Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa
File: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (raw, json)
Hash identifier: NOrJOyMxOJke+xSkPaEjrzeDYC6qpAzFuARa/CDSvCY=
Subject key identifier: 93:CC:45:EB:01:F0:8F:53:A0:F6:51:BE:44:97:C3:87:16:08:59:87
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 17A0B137089D27384A475B17BAF2A5A610A80EE8
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa
Signing time: Tue 24 Dec 2024 15:12:18 +0000
ROA not before: Tue 24 Dec 2024 15:07:18 +0000
ROA not after: Tue 23 Dec 2025 15:12:18 +0000
asID: 152671
IP address blocks: 2a06:9f81:3042::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a0:b1:37:08:9d:27:38:4a:47:5b:17:ba:f2:a5:a6:10:a8:0e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Dec 24 15:07:18 2024 GMT
Not After : Dec 23 15:12:18 2025 GMT
Subject: CN=93CC45EB01F08F53A0F651BE4497C38716085987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:f1:ed:78:50:77:9b:f3:ee:eb:3f:a3:83:
2f:d7:38:04:ee:a5:67:e1:a2:61:e7:de:b9:ba:26:
96:95:ec:22:6a:d1:22:10:a3:e1:15:8c:20:a4:20:
bd:a4:6d:45:65:a6:f9:98:ae:3a:a9:7b:65:1b:d0:
6a:47:70:ab:89:a7:04:3b:44:26:65:f6:09:9a:87:
19:4a:b2:9f:d8:ad:90:1c:3f:c2:34:2a:d0:9b:9f:
4e:e8:03:e7:0a:55:4b:5d:ba:5b:99:31:e9:e7:c0:
0f:b6:fe:0d:4a:01:fd:4f:e7:42:34:44:1f:52:2c:
8f:73:a2:55:3d:d3:6c:26:40:53:35:f5:21:f6:29:
5d:6f:23:0d:75:30:f4:5e:1a:d7:6f:81:d1:a8:b6:
db:11:9a:3b:36:d3:27:60:f1:33:c3:96:ac:fc:a0:
9b:bf:ce:f5:87:ef:81:12:17:3a:55:63:b1:71:3b:
93:c4:aa:8b:b4:7d:73:a8:10:48:7d:01:2c:14:3c:
75:bb:a2:48:f6:be:fa:81:d6:02:e8:8e:cc:2f:d6:
3b:91:e7:84:57:7d:9c:8c:bc:06:71:3b:ff:df:9b:
b8:76:82:08:57:e2:fc:4a:cd:82:a9:9d:c9:2a:05:
84:a7:1f:c3:fb:de:bb:0c:b0:b7:cb:10:97:63:bd:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CC:45:EB:01:F0:8F:53:A0:F6:51:BE:44:97:C3:87:16:08:59:87
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3042::/48
Signature Algorithm: sha256WithRSAEncryption
88:47:bb:bc:fd:da:5b:c6:43:3b:8d:b0:61:7a:46:43:cc:42:
ae:7f:e9:97:2a:d2:08:90:3b:52:21:53:f7:7f:68:52:39:d6:
c9:68:eb:9d:bd:7a:97:e7:b2:b8:ef:f3:73:95:35:56:2f:08:
33:08:1e:b0:ea:60:27:6a:41:d3:9d:95:68:58:3e:80:97:40:
78:ea:94:7b:41:71:31:7f:2a:07:0a:78:3d:4f:08:10:87:31:
70:1c:b2:1c:20:f4:58:6c:cf:02:8f:03:e3:30:3d:fc:6c:2a:
32:11:38:61:d3:c4:81:35:c5:fa:3e:25:92:32:fa:12:ab:36:
30:7d:3f:d5:76:94:4d:13:f7:47:94:e8:d3:8b:98:a1:55:91:
6b:3e:91:b9:6c:09:1b:db:7c:67:bd:34:a6:5c:ed:44:6c:93:
55:19:7b:a2:05:e5:3c:14:7b:3b:af:b1:c8:e3:e2:2b:f9:59:
0c:d7:e2:e2:49:d3:f2:c9:59:03:92:d5:e2:df:86:47:09:65:
11:b7:cd:cc:a4:04:c1:39:a5:a6:c3:7e:b7:14:c5:3a:91:4d:
65:93:40:4e:fa:d0:95:73:48:a4:e4:5f:a4:53:0a:51:b4:08:
6e:e5:8c:54:31:94:ee:66:e4:91:f4:fa:2a:82:a6:ed:5b:df:
60:91:65:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:20 2025 by rpki-client