Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200853.roa
File: AS200853.roa (raw, json)
Hash identifier: ZVfxVcmAD2Kld9E21LZJVWmm4I0g7kIY4t81rzHuS/4=
Subject key identifier: 9A:CC:7C:5F:94:7F:8B:BB:8C:24:68:5B:F4:75:32:7A:92:74:88:5B
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 6A8808A0EE185F8663F95D7E1D494647DC4FB3F5
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200853.roa
Signing time: Sun 06 Oct 2024 04:45:07 +0000
ROA not before: Sun 06 Oct 2024 04:40:07 +0000
ROA not after: Sun 05 Oct 2025 04:45:07 +0000
asID: 200853
IP address blocks: 2a0a:6040:e00::/40 maxlen: 48
2a0a:6040:c600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:88:08:a0:ee:18:5f:86:63:f9:5d:7e:1d:49:46:47:dc:4f:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Oct 6 04:40:07 2024 GMT
Not After : Oct 5 04:45:07 2025 GMT
Subject: CN=9ACC7C5F947F8BBB8C24685BF475327A9274885B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:ff:34:1a:53:1d:4b:50:cb:d9:19:a9:5b:
de:fc:ca:79:50:82:a4:1a:f2:3f:78:eb:2f:ff:66:
11:54:97:7f:83:53:82:1f:7c:7d:ee:be:f2:7b:02:
fc:7d:2d:8d:4d:c1:c8:34:c6:55:5f:69:db:61:4a:
f5:43:fc:15:11:7f:58:0f:2c:6d:44:69:af:c6:af:
28:28:92:58:f6:81:3f:84:56:63:fd:ae:de:cd:ef:
a8:67:b1:ae:32:d9:f4:1c:20:bc:5b:c7:ea:b5:56:
99:e3:0d:7e:6b:74:f3:40:30:e9:12:5f:48:f5:82:
4b:f7:a4:53:97:78:61:74:7b:31:5c:b5:dd:4b:dc:
d6:5d:e2:ce:e2:f6:05:b4:e4:f8:f3:d5:69:1d:59:
7b:82:e9:d1:45:05:a7:b5:65:0e:21:58:b1:aa:fb:
68:db:14:f3:c9:c0:d4:f4:ca:70:27:2e:0a:d5:b5:
fc:10:9e:00:d8:e1:ba:a5:79:cf:6f:bb:5e:af:bc:
bf:2e:b6:68:d1:f5:35:ce:ca:b3:0f:04:8d:a9:ff:
0c:74:50:23:f0:52:b2:69:a0:cf:c8:c3:d3:b8:92:
35:30:e6:c7:27:86:83:7a:e4:17:2b:96:99:63:a7:
82:11:d4:ed:47:74:8b:7a:97:44:c6:84:b1:ef:7c:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CC:7C:5F:94:7F:8B:BB:8C:24:68:5B:F4:75:32:7A:92:74:88:5B
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:e00::/40
2a0a:6040:c600::/40
Signature Algorithm: sha256WithRSAEncryption
74:5e:fa:27:38:72:d6:95:61:5a:87:a0:cb:f1:5c:c8:33:3b:
de:bd:14:32:64:09:d6:80:ab:8a:bf:c6:83:97:88:4c:0d:9a:
63:be:cb:e9:ac:3a:4a:be:c6:ca:da:9c:2c:48:ff:33:b9:17:
f1:06:73:93:eb:fa:8d:a2:e6:d1:80:2f:0e:52:29:7a:27:85:
97:59:44:1f:f0:8c:e1:02:6d:0e:c1:d6:a4:4f:d4:c5:c5:46:
f7:24:be:90:08:ec:db:f2:27:c7:33:eb:60:ba:8a:e1:2a:81:
14:4e:49:62:bb:f1:3a:cf:69:c9:1d:48:52:c9:cd:10:f0:e4:
13:30:1f:b0:cd:c5:e9:e7:6a:82:10:a0:bd:25:f6:b8:a9:6a:
03:fb:06:43:70:75:f8:ad:62:1a:e2:5d:66:56:df:b2:a6:ab:
8f:49:6a:ff:6e:80:aa:ec:d3:52:9d:84:31:d1:b1:25:a1:5b:
a3:f5:d3:84:4e:e6:f8:22:c5:5e:34:0e:d8:46:84:a9:75:57:
27:b1:57:c3:01:68:1d:6d:64:92:24:df:f2:e0:a6:aa:52:e9:
03:34:ed:e2:f2:f3:4d:88:78:f6:8f:51:28:cb:8e:b5:48:e8:
50:e3:11:ad:df:21:ab:3f:54:cc:83:ea:16:32:ba:af:e5:dd:
d8:b2:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:59:59 2025 by rpki-client