Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa
File: AS198969.roa (raw, json)
Hash identifier: 3SZC3BW6CtIDAyfuNzbN0lvrV3kKlNt+liTrHOvrx80=
Subject key identifier: B5:A4:01:51:45:CF:77:79:A8:33:D6:53:67:DB:2D:60:CB:36:49:CF
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 72E1370A4E703AB9154F160D0B29F0C1D3646135
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa
Signing time: Thu 06 Feb 2025 13:45:50 +0000
ROA not before: Thu 06 Feb 2025 13:40:50 +0000
ROA not after: Thu 05 Feb 2026 13:45:50 +0000
asID: 198969
IP address blocks: 2a05:dfc1:1700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e1:37:0a:4e:70:3a:b9:15:4f:16:0d:0b:29:f0:c1:d3:64:61:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Feb 6 13:40:50 2025 GMT
Not After : Feb 5 13:45:50 2026 GMT
Subject: CN=B5A4015145CF7779A833D65367DB2D60CB3649CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:4e:9c:28:38:f1:1a:9b:2a:ca:3f:23:d8:
b0:6d:41:97:12:06:d1:f9:b0:8a:f3:9c:25:51:ed:
27:fe:57:0b:7a:55:e6:94:10:8c:5e:45:1c:ed:c5:
e2:6e:41:58:e0:4e:ac:f0:d8:5d:1b:8f:66:00:f2:
a1:08:9f:92:b0:7a:28:94:a5:f8:a1:90:9a:14:8d:
d6:23:8b:4a:b7:bc:f8:d2:0e:58:8d:ea:87:c2:63:
7b:e8:1b:ec:4a:28:fc:b3:7d:57:5f:bc:97:81:7a:
ff:f8:60:62:76:c9:e2:7c:a0:6f:eb:a0:d5:62:3d:
a1:c2:6a:7f:38:ca:f2:f0:3d:e0:b6:96:33:8f:ea:
ad:89:75:44:9f:21:9e:68:70:4d:ec:9a:9e:87:44:
07:72:6e:80:f1:0e:44:e0:45:98:7d:72:b4:51:a2:
a7:fd:33:10:29:39:51:f7:8f:2f:fd:18:a1:3f:8a:
07:af:3a:47:f7:b1:ca:a6:07:73:71:97:26:7d:1d:
bb:2e:74:53:51:b3:27:d5:37:5d:fc:c8:d7:e9:62:
47:73:85:01:f2:e7:4b:bd:a3:ba:6f:ae:97:78:4d:
48:2b:b8:5c:5e:c6:e4:c6:b1:fc:f0:bb:68:96:51:
0d:8e:53:39:e6:a6:4c:3d:bb:c0:b9:73:1e:da:be:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:01:51:45:CF:77:79:A8:33:D6:53:67:DB:2D:60:CB:36:49:CF
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1700::/40
Signature Algorithm: sha256WithRSAEncryption
0c:d6:85:50:8a:bf:43:84:db:cc:b9:88:25:b3:1c:f4:2e:9b:
a9:c6:95:db:2c:84:04:71:a9:99:d7:20:b9:b4:cd:f3:0e:e4:
a4:3d:5b:4f:62:9e:ac:35:c7:ba:53:9e:aa:45:db:3e:27:0f:
55:47:1c:70:46:dd:1e:86:0f:e7:35:79:25:53:44:5f:22:c5:
8b:d3:58:d5:ee:82:b4:b9:b6:b5:5e:07:c9:3d:a1:ab:b1:e0:
cc:a9:4d:b5:d9:ee:de:35:77:80:6f:da:cb:3b:17:63:d2:f9:
3e:48:19:a1:e9:65:15:c9:37:bf:4d:ae:5f:6d:b6:02:7d:8c:
53:5f:a2:6c:79:28:a8:30:f1:1c:59:0a:27:fc:e1:de:69:08:
20:94:d2:03:58:35:08:80:f4:b5:25:f9:30:e1:23:a7:67:96:
ca:c5:c8:ff:58:5e:ec:a1:d2:d7:c0:f1:32:d0:d2:af:fa:41:
55:56:03:ce:35:95:b8:7d:84:c1:74:51:48:7c:3a:e9:48:1a:
a4:28:68:ab:d8:16:ac:19:bd:f9:68:05:42:90:32:ea:70:04:
b4:cb:b7:0e:7a:09:b9:71:ac:e7:9f:52:07:0a:76:c2:1e:99:
63:dc:06:50:5a:7b:a5:1c:e5:59:ba:7f:67:95:95:56:89:90:
97:25:7f:e6
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUcuE3Ck5wOrkVTxYNCynwwdNkYTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNTAyMDYxMzQwNTBaFw0yNjAyMDUxMzQ1NTBaMDMxMTAvBgNV
BAMTKEI1QTQwMTUxNDVDRjc3NzlBODMzRDY1MzY3REIyRDYwQ0IzNjQ5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdj06cKDjxGpsqyj8j2LBtQZcS
BtH5sIrznCVR7Sf+Vwt6VeaUEIxeRRztxeJuQVjgTqzw2F0bj2YA8qEIn5KweiiU
pfihkJoUjdYji0q3vPjSDliN6ofCY3voG+xKKPyzfVdfvJeBev/4YGJ2yeJ8oG/r
oNViPaHCan84yvLwPeC2ljOP6q2JdUSfIZ5ocE3smp6HRAdyboDxDkTgRZh9crRR
oqf9MxApOVH3jy/9GKE/igevOkf3scqmB3NxlyZ9HbsudFNRsyfVN138yNfpYkdz
hQHy50u9o7pvrpd4TUgruFxexuTGsfzwu2iWUQ2OUznmpkw9u8C5cx7avr+JAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUtaQBUUXPd3moM9ZTZ9stYMs2Sc8wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk4OTY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwRcwDQYJKoZIhvcNAQELBQADggEBAAzW
hVCKv0OE28y5iCWzHPQum6nGldsshARxqZnXILm0zfMO5KQ9W09inqw1x7pTnqpF
2z4nD1VHHHBG3R6GD+c1eSVTRF8ixYvTWNXugrS5trVeB8k9oaux4MypTbXZ7t41
d4Bv2ss7F2PS+T5IGaHpZRXJN79Nrl9ttgJ9jFNfomx5KKgw8RxZCif84d5pCCCU
0gNYNQiA9LUl+TDhI6dnlsrFyP9YXuyh0tfA8TLQ0q/6QVVWA841lbh9hMF0UUh8
OulIGqQoaKvYFqwZvfloBUKQMupwBLTLtw56CblxrOefUgcKdsIemWPcBlBae6Uc
5Vm6f2eVlVaJkJclf+Y=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:03:26 2025 by rpki-client