Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: dzWuBbL9qoRRQI6EpNwCaE7Ww8zuC/fJkHyCODoh4KQ=
Subject key identifier: 79:74:D3:F6:A6:17:35:F6:9C:04:E2:89:E8:91:2F:F9:F7:90:65:E2
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 3FE38EF39CCB9CA7D1E173FAAF70C661A0934460
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
Signing time: Wed 11 Jun 2025 01:10:28 +0000
ROA not before: Wed 11 Jun 2025 01:05:28 +0000
ROA not after: Wed 10 Jun 2026 01:10:28 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba57::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e3:8e:f3:9c:cb:9c:a7:d1:e1:73:fa:af:70:c6:61:a0:93:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Jun 11 01:05:28 2025 GMT
Not After : Jun 10 01:10:28 2026 GMT
Subject: CN=7974D3F6A61735F69C04E289E8912FF9F79065E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:80:bc:6c:3e:02:8c:58:07:e0:97:73:cf:
f7:f6:b8:57:a8:07:66:05:7b:2a:10:e7:77:63:6e:
ac:63:8b:59:5c:84:52:56:8b:4a:cf:e7:cb:e3:bd:
25:96:d9:2c:a8:4c:3b:e1:7c:33:17:62:04:8e:8f:
0c:79:2e:03:f9:19:8c:01:3e:2d:02:c4:05:47:fe:
34:53:32:e5:64:4d:e2:9f:20:74:ee:e0:d8:43:a0:
a0:68:0e:48:93:92:58:66:6a:60:05:cc:17:cf:ca:
1e:3c:ed:68:30:40:1d:8c:fe:c4:06:c3:35:80:47:
f3:ee:18:34:07:89:fe:61:ae:f4:62:2d:57:a0:bb:
ef:7c:07:43:13:4a:cf:0a:11:31:28:b5:d5:09:07:
70:c8:f6:f8:96:a4:f3:48:aa:c8:0a:34:59:9d:58:
05:14:cd:bc:3b:47:c7:78:cf:54:af:b0:28:26:3d:
72:11:e1:19:cd:9a:34:ff:26:10:12:8d:ba:4d:d6:
39:a7:6b:bc:a9:e3:9d:16:8e:c9:5f:d8:d3:64:97:
08:ab:f8:be:34:ce:2a:96:ae:32:35:65:f2:67:b2:
f4:9b:ea:04:68:a6:97:04:1a:0f:93:92:54:7a:65:
b5:fa:bb:2c:a0:9c:72:ec:51:9a:e6:50:c7:c2:ae:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:D3:F6:A6:17:35:F6:9C:04:E2:89:E8:91:2F:F9:F7:90:65:E2
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba57::/48
Signature Algorithm: sha256WithRSAEncryption
01:86:db:19:8b:54:3f:73:cb:c6:1b:0e:5d:34:45:84:71:e8:
ce:70:1d:5e:ba:e5:67:87:68:3a:9a:44:40:c9:94:af:ae:00:
e0:3c:3e:bf:8f:57:19:89:79:c0:c3:4f:3b:98:3e:f1:a1:a7:
21:d3:11:9b:65:a9:a5:1c:af:7a:0d:2b:d5:ff:00:ab:31:42:
0e:5d:e4:0a:30:27:46:9f:61:76:2f:60:a7:0d:95:f0:b8:26:
56:4a:c5:51:04:94:6b:7f:fb:28:5d:06:46:a0:4c:bc:69:2e:
ba:c6:36:de:bb:69:6a:04:d4:d4:f7:65:b2:69:71:b4:cc:19:
92:50:49:1f:ba:d8:07:4f:7d:8d:fe:49:a5:6c:66:74:73:b8:
98:90:5a:83:14:ef:e5:36:f1:1f:ac:9c:a9:94:0f:73:6d:06:
2c:3e:28:8b:11:d0:bd:76:56:ea:3b:92:58:4b:52:4a:95:5d:
b5:d8:11:f7:1d:d9:a9:85:f2:e5:50:dc:5b:73:06:c2:32:b6:
9c:82:17:60:2f:d8:ce:c6:f8:b6:a8:79:6b:14:51:53:9b:dc:
d9:2b:01:7d:48:87:45:9c:8a:cb:c4:63:eb:b3:84:06:11:8d:
36:a6:a9:f1:43:99:91:9e:08:6b:b8:0b:d2:a5:4d:cb:de:12:
8a:a9:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:21 2025 by rpki-client