Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS131640.roa
File: AS131640.roa (raw, json)
Hash identifier: URf72bqUyrNG+KqwxVgzFl93a45QaqxSmy0mLYRXiFA=
Subject key identifier: B3:30:37:DF:4C:50:3E:D0:4E:CA:A2:56:F3:02:2D:22:C9:EA:BA:77
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 08B261F837D3374187140EEA29FD53997115BD77
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS131640.roa
Signing time: Tue 10 Dec 2024 00:45:36 +0000
ROA not before: Tue 10 Dec 2024 00:40:36 +0000
ROA not after: Tue 09 Dec 2025 00:45:36 +0000
asID: 131640
IP address blocks: 2a05:dfc1:8b00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b2:61:f8:37:d3:37:41:87:14:0e:ea:29:fd:53:99:71:15:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Dec 10 00:40:36 2024 GMT
Not After : Dec 9 00:45:36 2025 GMT
Subject: CN=B33037DF4C503ED04ECAA256F3022D22C9EABA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:4f:e5:5f:89:ae:90:5b:0c:7f:ec:f2:5d:
c7:cd:b6:95:41:96:6f:83:24:ad:95:5f:38:46:68:
2c:f3:cc:b8:05:59:c2:aa:cc:da:e9:c7:c2:35:63:
6e:93:cb:4a:83:3c:0a:09:95:d2:b5:d7:0c:5d:5d:
57:2d:18:6a:91:4b:53:9d:fe:df:f7:02:2b:90:a9:
cc:1d:1e:46:6d:31:2a:2c:8e:ba:c8:f3:b3:17:ab:
ed:0e:84:3d:d7:30:d5:d9:b9:9d:f1:96:b7:62:9d:
1f:8c:72:44:bf:ee:a7:4b:ee:e5:35:52:95:d8:b1:
1e:51:9d:0f:dc:83:73:e0:81:9b:44:31:43:38:a5:
6c:c4:ab:ef:ec:7b:e0:f6:6e:9d:85:91:50:28:7e:
be:c9:60:d2:9c:6e:7f:74:07:48:29:ee:45:b6:2b:
a3:af:75:ac:95:d7:60:36:24:fb:81:cf:fa:7f:81:
48:27:4c:f4:ad:87:00:e9:7e:55:36:e1:9a:0e:0c:
d0:89:fb:4d:46:34:f0:cc:46:9f:c7:d0:cb:35:cd:
7a:ce:fb:35:15:d5:4b:c4:2d:d3:9b:17:ed:c9:08:
33:42:ff:c2:a1:93:3f:8f:42:50:85:7b:97:54:75:
79:6a:85:4d:2b:8d:76:3b:75:2a:44:d6:ff:02:c6:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:37:DF:4C:50:3E:D0:4E:CA:A2:56:F3:02:2D:22:C9:EA:BA:77
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS131640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8b00::/40
Signature Algorithm: sha256WithRSAEncryption
c1:57:df:98:2c:5c:d9:7e:c0:8b:d9:b7:b5:4a:19:3c:7a:52:
d2:82:11:f5:d0:fa:52:09:9e:a1:19:3b:7e:01:28:e6:e9:50:
f4:46:2d:31:ba:ca:f9:fb:dc:0c:fc:6e:66:b9:8a:47:1a:f2:
e1:da:86:16:bc:c6:bf:7b:24:97:08:6e:99:6b:83:0a:49:00:
d6:86:de:a6:21:e0:21:b8:5c:8c:a2:03:2e:69:c6:96:78:ca:
6b:99:b0:d4:71:5c:67:8b:a5:a2:37:c0:09:b5:b9:86:77:ba:
9a:79:a9:b2:aa:55:a7:9d:98:42:6b:e2:40:32:ba:ac:1d:8c:
e3:16:b0:92:e7:22:8a:81:59:93:1b:7d:11:27:eb:15:fa:a6:
98:6b:6c:bf:92:54:9c:9a:df:d6:ab:59:e2:f2:9f:1d:9b:b4:
9a:a5:3b:d1:5b:d7:2c:b7:40:0b:7a:65:d1:96:3c:0d:4b:9f:
df:ea:1f:53:3f:55:d3:98:d5:91:bb:9c:3c:d1:10:e9:da:da:
20:6b:89:c9:ba:2f:bc:df:07:fc:51:6c:fd:b3:9b:e7:6f:4a:
48:e6:4a:75:82:81:03:90:46:02:b8:ee:7d:9a:ef:e8:46:f7:
c2:cc:4e:37:c2:f5:d2:45:9a:3b:63:89:1e:c7:c6:02:98:72:
cd:df:33:f8
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUCLJh+DfTN0GHFA7qKf1TmXEVvXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDEyMTAwMDQwMzZaFw0yNTEyMDkwMDQ1MzZaMDMxMTAvBgNV
BAMTKEIzMzAzN0RGNEM1MDNFRDA0RUNBQTI1NkYzMDIyRDIyQzlFQUJBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9n0/lX4mukFsMf+zyXcfNtpVB
lm+DJK2VXzhGaCzzzLgFWcKqzNrpx8I1Y26Ty0qDPAoJldK11wxdXVctGGqRS1Od
/t/3AiuQqcwdHkZtMSosjrrI87MXq+0OhD3XMNXZuZ3xlrdinR+MckS/7qdL7uU1
UpXYsR5RnQ/cg3PggZtEMUM4pWzEq+/se+D2bp2FkVAofr7JYNKcbn90B0gp7kW2
K6OvdayV12A2JPuBz/p/gUgnTPSthwDpflU24ZoODNCJ+01GNPDMRp/H0Ms1zXrO
+zUV1UvELdObF+3JCDNC/8Khkz+PQlCFe5dUdXlqhU0rjXY7dSpE1v8Cxo+BAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUszA330xQPtBOyqJW8wItIsnquncwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTMxNjQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYswDQYJKoZIhvcNAQELBQADggEBAMFX
35gsXNl+wIvZt7VKGTx6UtKCEfXQ+lIJnqEZO34BKObpUPRGLTG6yvn73Az8bma5
ikca8uHahha8xr97JJcIbplrgwpJANaG3qYh4CG4XIyiAy5pxpZ4ymuZsNRxXGeL
paI3wAm1uYZ3upp5qbKqVaedmEJr4kAyuqwdjOMWsJLnIoqBWZMbfREn6xX6pphr
bL+SVJya39arWeLynx2btJqlO9Fb1yy3QAt6ZdGWPA1Ln9/qH1M/VdOY1ZG7nDzR
EOna2iBricm6L7zfB/xRbP2zm+dvSkjmSnWCgQOQRgK47n2a7+hG98LMTjfC9dJF
mjtjiR7HxgKYcs3fM/g=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:59:10 2025 by rpki-client