Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: Ui7n8/Nc1HQj7kvKnMv3Riala8zqyHe4FWzrhHk0++0=
Subject key identifier: 28:5F:7E:48:2A:CD:C4:DE:75:BB:BB:61:7C:45:B6:14:4D:9B:95:84
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 45764F9116215F616B9E804BF74E962413561BEC
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sun 01 Jun 2025 13:36:06 +0000
ROA not before: Sun 01 Jun 2025 13:31:06 +0000
ROA not after: Sun 31 May 2026 13:36:06 +0000
asID: 151349
IP address blocks: 2a06:9f81:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:76:4f:91:16:21:5f:61:6b:9e:80:4b:f7:4e:96:24:13:56:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Jun 1 13:31:06 2025 GMT
Not After : May 31 13:36:06 2026 GMT
Subject: CN=285F7E482ACDC4DE75BBBB617C45B6144D9B9584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:3d:3d:3a:88:49:93:fc:5d:e7:fc:48:40:
38:f9:6a:0f:26:3a:2b:98:42:dd:0f:73:69:99:23:
78:5f:0b:1f:7c:50:81:8a:dc:f1:25:d8:b6:a4:3b:
05:c6:0c:99:ce:6c:7a:b2:18:70:4c:a5:3a:9c:a6:
6f:ca:43:ea:d8:8f:cb:f8:63:41:74:ad:be:7d:1b:
ee:25:00:b4:83:81:6c:a9:8f:67:bd:83:4b:29:4b:
05:4d:2b:8f:6b:e3:41:b9:3d:ff:45:7b:fe:55:90:
f0:9e:2e:13:8d:90:48:64:34:0b:fb:95:b0:06:de:
fd:fe:6d:15:c6:0b:c2:b1:75:d1:99:38:be:bc:2d:
92:2b:b5:67:6a:bd:b6:94:9c:50:0d:81:14:cc:1c:
56:73:06:e3:5a:e3:cf:7f:6b:99:56:35:95:cf:38:
45:ac:c7:d2:3f:79:89:f2:ce:42:d4:3a:25:46:d4:
34:4b:53:7c:03:c9:59:6c:95:78:0c:a6:30:c5:10:
47:3c:61:22:57:19:20:ce:de:31:8c:4b:c6:ee:4c:
93:60:86:cc:3b:4f:22:23:aa:a8:d6:d8:18:23:b8:
9e:22:b9:1c:ce:4b:a3:68:2d:00:bc:cf:3c:39:53:
e1:b4:5a:d7:8a:24:74:e6:43:99:f0:a2:6a:b6:d3:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:7E:48:2A:CD:C4:DE:75:BB:BB:61:7C:45:B6:14:4D:9B:95:84
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3000::/48
Signature Algorithm: sha256WithRSAEncryption
41:88:81:40:ff:3e:0f:f3:41:2c:2a:9b:e3:fb:7c:28:c3:4d:
ca:1b:6c:e3:bc:c5:b7:a9:c8:4a:20:f0:d6:26:ea:5d:9d:4d:
37:aa:c1:04:5d:ae:89:4a:fb:e2:57:f4:2a:fc:9e:a4:42:5d:
89:5e:44:f3:87:bf:cc:7b:cb:59:85:e4:13:cd:01:66:30:ea:
9c:5e:bd:c1:63:f3:0b:ed:b4:02:05:b5:4e:c6:aa:2c:13:35:
b4:3a:d9:31:e0:fe:d9:28:d9:f8:41:1c:b3:72:91:3f:0b:4d:
1c:34:60:b2:7e:7e:00:24:96:45:97:da:d2:de:46:1c:ef:77:
5b:df:87:e4:fb:94:58:a4:3d:f4:95:6a:c5:a8:f9:19:41:f4:
ce:74:74:16:8f:c2:ef:79:63:3b:22:a5:08:cd:c9:cd:ab:0d:
35:a5:10:50:64:b3:ef:7f:88:d9:f6:a9:c8:4a:66:72:13:fd:
ae:1a:22:3c:93:91:5e:c6:8b:0a:9b:82:d7:5f:42:6f:5f:92:
d6:21:f1:c7:cf:3d:11:3d:8b:63:3d:2a:95:82:c6:b5:42:1b:
9a:25:06:af:6f:d3:35:a5:58:66:3b:3f:b9:a3:9e:28:c4:86:
61:00:38:d0:57:bf:78:c1:1f:94:80:71:b3:0f:2c:3a:7c:c1:
22:1e:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:20 2025 by rpki-client