt7c7uXYZY3CoDt/OlhCdf+
yOTgFM5m0lmpJCEKg5NgDB8uCQLmbsuZDwJolXh3aj858B3UW1F4rKMsXFKPR/++
FXdrCg2uGlBJQJM8Rgw14g2dAELo136GjB8Kpg8ytH/UNOBicCRRLeQ0pSztVN1S
0kONBNBPi6tfWC9Di3w=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:18:26 2025 by rpki-client