Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa
File: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (raw, json)
Hash identifier: qdR2c6Yk1rF85JM9cvy/J5RWgZjD5cAobIS8i6MUuw8=
Subject key identifier: 87:EC:24:61:3F:F8:7D:71:4A:E4:70:19:28:4D:77:4F:47:0A:64:E7
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 65AAB76897F28407B69519E42D1D34A8DE89BD3B
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa
Signing time: Tue 07 Jan 2025 12:12:39 +0000
ROA not before: Tue 07 Jan 2025 12:07:39 +0000
ROA not after: Tue 06 Jan 2026 12:12:39 +0000
asID: 147036
IP address blocks: 2a06:9f81:3045::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:aa:b7:68:97:f2:84:07:b6:95:19:e4:2d:1d:34:a8:de:89:bd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Jan 7 12:07:39 2025 GMT
Not After : Jan 6 12:12:39 2026 GMT
Subject: CN=87EC24613FF87D714AE47019284D774F470A64E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:70:70:9e:06:c0:f2:bd:4d:7e:60:03:eb:
63:21:f1:29:a4:b1:b5:4a:2a:ac:ea:84:0d:3b:27:
95:1e:bb:83:85:39:b1:e9:27:28:cd:0c:90:f8:7b:
d0:b1:83:12:8c:6c:7e:2f:da:5a:16:f6:a5:17:a7:
7d:55:65:96:6b:3f:c9:61:29:34:c6:b6:9d:cc:0f:
d3:9a:95:3f:0d:43:d6:f4:d3:58:9c:70:0c:3a:47:
ca:98:f8:53:0a:95:02:39:a9:69:07:87:7d:ef:df:
60:07:8e:ff:d3:d7:ca:5e:ab:f8:33:1d:c9:24:18:
a9:94:8e:24:fa:7e:67:6d:14:82:84:89:46:cc:2a:
25:f1:83:17:fc:87:fa:0f:22:93:39:4f:ce:21:ec:
ea:25:7a:0d:9a:88:5b:4c:24:37:96:17:e8:e7:9f:
5f:73:7c:24:5b:1c:c2:da:56:a8:14:5d:38:b1:3e:
f5:20:04:52:2d:a9:54:99:87:c9:90:44:a4:2b:ce:
3a:fd:0b:04:41:e2:98:3a:80:75:f8:98:f5:33:97:
38:c2:c2:37:b9:ab:b2:a0:ca:c2:58:69:4e:f2:72:
b8:a2:a1:aa:39:0d:ea:d5:de:4d:39:2b:30:85:c6:
c6:6d:09:28:d8:a6:ed:35:47:0c:fd:63:e2:6d:94:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EC:24:61:3F:F8:7D:71:4A:E4:70:19:28:4D:77:4F:47:0A:64:E7
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3045::/48
Signature Algorithm: sha256WithRSAEncryption
77:29:c2:4a:cb:15:bf:d2:ba:c7:9f:22:63:aa:61:ea:d6:c6:
14:0b:34:1a:d8:2f:c3:3e:76:01:da:4c:93:35:9b:54:f2:3b:
af:e2:b3:75:36:2e:66:12:24:cb:53:e0:c5:79:7d:7a:75:44:
e1:5e:84:2f:0b:7f:5d:0f:d4:7f:e3:e3:98:50:99:9b:9a:22:
43:57:4e:25:0d:5d:88:87:dc:39:e7:0c:92:39:af:ef:38:a9:
55:e4:15:d3:66:8d:ab:db:50:12:4e:e8:81:8f:79:5a:ca:1b:
be:d1:1a:13:c9:2e:21:6e:a5:ca:1e:2d:1f:4b:56:df:f6:55:
fb:dd:15:ad:92:a1:98:52:39:52:e3:be:77:59:17:a0:f5:57:
72:c0:28:ac:2a:cc:72:97:97:7e:80:fa:de:c0:62:95:7c:3e:
13:13:51:42:09:22:6a:88:f2:01:69:df:ee:22:74:6e:6e:91:
86:e0:0f:7d:d1:16:c6:1d:3b:a2:b4:4b:f2:f9:13:e5:6e:70:
bb:e4:fc:98:5a:c7:94:3f:91:be:62:d2:00:d2:81:54:f4:c4:
8c:16:86:11:0f:fe:78:22:b7:89:fc:fb:f1:59:12:db:01:14:
81:84:3f:fa:8e:59:1b:13:ad:ba:32:41:02:64:3d:e3:9d:9b:
53:1d:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:39 2025 by rpki-client