Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
File: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier: a5lbCtC1T7r8px42GLZMFSD/ikoTQWKCh4uSToBDGZw=
Subject key identifier: 4B:F0:CC:42:4E:B6:0F:A2:AE:A1:A5:7D:4B:46:1D:DD:10:54:5A:AE
Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial: 24CEC16DA1EDC803FCFBDDF575078DC7C67B7C7C
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
Signing time: Sun 01 Jun 2025 13:36:07 +0000
ROA not before: Sun 01 Jun 2025 13:31:07 +0000
ROA not after: Sun 31 May 2026 13:36:07 +0000
asID: 215087
IP address blocks: 2a06:9f81:30ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ce:c1:6d:a1:ed:c8:03:fc:fb:dd:f5:75:07:8d:c7:c6:7b:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Validity
Not Before: Jun 1 13:31:07 2025 GMT
Not After : May 31 13:36:07 2026 GMT
Subject: CN=4BF0CC424EB60FA2AEA1A57D4B461DDD10545AAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:e3:97:18:63:fe:c9:9f:9c:2d:d2:be:b5:
f2:94:38:7a:61:9d:0e:57:f6:a8:03:87:5b:87:a7:
ac:90:18:9e:ba:81:a9:d5:43:9d:d3:be:8f:87:8e:
61:9c:d5:04:2c:12:2f:a4:e1:07:dc:b3:42:78:d4:
c1:ee:f0:68:7f:51:70:9c:0d:63:b3:cf:bb:55:67:
8a:bb:ba:d5:c1:17:31:cc:82:97:57:dd:3c:d2:5f:
8a:5f:bb:25:5e:c6:aa:5f:1c:bf:87:f3:f7:89:c5:
66:41:92:a4:95:1d:8c:26:1a:bc:e3:aa:4a:af:a6:
80:8d:25:67:09:df:71:89:f9:62:c2:fc:90:cb:73:
7c:ea:28:52:74:84:33:0f:58:f9:6b:0d:af:26:8a:
d8:e2:ce:3d:3a:ac:d4:76:3b:04:bf:36:47:20:f0:
80:c3:ca:29:01:35:6c:84:86:00:7f:f3:fe:82:87:
3c:a0:10:7c:cb:33:fe:16:2b:8a:9e:86:82:d2:4a:
5c:0e:24:e4:ce:6c:e3:f7:e9:ed:cd:c5:3b:6a:7f:
7b:5a:ef:bf:55:4d:56:80:65:12:35:95:53:a2:90:
0f:f0:62:34:51:af:45:ae:e8:c9:c3:8a:80:b2:37:
b3:83:0b:6a:43:e7:78:31:11:c8:e5:9d:18:b9:93:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F0:CC:42:4E:B6:0F:A2:AE:A1:A5:7D:4B:46:1D:DD:10:54:5A:AE
X509v3 Authority Key Identifier:
keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30ff::/48
Signature Algorithm: sha256WithRSAEncryption
af:1f:d1:7e:d0:b6:bc:c5:02:0e:8c:f3:69:7c:a8:59:f4:9f:
17:a5:1b:cd:3c:27:49:d2:b6:96:1f:25:2a:aa:bb:b1:8d:a5:
51:fe:b6:09:25:66:60:9a:77:35:de:39:1a:76:a9:d1:fb:63:
7b:88:25:ae:62:aa:6e:6b:64:92:e1:1d:98:01:1c:9d:6c:74:
63:3a:ef:b7:34:11:43:e3:88:7d:9b:f0:4f:a5:f9:12:70:f7:
98:ce:5b:85:b4:30:fa:b1:e6:fc:4f:0a:3f:b5:ea:df:8b:29:
aa:71:3f:99:41:68:8a:e2:ed:37:15:46:c2:e9:97:de:a5:12:
d7:40:6b:16:51:4f:49:8f:61:84:b3:4e:bc:98:b6:c4:d8:5d:
cf:bb:02:91:4b:b1:59:3c:62:a6:92:74:ba:d6:3f:59:f3:62:
96:a7:97:78:92:09:42:ce:96:ff:f6:03:8c:7d:58:05:4f:7f:
75:1c:fc:fc:8f:92:71:01:d5:9d:ef:de:0d:ad:f6:9f:8e:2e:
ac:5e:79:f9:77:26:15:75:8a:10:50:46:bf:8b:40:82:e1:e4:
54:f3:9a:33:23:36:4c:7f:ba:cc:1d:dd:25:42:69:8d:45:7e:
81:97:83:93:e3:4c:98:03:69:3b:7c:aa:65:a4:70:b6:cf:7d:
f8:eb:46:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:16:09 2025 by rpki-client