Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: /vO6Aetvg1Z6nSXlTg5RzUgUqaLwZ0oGQJ1Dgblzw5o=
Subject key identifier: D7:3E:6D:35:F4:D8:18:50:CC:05:1D:31:5E:AF:55:7F:65:73:D8:62
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 11365D2F9E0532616B21D83303A7CC6EC27CCF9C
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sun 30 Jun 2024 13:05:35 +0000
ROA not before: Sun 30 Jun 2024 13:00:35 +0000
ROA not after: Sun 29 Jun 2025 13:05:35 +0000
asID: 151349
IP address blocks: 2a06:9f81:3003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:36:5d:2f:9e:05:32:61:6b:21:d8:33:03:a7:cc:6e:c2:7c:cf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Jun 30 13:00:35 2024 GMT
Not After : Jun 29 13:05:35 2025 GMT
Subject: CN=D73E6D35F4D81850CC051D315EAF557F6573D862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:04:a4:e2:c3:38:5e:0e:b7:e6:a5:15:e0:
b1:67:df:93:7c:ea:f1:55:3d:18:4f:cd:25:75:61:
c5:22:b8:62:f4:ab:e6:d5:24:22:c0:a9:e1:31:b7:
98:51:ed:32:ce:31:70:bc:8c:ac:2b:d4:b9:b0:62:
fd:26:cc:97:10:5f:c7:84:22:71:4c:38:32:31:c2:
4e:49:a9:b6:0c:2c:99:55:3a:8f:f4:c0:82:1b:dc:
3d:5a:12:72:3c:ec:20:4a:8f:e9:e9:18:7a:31:a6:
84:7a:58:c6:29:26:97:86:1f:c7:34:1a:f0:4f:7f:
12:b5:69:a6:18:df:f5:89:09:31:cc:00:bf:2e:c8:
06:b9:a4:db:cd:ee:f2:74:f4:b7:93:2d:99:d8:bc:
86:46:fd:8f:ea:48:63:1e:75:14:55:8b:a2:66:0b:
91:e4:1f:77:83:33:dc:ce:bb:a6:09:4c:ce:45:09:
3e:8d:54:73:b8:b7:87:0a:8f:34:03:de:ff:6c:e5:
05:14:81:1e:df:42:0d:b4:e5:cc:b8:97:bf:03:69:
6b:d6:28:16:f6:f7:e7:c9:ea:1b:06:2f:b6:73:2d:
9e:05:9c:ec:88:6d:f7:70:d5:cd:f0:00:d2:25:12:
fb:06:63:af:56:95:8e:e8:f7:14:f7:bf:65:76:e5:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:6D:35:F4:D8:18:50:CC:05:1D:31:5E:AF:55:7F:65:73:D8:62
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3003::/48
Signature Algorithm: sha256WithRSAEncryption
8c:09:5a:6c:02:59:88:7c:c5:0b:52:27:84:a8:7a:fd:52:34:
18:a5:f6:29:fc:57:97:a6:3c:ab:0f:8f:1e:d6:7d:53:cd:7a:
8d:fc:bd:8f:b2:e0:f8:bd:7c:20:1e:ec:3a:0b:51:54:55:0c:
aa:65:3a:c7:99:de:86:9d:68:2c:04:52:8c:b1:12:5d:e0:11:
f4:ae:1c:39:38:07:c8:01:42:4e:45:10:b4:77:61:2c:8f:3b:
a7:74:4d:ba:c2:99:85:7c:67:6e:eb:54:80:3a:28:e1:71:a3:
99:ac:0d:c2:e0:2f:32:cc:c4:7d:11:f9:fe:8f:e8:66:47:d6:
10:70:64:32:9c:52:d9:9c:0d:48:4d:2c:e1:1f:b3:00:0b:5b:
a0:ba:4b:fc:1c:92:89:92:16:80:46:c3:d4:5e:ce:c2:71:b8:
7a:34:a3:c8:47:99:0f:bd:1a:2f:fe:ab:2f:ea:8b:1b:e2:46:
46:bd:0a:3e:12:08:ca:f2:f3:c3:fe:99:63:a8:8f:27:2a:24:
cf:13:1f:09:5b:59:83:6b:5b:13:ff:3b:1a:cd:94:36:d7:45:
40:37:ef:60:e1:22:a0:86:42:c6:5d:de:d2:d0:c3:f7:b6:b7:
e8:a1:8f:51:51:b0:7e:8d:4a:cb:54:86:80:6a:04:b6:35:81:
4e:dc:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:53:03 2025 by rpki-client