Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: zvBkVP8huYPlUCpkxdxfr3v4jaOxtHTBudAkimIEogE=
Subject key identifier: DE:6F:18:F2:F7:92:11:06:D2:3A:81:0E:E9:BA:B4:04:1F:EB:54:5D
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 75A3851CD8E52BF279F97AF4141F546110EC0B1C
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Sun 01 Jun 2025 13:36:10 +0000
ROA not before: Sun 01 Jun 2025 13:31:10 +0000
ROA not after: Sun 31 May 2026 13:36:10 +0000
asID: 151349
IP address blocks: 2a06:9f81:3031::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a3:85:1c:d8:e5:2b:f2:79:f9:7a:f4:14:1f:54:61:10:ec:0b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Jun 1 13:31:10 2025 GMT
Not After : May 31 13:36:10 2026 GMT
Subject: CN=DE6F18F2F7921106D23A810EE9BAB4041FEB545D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:87:fd:63:e2:66:ee:b7:27:77:2e:19:11:
3f:cf:5f:f7:01:ce:38:ae:c0:0f:45:ad:c4:5d:c4:
af:26:a6:44:fe:6e:e5:46:3b:da:c2:fd:14:d8:c6:
9b:44:ae:11:e3:7c:d7:6e:c2:28:07:fb:08:3f:65:
b2:23:8c:8e:8b:6b:e0:5e:18:8d:b3:d3:b2:b8:84:
f8:06:d9:71:28:94:47:73:43:21:00:c5:fb:28:e3:
96:8d:7e:ea:a0:5d:e5:5b:17:32:c9:18:1c:95:be:
40:a6:71:c1:84:ba:4e:29:04:36:70:db:29:90:c1:
c0:69:ee:57:f5:55:59:f4:bc:f8:09:9e:4f:a6:9a:
23:91:85:2e:48:ca:16:d5:70:0d:85:ab:f4:f3:dc:
97:2d:30:c0:74:6b:8f:65:b0:55:0a:7b:a5:a2:7c:
9f:60:2e:5f:3a:a2:36:09:56:8a:7e:cc:b4:f7:78:
c9:e8:36:5b:d6:05:fb:f6:42:aa:73:0a:ef:2b:35:
eb:d6:45:46:06:cc:57:13:9f:b9:80:a7:2a:e6:1e:
b6:45:df:e0:33:34:bc:7c:d3:fa:b1:d6:3e:21:37:
09:3b:60:c9:5c:5a:63:65:2f:c3:63:b9:8f:68:a0:
05:98:6b:90:6c:d3:3a:c7:04:7a:34:65:bf:e1:3e:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:18:F2:F7:92:11:06:D2:3A:81:0E:E9:BA:B4:04:1F:EB:54:5D
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3031::/48
Signature Algorithm: sha256WithRSAEncryption
c1:3f:8f:b1:28:b2:27:03:62:f2:d2:e0:2e:9f:9b:e4:c8:5d:
be:f5:a0:83:46:9f:33:9b:f7:71:2b:85:a2:86:e6:e0:f9:51:
7b:cc:8d:37:bc:84:3f:bf:d9:15:7e:5c:21:d3:6b:ed:9e:80:
26:44:f2:1d:75:b1:1a:e1:1e:c5:ad:be:20:e9:1f:49:e1:b7:
63:a7:05:3f:61:48:dc:76:2b:46:22:7b:c6:57:87:c6:d2:2f:
31:0e:03:54:d7:07:3b:e6:05:c4:db:75:a1:f6:36:18:38:77:
d3:e1:b3:f3:94:8e:dd:36:fd:1e:7e:43:df:f0:3b:14:b0:25:
1b:46:05:d0:7c:fa:57:a4:d5:80:4f:e5:99:3b:98:35:ac:79:
b5:45:bd:fe:e4:2e:8c:74:a2:65:5b:9e:1a:ac:45:9e:44:74:
20:10:8d:e0:ed:81:63:ba:7d:ef:5c:04:83:02:1d:75:44:22:
b5:76:58:e4:a6:87:03:44:db:eb:e0:1a:e9:29:d9:14:bc:2f:
bc:a8:42:db:a8:09:3c:e0:88:c0:b2:a1:ee:db:1a:1b:9a:c8:
db:d0:6e:2b:e9:c7:60:90:94:78:74:86:3b:c0:f7:c1:b8:97:
ae:28:c4:7c:d8:b8:68:e1:ec:db:79:72:62:ba:cc:43:43:91:
6e:40:66:c9
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUdaOFHNjlK/J5+Xr0FB9UYRDsCxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3
MjY4ODlFQjAeFw0yNTA2MDExMzMxMTBaFw0yNjA1MzExMzM2MTBaMDMxMTAvBgNV
BAMTKERFNkYxOEYyRjc5MjExMDZEMjNBODEwRUU5QkFCNDA0MUZFQjU0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEof9Y+Jm7rcndy4ZET/PX/cB
zjiuwA9FrcRdxK8mpkT+buVGO9rC/RTYxptErhHjfNduwigH+wg/ZbIjjI6La+Be
GI2z07K4hPgG2XEolEdzQyEAxfso45aNfuqgXeVbFzLJGByVvkCmccGEuk4pBDZw
2ymQwcBp7lf1VVn0vPgJnk+mmiORhS5IyhbVcA2Fq/Tz3JctMMB0a49lsFUKe6Wi
fJ9gLl86ojYJVop+zLT3eMnoNlvWBfv2QqpzCu8rNevWRUYGzFcTn7mApyrmHrZF
3+AzNLx80/qx1j4hNwk7YMlcWmNlL8NjuY9ooAWYa5Bs0zrHBHo0Zb/hPtr1AgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU3m8Y8veSEQbSOoEO6bq0BB/rVF0wHwYDVR0j
BBgwFoAUt15fNlJDDO+W4eC9Ft2sQHJoieswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzAvQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3MjY4ODlFQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0I3NUU1RjM2NTI0MzBD
RUY5NkUxRTBCRDE2RERBQzQwNzI2ODg5RUIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm
Mi8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDMzMzEzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzEzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMDEwDQYJKoZIhvcN
AQELBQADggEBAME/j7EosicDYvLS4C6fm+TIXb71oINGnzOb93ErhaKG5uD5UXvM
jTe8hD+/2RV+XCHTa+2egCZE8h11sRrhHsWtviDpH0nht2OnBT9hSNx2K0Yie8ZX
h8bSLzEOA1TXBzvmBcTbdaH2Nhg4d9Phs/OUjt02/R5+Q9/wOxSwJRtGBdB8+lek
1YBP5Zk7mDWsebVFvf7kLox0omVbnhqsRZ5EdCAQjeDtgWO6fe9cBIMCHXVEIrV2
WOSmhwNE2+vgGukp2RS8L7yoQtuoCTzgiMCyoe7bGhuayNvQbivpx2CQlHh0hjvA
98G4l64oxHzYuGjh7Nt5cmK6zENDkW5AZsk=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:02 2025 by rpki-client