Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: gDPgU/zG0i/Ns5Vbw5fY7f4XbK/GmMKM+xsbovAZOng=
Subject key identifier: B8:9B:74:29:AF:84:E2:8D:45:45:A1:80:63:9D:AA:C5:6A:6D:68:79
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 45E48C786E3E2006CD0F473794678916601839B1
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
Signing time: Wed 11 Jun 2025 01:10:28 +0000
ROA not before: Wed 11 Jun 2025 01:05:28 +0000
ROA not after: Wed 10 Jun 2026 01:10:28 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e4:8c:78:6e:3e:20:06:cd:0f:47:37:94:67:89:16:60:18:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Jun 11 01:05:28 2025 GMT
Not After : Jun 10 01:10:28 2026 GMT
Subject: CN=B89B7429AF84E28D4545A180639DAAC56A6D6879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:a8:70:f6:2b:b5:75:56:d4:d8:c3:49:fa:
f5:ef:39:3a:12:3c:e3:48:ed:ff:47:81:b6:c1:97:
5b:f9:bd:35:84:33:82:9f:41:c2:aa:86:00:3c:67:
f7:c2:5b:e1:15:3b:e7:3f:e6:80:d3:be:bf:1e:58:
ce:e8:11:7a:ec:3c:f1:5b:70:58:0d:08:6d:30:ea:
52:5a:cc:33:28:98:85:30:65:f9:b6:45:54:b0:7f:
db:35:3a:9d:36:8d:36:3a:c8:7a:9c:b0:d6:5c:33:
69:10:c8:c2:9b:5f:5c:8f:f5:c0:88:fa:c6:60:cd:
f6:4d:ce:7b:f1:be:ee:6b:32:ae:f8:32:92:e6:7b:
1e:b6:64:45:45:c6:74:e9:03:bb:e6:70:ca:75:cc:
1e:a3:dc:c4:27:d4:61:ba:1e:f1:6a:4d:2d:33:e0:
1a:43:87:9f:cc:30:ca:c3:97:ef:35:1c:c4:f9:bb:
3f:0c:23:0b:01:28:e8:86:92:bb:4c:55:72:e2:90:
eb:a2:f2:60:ff:a5:33:90:96:33:70:82:ca:ce:57:
09:96:87:53:0a:cc:fa:07:ef:19:cc:8c:6f:89:d6:
8c:c9:e4:92:e2:dd:59:08:ff:04:fc:f8:61:61:31:
f9:53:30:25:21:b9:eb:9a:1b:4e:c4:45:b1:e3:d1:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:74:29:AF:84:E2:8D:45:45:A1:80:63:9D:AA:C5:6A:6D:68:79
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba1d::/48
Signature Algorithm: sha256WithRSAEncryption
9e:59:04:04:37:ca:59:04:45:4c:f5:80:36:b0:e7:9e:e2:25:
3c:bc:76:bf:bf:c3:13:0f:e1:56:33:9f:ac:75:b5:53:23:31:
e8:4d:6d:60:45:64:49:0b:f9:d9:1a:33:41:8e:f2:89:23:d0:
bb:f8:98:6c:9d:0b:97:b5:1c:18:2b:01:b2:2a:c4:d3:d6:4a:
16:bc:1d:95:f9:11:e6:53:ac:c7:c9:39:83:c1:a1:4c:78:74:
e5:8c:4c:49:f6:1d:da:a6:13:06:36:c6:fd:51:56:2d:46:6e:
44:33:9d:7a:0a:1d:47:a7:4b:7f:03:20:56:dc:8e:61:6d:13:
33:40:2c:fd:fa:e9:72:93:43:95:b0:c4:f7:b0:bb:dc:2d:d4:
42:2f:fb:4a:5b:d3:20:2e:a1:b4:00:77:a9:9e:c4:f6:d1:7a:
04:7f:d5:2e:64:73:81:02:59:d3:c4:f7:7a:90:59:d1:8a:c1:
89:04:c4:3c:3e:87:fa:3d:9c:56:4e:d8:20:11:5e:01:8a:a3:
e3:91:9e:fd:f0:28:ea:ef:8e:bb:46:9a:4c:b8:76:f3:5e:a6:
ff:e2:7e:60:b9:89:73:c3:6f:5a:27:5a:fd:de:64:b7:91:22:
42:68:37:d4:89:d5:d5:cc:bf:e5:2f:ca:19:3e:04:cf:26:aa:
4c:d3:6d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:15 2025 by rpki-client