Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23449.roa
File: AS23449.roa (raw, json)
Hash identifier: DAlM+NVXGCeX86bRjDuiFqdhekzNzRQNyfRTQOaRNig=
Subject key identifier: 0A:08:6F:4E:83:DC:11:5C:8D:27:0C:6F:4B:28:80:6F:6A:62:CB:7E
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 7161D0A983FCF28A5C325EE7BC1582B0119364C9
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23449.roa
Signing time: Mon 30 Jun 2025 23:46:43 +0000
ROA not before: Mon 30 Jun 2025 23:41:43 +0000
ROA not after: Mon 29 Jun 2026 23:46:43 +0000
asID: 23449
IP address blocks: 2a05:dfc1:9700::/40 maxlen: 48
2a06:9f81:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:61:d0:a9:83:fc:f2:8a:5c:32:5e:e7:bc:15:82:b0:11:93:64:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Jun 30 23:41:43 2025 GMT
Not After : Jun 29 23:46:43 2026 GMT
Subject: CN=0A086F4E83DC115C8D270C6F4B28806F6A62CB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:d7:c0:16:0c:44:7e:e9:4e:eb:a6:29:ef:
3f:64:aa:32:e7:c3:2b:08:71:92:66:f5:81:43:2a:
a6:02:2c:de:d7:03:b8:b2:c5:f9:e4:23:e3:b4:06:
0c:66:51:1d:16:2d:84:49:7f:68:16:77:90:30:7a:
61:bb:f6:5b:e6:17:5f:b1:13:e5:36:89:02:6e:82:
6d:41:82:de:08:a1:44:ed:f5:60:ff:db:3f:30:ed:
fd:2c:91:2e:34:f5:d3:8e:aa:3c:bd:dc:90:ac:ac:
83:0b:04:27:10:b2:86:96:e6:49:0a:ad:42:8e:4f:
52:84:89:e9:1a:15:80:42:90:94:28:2a:7a:73:da:
0c:09:ac:8c:66:60:50:b7:e9:a6:6c:f8:00:7b:8c:
a8:a7:f4:52:4c:03:5e:36:1f:8c:68:5e:02:5e:90:
ce:41:8b:94:02:5a:59:b7:07:95:a6:a3:a0:9c:11:
73:6e:41:9c:fc:43:2d:68:8d:a9:6b:58:36:b1:cc:
b2:8c:42:2a:d4:71:e5:38:b1:40:9c:17:92:4f:0f:
84:4d:e0:0d:24:26:ae:1c:db:a3:6a:66:d1:0d:9a:
1e:63:be:09:ca:c4:57:26:56:d0:a9:71:c3:3f:8e:
44:34:a1:6d:f7:9a:1c:bf:b5:0a:6b:d5:03:a5:ac:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:6F:4E:83:DC:11:5C:8D:27:0C:6F:4B:28:80:6F:6A:62:CB:7E
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23449.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9700::/40
2a06:9f81:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c6:69:30:04:a5:70:90:08:a0:f6:da:b9:ca:1b:5e:49:03:59:
13:f3:dc:57:e0:b3:52:1d:55:98:6a:d1:3d:d9:db:2c:d4:0f:
2e:2a:72:2d:cc:5d:56:f7:fc:d0:fc:75:92:52:02:05:78:e4:
e3:f3:b6:ab:97:24:ba:b6:a0:ce:20:50:eb:07:c7:d6:52:19:
1d:1b:c2:d3:69:97:10:2f:9c:ba:5f:06:c9:37:99:d9:fa:f7:
e6:83:c1:0c:76:fd:ee:9b:43:76:4a:f7:f9:ba:39:7f:0b:d5:
d4:51:64:2e:56:f7:5d:b0:ab:19:90:d9:e0:24:90:81:98:a1:
3b:9a:ff:ac:09:43:76:1f:bc:08:70:97:f5:b4:a3:df:0b:96:
0f:1c:c8:36:8a:4e:a5:07:7a:73:c5:de:83:78:e5:67:04:3b:
6c:9b:99:c5:6b:47:6f:1a:49:05:8f:4e:fc:cf:64:e3:7c:eb:
30:38:75:8c:16:44:ff:2b:6c:0a:02:60:73:8d:e7:0d:6c:19:
e2:8e:18:e8:30:9c:41:75:ee:d6:76:05:9f:35:0e:49:84:95:
70:de:5c:4f:be:39:0e:6e:69:99:58:1d:23:9a:bc:d9:66:0c:
ce:8e:20:f3:56:02:3c:37:05:27:a6:d0:cf:32:3d:21:c4:28:
84:aa:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:14:14 2025 by rpki-client