Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: Il1KcF3EWUvTbocMt7EmzFT5S+tk1xhYo0laUEKF3gs=
Subject key identifier: EE:A7:D9:DE:51:37:EB:E1:11:7F:C8:D6:DF:96:FA:5F:92:C3:42:1F
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 04BF7EC473A1D74524BEDC5F21C6147369A48CEC
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa
Signing time: Sun 25 May 2025 02:10:20 +0000
ROA not before: Sun 25 May 2025 02:05:20 +0000
ROA not after: Sun 24 May 2026 02:10:20 +0000
asID: 199518
IP address blocks: 2a0a:6040:baa1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:bf:7e:c4:73:a1:d7:45:24:be:dc:5f:21:c6:14:73:69:a4:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: May 25 02:05:20 2025 GMT
Not After : May 24 02:10:20 2026 GMT
Subject: CN=EEA7D9DE5137EBE1117FC8D6DF96FA5F92C3421F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:21:51:5a:1a:73:9b:6c:4b:de:f4:a9:8f:
15:27:e5:ca:1e:9f:f6:a4:8f:3d:55:0f:c7:1f:a4:
0f:fe:63:37:40:05:31:9d:90:91:9a:ad:5e:ec:bb:
9e:d3:2b:09:25:97:96:6e:39:fb:10:f8:b5:82:fa:
7c:5f:31:00:72:fd:a3:81:4a:b1:03:5e:a9:52:4d:
8b:e5:09:f0:e8:d1:47:a8:64:6b:af:6a:50:e6:ab:
7a:32:c6:bb:e0:ab:a4:86:6b:cb:d8:4a:28:34:54:
b1:30:47:bd:f4:b7:8e:fd:08:c1:e8:22:e3:8d:23:
8f:fb:a2:ed:de:75:73:ba:4f:2f:85:93:ac:4f:c9:
3b:73:05:9d:f3:9b:d2:f7:70:51:ce:4e:3c:51:3d:
6b:4e:31:44:b9:2c:f7:60:ce:01:4e:60:29:8e:a2:
5e:8a:14:56:30:5f:eb:c0:05:11:41:50:ed:6d:0f:
25:6f:4a:2d:3a:20:ff:33:83:ed:1e:db:7a:c1:bb:
7f:8f:b7:0b:d8:77:a1:8b:32:47:a4:d4:82:d0:0a:
bf:18:1f:57:69:bd:38:38:03:07:eb:c4:51:a1:f9:
a8:2b:8f:61:15:01:a0:a0:84:33:53:51:5d:7a:68:
3c:b7:a0:29:09:de:b7:04:d6:ff:03:06:1d:58:52:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:D9:DE:51:37:EB:E1:11:7F:C8:D6:DF:96:FA:5F:92:C3:42:1F
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:baa1::/48
Signature Algorithm: sha256WithRSAEncryption
01:1d:e0:71:19:5f:74:44:d5:a9:44:67:f6:ab:40:a3:07:09:
1b:a4:60:89:07:27:4e:85:5c:50:ce:03:e9:41:8d:44:44:2d:
09:a0:8b:c7:fe:0d:32:ba:c0:7c:17:7d:66:a0:fa:49:37:c5:
a9:b5:26:3b:78:58:88:20:ef:52:cc:84:8c:73:b9:fd:52:90:
1a:71:a3:60:a8:0d:f2:85:2d:c2:81:63:73:d6:98:26:1e:d4:
38:c1:76:0a:12:98:87:49:1e:cd:b7:fc:ff:07:1d:a4:6b:e6:
30:06:43:22:fd:9c:61:28:bb:30:13:ea:31:1e:8a:9f:e4:d4:
7b:e2:f9:17:6d:0a:a9:ed:57:86:51:68:d0:2d:96:39:78:b1:
a7:73:72:9f:ae:17:13:91:a5:a4:1e:4e:69:39:02:fb:81:25:
fd:c5:d9:75:51:23:ae:c4:0c:cc:9c:c6:b8:45:8b:48:50:dc:
f5:01:ea:f0:1d:99:b2:9b:35:af:11:50:49:27:2d:dc:04:3e:
6a:94:8d:18:6e:74:36:c0:ac:dc:c8:e5:0f:f7:c3:9b:c3:06:
30:58:ce:28:e7:73:9f:b9:e3:fd:ba:47:5c:b6:61:96:8b:4b:
a9:d9:05:00:e6:7b:2a:71:bf:88:72:95:a8:65:c3:74:e1:45:
14:b3:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:51:02 2025 by rpki-client