Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: H6LWNAYSKtSE1gD/H3eKvS9vjsXPrCs8buJJLc0Ybs4=
Subject key identifier: 20:3F:A5:CC:8A:BA:1E:36:FE:50:F8:68:5D:A6:A1:7F:32:31:6B:22
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 588D47674DF7A1707865C4F16D6F64E1B0B8466A
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sun 30 Jun 2024 13:05:38 +0000
ROA not before: Sun 30 Jun 2024 13:00:38 +0000
ROA not after: Sun 29 Jun 2025 13:05:38 +0000
asID: 151349
IP address blocks: 2a06:9f81:3031::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8d:47:67:4d:f7:a1:70:78:65:c4:f1:6d:6f:64:e1:b0:b8:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Jun 30 13:00:38 2024 GMT
Not After : Jun 29 13:05:38 2025 GMT
Subject: CN=203FA5CC8ABA1E36FE50F8685DA6A17F32316B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:58:91:a5:af:c0:68:b1:a2:a4:3c:38:0c:
5a:e2:a6:b7:a7:f6:aa:92:58:6c:86:ae:55:cf:8c:
f1:c8:b4:b6:7d:7a:96:fe:53:b2:91:f7:65:ac:e8:
9d:e1:09:0d:30:84:5a:11:a4:f4:16:0a:12:6e:d0:
54:da:8e:80:29:ca:d6:36:00:02:f8:68:f1:f6:7f:
88:3e:17:b4:c8:d6:9a:dd:09:7e:72:ff:8d:e7:76:
d1:0b:ce:89:ce:0f:fd:60:b7:11:89:1d:fb:64:54:
69:66:fb:42:d9:6a:e7:bb:a2:61:56:e3:5e:07:ba:
29:5d:3d:33:cd:a5:a4:58:9f:fd:ee:1d:ad:78:4a:
68:f9:48:e0:dd:05:81:8a:e5:af:16:4f:5c:69:a7:
53:13:62:1c:aa:60:c5:7b:b6:e1:fd:32:b8:f9:b3:
88:25:c2:64:cb:bb:b5:53:0e:56:2e:75:18:10:9a:
6f:d1:17:d9:fc:b7:f6:9e:83:0e:7e:ff:43:b8:8a:
eb:90:7f:ed:18:b3:97:32:42:ab:e6:03:fc:3f:c4:
2a:eb:eb:f4:17:95:a9:14:3d:ba:37:1d:5b:b9:b0:
b8:f9:31:dd:95:8a:a0:e1:29:d7:2f:9f:6b:a7:40:
6f:e1:12:cc:63:cf:84:2b:2e:85:a1:f2:46:3f:62:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:A5:CC:8A:BA:1E:36:FE:50:F8:68:5D:A6:A1:7F:32:31:6B:22
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3031::/48
Signature Algorithm: sha256WithRSAEncryption
66:a8:a5:4b:09:50:62:29:a4:e9:89:bb:8b:40:ac:6d:e0:1c:
5d:83:02:92:81:a1:db:42:17:c6:65:4d:14:6f:11:de:5e:63:
10:3b:e8:1b:a1:29:b0:f9:ce:cf:52:72:22:a0:76:c0:82:a6:
0c:21:5b:33:84:b6:11:5b:71:92:c7:f6:76:b2:df:d9:fc:ce:
3e:3f:87:b5:20:f8:bd:5c:0b:c2:f0:3e:72:4d:e7:c8:83:ed:
9c:54:3a:60:75:f3:4f:84:41:8a:b8:6a:7a:af:06:49:62:1b:
4b:b7:83:9d:36:15:35:6d:68:f1:66:b6:6a:06:7b:25:ab:38:
5a:76:b3:67:a5:63:97:b4:7a:31:0a:1d:c2:68:6c:91:5b:15:
18:62:7c:14:97:fd:c2:9f:9b:3f:2c:8c:41:63:82:c6:2e:a0:
90:dd:36:80:db:1c:60:9c:42:3d:6b:e8:18:03:e8:6d:00:bf:
9e:93:fe:f9:bf:d8:1b:e5:1c:f3:3c:7b:00:3c:f0:5e:ef:8b:
9d:eb:c1:4b:4a:1a:f6:8b:9e:2f:fb:c2:9f:8c:f6:89:07:3b:
cb:73:c4:23:92:83:0e:84:20:9b:b0:dc:94:fe:a7:ef:04:90:
32:0b:f5:f5:f9:0b:77:85:b1:41:fa:b5:2b:e3:0d:94:27:98:
98:e9:15:06
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUWI1HZ033oXB4ZcTxbW9k4bC4RmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3
MjY4ODlFQjAeFw0yNDA2MzAxMzAwMzhaFw0yNTA2MjkxMzA1MzhaMDMxMTAvBgNV
BAMTKDIwM0ZBNUNDOEFCQTFFMzZGRTUwRjg2ODVEQTZBMTdGMzIzMTZCMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCViRpa/AaLGipDw4DFripren
9qqSWGyGrlXPjPHItLZ9epb+U7KR92Ws6J3hCQ0whFoRpPQWChJu0FTajoApytY2
AAL4aPH2f4g+F7TI1prdCX5y/43ndtELzonOD/1gtxGJHftkVGlm+0LZaue7omFW
414HuildPTPNpaRYn/3uHa14Smj5SODdBYGK5a8WT1xpp1MTYhyqYMV7tuH9Mrj5
s4glwmTLu7VTDlYudRgQmm/RF9n8t/aegw5+/0O4iuuQf+0Ys5cyQqvmA/w/xCrr
6/QXlakUPbo3HVu5sLj5Md2ViqDhKdcvn2unQG/hEsxjz4QrLoWh8kY/YgERAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUID+lzIq6Hjb+UPhoXaahfzIxayIwHwYDVR0j
BBgwFoAUt15fNlJDDO+W4eC9Ft2sQHJoieswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzAvQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3MjY4ODlFQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0I3NUU1RjM2NTI0MzBD
RUY5NkUxRTBCRDE2RERBQzQwNzI2ODg5RUIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm
Mi8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDMzMzEzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzEzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMDEwDQYJKoZIhvcN
AQELBQADggEBAGaopUsJUGIppOmJu4tArG3gHF2DApKBodtCF8ZlTRRvEd5eYxA7
6BuhKbD5zs9SciKgdsCCpgwhWzOEthFbcZLH9nay39n8zj4/h7Ug+L1cC8LwPnJN
58iD7ZxUOmB180+EQYq4anqvBkliG0u3g502FTVtaPFmtmoGeyWrOFp2s2elY5e0
ejEKHcJobJFbFRhifBSX/cKfmz8sjEFjgsYuoJDdNoDbHGCcQj1r6BgD6G0Av56T
/vm/2BvlHPM8ewA88F7vi53rwUtKGvaLni/7wp+M9okHO8tzxCOSgw6EIJuw3JT+
p+8EkDIL9fX5C3eFsUH6tSvjDZQnmJjpFQY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:20 2025 by rpki-client