Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198663.roa
File: AS198663.roa (raw, json)
Hash identifier: vhE7Lp2fRter+95X1IkHvdFeHNs7BKDySUBAwRKO8yM=
Subject key identifier: CB:3B:C3:3F:93:50:AF:77:19:B6:0B:9B:B7:B3:CB:FA:6C:2F:04:F4
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 0D731A2C0C7F311EF56C7E9D9F61E85D8489B982
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198663.roa
Signing time: Tue 04 Mar 2025 00:45:56 +0000
ROA not before: Tue 04 Mar 2025 00:40:56 +0000
ROA not after: Tue 03 Mar 2026 00:45:56 +0000
asID: 198663
IP address blocks: 2a05:dfc1:2f00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:73:1a:2c:0c:7f:31:1e:f5:6c:7e:9d:9f:61:e8:5d:84:89:b9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Mar 4 00:40:56 2025 GMT
Not After : Mar 3 00:45:56 2026 GMT
Subject: CN=CB3BC33F9350AF7719B60B9BB7B3CBFA6C2F04F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:64:cd:70:2d:ab:d1:f9:c3:1b:1a:6d:f4:
c3:e9:ad:27:a8:79:bb:5f:46:58:7c:2f:0d:f8:d6:
24:e8:b0:d7:b5:7b:4d:0c:fb:b0:3a:9c:45:93:61:
12:a7:3d:ef:22:79:4d:a1:f4:70:4c:6a:2c:60:fe:
5b:da:7e:4e:66:b6:4a:55:e8:e6:de:02:fe:97:f9:
b3:fa:9a:10:5e:fb:7b:eb:1b:3b:a7:fa:0e:e0:49:
0c:36:c0:3e:56:1e:b0:0f:6b:47:c9:77:fa:02:29:
4e:b2:39:be:22:95:5a:18:b6:69:32:96:f5:1d:d0:
1e:cd:b9:bc:08:76:af:c6:51:6a:12:39:b6:62:4a:
1e:e4:8d:d4:ea:cf:1e:b5:bc:f2:10:f1:47:bf:07:
0b:89:5b:25:df:cf:5b:49:7b:c1:a4:8b:e4:11:14:
5a:a0:da:6a:ce:8a:f5:01:2b:05:95:f6:72:e6:89:
29:06:8a:7f:b8:91:ce:8c:c0:3b:73:a6:ff:64:2d:
4b:07:f6:34:d7:a7:ed:00:6a:c9:61:38:47:6f:00:
19:10:e7:06:1f:c7:cf:15:ed:bd:39:5a:20:ee:28:
3c:5f:f5:94:95:d8:66:b7:23:83:f2:ab:da:c7:6b:
90:ad:96:17:73:4e:4e:8f:bc:fa:87:04:2e:bd:f5:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:C3:3F:93:50:AF:77:19:B6:0B:9B:B7:B3:CB:FA:6C:2F:04:F4
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:2f00::/40
Signature Algorithm: sha256WithRSAEncryption
a1:1f:a9:3d:05:20:07:eb:b8:32:eb:8d:e2:11:22:ae:39:65:
30:6a:ae:2e:1c:fa:92:a9:55:26:ab:a3:4e:5d:56:ab:ff:07:
fc:b9:be:8d:52:78:ae:91:5c:02:fb:09:21:54:9c:87:71:46:
04:bd:24:c2:a9:46:30:aa:dc:18:f6:35:df:9d:be:0f:95:03:
ee:74:c3:68:89:91:28:be:77:10:eb:a8:83:18:3f:88:20:30:
04:58:21:63:e0:4b:ea:58:f8:ed:f3:20:0e:96:52:79:50:2c:
a0:76:c7:11:46:77:e9:b2:4a:ff:ab:3a:66:1d:83:5b:2c:34:
59:f0:10:a9:16:ab:95:84:98:ac:47:be:af:44:7c:97:90:ea:
52:a7:b6:9c:83:13:16:df:d4:af:21:2d:7f:2f:2d:1b:b3:b9:
d6:a1:99:b9:6b:45:f2:66:0e:6e:96:8b:36:84:7b:66:86:88:
7c:b4:85:84:f9:b9:2f:4e:57:fe:3b:63:10:5e:ed:fd:49:41:
19:81:bb:7d:ae:38:52:14:21:96:ad:91:0c:cc:cc:88:98:8c:
c5:08:c2:b6:ee:cb:a3:1b:31:01:8f:13:3f:5d:25:e9:0c:50:
f4:ea:23:48:b9:61:aa:65:87:3e:49:4d:3b:02:a0:12:f1:4a:
99:42:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:01:00 2025 by rpki-client