Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: wTQJOpRyr0NU7c8GCu93MPq0bxGhVl2EEzBCdAqk6kE=
Subject key identifier: BB:F5:CC:D2:B2:FB:FB:D2:46:AB:65:8F:F8:EB:2A:BC:B1:C0:DD:C6
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 3AE0E349F6178AA530331788E05BC9B5EE793524
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sun 30 Jun 2024 13:05:36 +0000
ROA not before: Sun 30 Jun 2024 13:00:36 +0000
ROA not after: Sun 29 Jun 2025 13:05:36 +0000
asID: 151349
IP address blocks: 2a06:9f81:3011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e0:e3:49:f6:17:8a:a5:30:33:17:88:e0:5b:c9:b5:ee:79:35:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Jun 30 13:00:36 2024 GMT
Not After : Jun 29 13:05:36 2025 GMT
Subject: CN=BBF5CCD2B2FBFBD246AB658FF8EB2ABCB1C0DDC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:f5:f8:19:af:ce:b5:c5:69:69:04:02:8b:
0c:7d:69:85:d5:87:9e:b6:da:90:93:57:96:e6:1f:
ce:12:66:25:60:db:80:ab:00:5c:c3:8e:6f:5f:42:
31:f1:c7:ae:f1:ae:29:11:b2:60:c8:7c:2d:53:a5:
42:02:14:59:a5:e6:eb:75:c8:dc:27:ae:83:2e:b1:
95:fb:f9:95:1d:28:a3:7b:c1:38:ae:27:50:51:5e:
9d:2f:cc:77:02:c0:26:c2:de:ca:6e:b4:65:6f:45:
77:52:bc:cc:ed:f8:02:52:c1:3f:7f:57:df:64:9c:
e1:c0:b6:94:15:c4:1c:91:ac:7f:fc:c9:ef:a7:98:
96:20:fa:2d:09:b9:62:7c:75:fc:d7:73:33:af:cc:
cf:97:9c:10:28:af:31:4d:8f:7c:b7:78:34:e5:ed:
50:28:fc:43:a4:cd:48:17:30:ea:b6:ff:bf:44:ba:
5c:3b:a3:26:18:d8:3c:ce:11:88:20:ae:fe:47:8e:
45:b2:db:1b:95:05:c6:92:57:d3:d8:3e:87:d5:47:
5b:8f:67:b2:56:1d:11:3a:07:cc:3e:f0:c7:b2:ee:
ad:2f:fe:75:69:2c:86:95:10:87:d7:8f:cb:26:40:
4d:93:a3:a5:cc:ab:a3:af:cd:e7:8c:77:f3:db:d4:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:CC:D2:B2:FB:FB:D2:46:AB:65:8F:F8:EB:2A:BC:B1:C0:DD:C6
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3011::/48
Signature Algorithm: sha256WithRSAEncryption
25:8d:df:8a:35:93:7d:8a:cc:dd:60:89:40:32:b3:50:bf:3e:
a1:35:de:73:31:54:bb:f0:dc:9a:a8:7d:b5:c5:1b:98:67:be:
2d:8e:96:a0:8f:f9:13:3e:ff:67:4c:92:cf:87:84:30:01:e0:
8c:c3:12:5a:6f:b2:e4:02:29:24:74:db:1c:aa:f8:72:f6:8b:
cc:13:f3:c9:3f:70:60:e7:d2:39:f7:78:68:b9:2b:c4:cd:57:
d7:60:5d:83:ea:c5:7b:78:c4:59:bc:31:18:ee:ba:17:6f:32:
6c:69:0a:81:89:29:a4:4c:0a:2e:9c:d1:19:ab:fc:9e:09:e5:
66:e6:e6:ab:8f:45:e2:54:83:e3:79:ff:db:34:f2:70:1b:85:
5b:02:81:86:f1:97:f5:50:3b:4d:6d:fd:2c:b8:6b:5d:2d:b6:
5b:d3:59:a3:40:87:c4:e1:3e:f5:4e:9d:d9:b7:15:e7:b1:1c:
9e:bf:04:2e:cb:01:8d:ab:16:ac:55:5c:14:64:22:a9:35:1f:
50:7d:cb:a8:cf:82:cb:b2:d9:aa:ac:af:cb:6b:c2:83:8d:e1:
2e:3a:45:90:af:d2:06:2f:55:ef:b2:e5:61:ab:f6:49:d3:f7:
28:03:26:fd:67:9f:51:1b:ef:ae:1b:0e:2e:91:d5:8c:fe:90:
bd:68:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:49 2025 by rpki-client