Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3330303a3a2f34302d3438203d3e20323033383838.roa
File: 326130613a363034303a3330303a3a2f34302d3438203d3e20323033383838.roa (raw, json)
Hash identifier: +OwvswEqKGEWqDdyX4Hu1CAVzScjzahh0XjQrtQLq3Y=
Subject key identifier: E3:CE:DE:71:48:B3:A6:A2:7B:CA:52:7C:12:EC:F9:8F:7D:83:77:AA
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 30B5DF62DF68017C0A551359F7162DCDCE8C7887
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3330303a3a2f34302d3438203d3e20323033383838.roa
Signing time: Fri 09 Dec 2022 08:20:58 +0000
ROA not before: Fri 09 Dec 2022 08:15:58 +0000
ROA not after: Fri 08 Dec 2023 08:20:58 +0000
asID: 203888
IP address blocks: 2a0a:6040:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b5:df:62:df:68:01:7c:0a:55:13:59:f7:16:2d:cd:ce:8c:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Dec 9 08:15:58 2022 GMT
Not After : Dec 8 08:20:58 2023 GMT
Subject: CN=E3CEDE7148B3A6A27BCA527C12ECF98F7D8377AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:ad:8c:ff:eb:07:77:71:37:dc:e0:c4:8e:
3b:79:20:e1:85:09:2c:96:d8:86:91:12:08:01:01:
4e:54:51:88:ad:0c:df:ed:87:73:a4:cc:a4:01:e0:
94:74:5e:10:e2:f3:fd:d6:2a:54:d6:a0:e6:9d:55:
68:41:47:64:6a:6c:f3:b8:5b:04:d3:0c:1d:ec:91:
df:c2:fd:02:93:dd:d8:5e:b3:73:97:38:33:b0:fe:
a0:c4:16:c6:7f:98:c7:9d:22:49:98:b1:da:f7:96:
dd:f1:48:b9:91:a3:e5:0c:16:24:ed:f1:48:de:e5:
64:cc:6e:24:ab:59:3f:d5:4c:74:aa:3e:57:03:0e:
c9:80:3b:9d:7c:21:e5:75:28:fd:29:b2:d6:99:39:
d8:9b:4b:8f:b2:51:39:59:ca:a1:1d:c1:c0:44:47:
03:21:50:f1:12:a1:00:09:9c:ad:ab:53:35:8a:14:
fa:32:81:57:be:cc:6c:1b:01:36:01:2a:b8:86:5a:
a5:b5:db:e1:21:c8:7d:17:47:96:68:b2:a8:4b:62:
b9:40:ba:dd:a7:ff:18:01:22:1c:39:14:94:81:48:
3e:f5:58:73:a1:7f:b3:cb:fa:de:ea:cc:67:12:6a:
30:b3:59:e3:0f:1a:da:32:f5:48:27:b4:01:87:7e:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CE:DE:71:48:B3:A6:A2:7B:CA:52:7C:12:EC:F9:8F:7D:83:77:AA
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3330303a3a2f34302d3438203d3e20323033383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
31:0c:2a:80:38:c3:38:ac:f9:d3:b0:3a:ce:59:58:54:c9:5e:
dc:e0:0a:b1:a7:f3:43:d5:16:1f:aa:28:6c:75:e6:fc:ed:1d:
94:a1:51:a4:34:e9:10:49:3d:6d:33:a0:85:da:89:25:55:ad:
90:3f:87:99:53:19:ef:c0:dc:61:9b:7c:5e:88:6f:e5:be:aa:
d0:e4:f6:4f:b5:4e:59:5e:b9:a0:20:32:70:7a:54:3a:93:84:
19:69:ad:f0:fb:9e:fb:2d:67:d6:be:d1:2c:2b:12:d1:a2:42:
6d:68:fc:2a:9e:76:f3:ea:44:55:1f:c4:3f:42:41:4f:e9:ef:
06:1a:94:8b:25:0e:c2:c8:25:1d:36:48:96:4f:42:e7:bc:24:
85:83:8e:16:52:20:72:d4:ff:59:b0:ee:a1:d7:df:8a:88:41:
12:e2:ee:4e:2a:ab:0d:30:ad:ab:cc:fa:c0:d7:c1:80:db:9e:
8d:76:c3:3f:e3:64:d0:91:8c:cf:d1:24:ea:93:84:1b:6c:bc:
75:2b:70:87:8d:a4:31:eb:ed:1a:b2:f3:71:78:da:11:27:b6:
c5:c9:47:68:e4:5c:08:4d:69:e5:88:44:74:c9:69:0b:7a:ea:
e7:f5:b0:56:d2:a8:d8:10:f0:5d:94:e4:9b:17:0a:62:ed:11:
a0:c8:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org