Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa
File: AS209542.roa (raw, json)
Hash identifier: zpjjUtS5nPbN7YaQX5wuhWXnG27O2dU/fOAgCp+PvdI=
Subject key identifier: 01:CC:55:FB:31:B7:D5:6B:68:23:1F:9A:BB:58:17:2B:F2:01:1F:47
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 384B5CEC8C3EF3ECDBEF09FD54C03B6C363BADE2
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa
Signing time: Wed 05 Feb 2025 10:45:50 +0000
ROA not before: Wed 05 Feb 2025 10:40:50 +0000
ROA not after: Wed 04 Feb 2026 10:45:50 +0000
asID: 209542
IP address blocks: 2a05:dfc1:2700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:4b:5c:ec:8c:3e:f3:ec:db:ef:09:fd:54:c0:3b:6c:36:3b:ad:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Feb 5 10:40:50 2025 GMT
Not After : Feb 4 10:45:50 2026 GMT
Subject: CN=01CC55FB31B7D56B68231F9ABB58172BF2011F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:6d:b9:63:e8:63:14:c3:52:59:80:96:39:
0a:ad:23:3a:0e:67:d4:68:19:d0:3c:41:c7:cb:7e:
d6:aa:72:06:5f:95:f1:a8:26:f5:ba:4e:9a:17:07:
ab:e1:3b:ca:9b:f4:2c:23:3c:c6:e1:3e:b6:1c:39:
65:bf:40:b7:74:74:cf:b6:e6:5a:9c:37:f6:34:a1:
a2:95:bd:a2:0e:53:d0:9a:c0:67:04:3c:ab:0d:e6:
6d:a9:c6:05:34:cc:6f:d2:78:75:8d:f8:7b:41:01:
0d:8d:29:ac:43:9f:a3:77:32:cb:0c:4a:1e:e9:6a:
0f:a0:df:b6:2a:20:7c:3f:e1:0a:68:d2:4d:77:a9:
e7:84:01:05:0a:c8:e4:be:84:5c:6e:cd:d6:2d:94:
ae:3a:ce:65:69:e3:ce:ef:3c:a1:66:8b:bf:8d:9e:
28:b8:8f:cd:66:94:7a:b4:17:c8:1a:8c:96:b4:65:
a2:30:86:50:65:b4:45:49:17:28:f9:a8:fc:63:0b:
d1:99:f8:7b:6b:1f:df:25:fa:f3:06:40:ed:ab:5b:
df:76:76:ad:36:74:db:c1:c4:5e:8f:26:e8:5a:5d:
05:2b:3e:3c:54:bd:27:4d:d0:bb:7c:a9:cb:2f:41:
bb:e7:c6:0f:98:d4:cb:76:16:52:eb:62:e0:26:27:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CC:55:FB:31:B7:D5:6B:68:23:1F:9A:BB:58:17:2B:F2:01:1F:47
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:2700::/40
Signature Algorithm: sha256WithRSAEncryption
0a:04:d6:39:c8:8a:8a:a6:66:a9:96:13:04:e1:13:17:38:97:
3b:dd:5a:68:78:52:62:a8:bb:c3:8a:c4:6b:ea:24:bc:77:fd:
83:75:4b:83:a8:04:9c:c9:bf:1b:7e:ae:ac:93:58:ca:57:5f:
ad:96:48:f5:39:83:d3:f6:fc:e1:07:c0:f5:fd:c4:c2:4d:e7:
40:8e:66:01:ef:a1:d1:c8:ad:da:ea:1b:33:75:9b:e1:bc:02:
bc:01:d1:9b:86:72:2c:5a:aa:af:55:c3:10:99:7a:93:71:38:
95:ce:c4:16:27:a9:ba:34:59:53:b0:4c:19:f8:3a:3c:31:df:
02:59:7c:cb:34:9d:64:45:9d:4a:47:b3:80:ba:7d:b7:29:cd:
33:89:c5:98:b9:1b:37:05:7b:49:00:99:39:9a:62:76:1f:3c:
13:3c:ce:32:db:2f:ff:ad:2c:b5:4a:b2:7b:61:15:8b:61:4a:
08:6c:1c:5b:7d:66:9f:29:72:ce:16:c5:59:97:00:52:8e:4c:
f2:18:1c:7a:98:16:5a:02:66:3d:46:a7:c4:7f:02:4e:26:83:
6d:c0:d9:fa:70:bd:6f:71:c2:8e:06:ef:a4:02:a8:24:10:3e:
da:f5:2f:83:3b:ab:b7:32:2b:7b:cd:d9:ed:88:b7:b2:f1:5f:
73:0f:c8:c0
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUOEtc7Iw+8+zb7wn9VMA7bDY7reIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNTAyMDUxMDQwNTBaFw0yNjAyMDQxMDQ1NTBaMDMxMTAvBgNV
BAMTKDAxQ0M1NUZCMzFCN0Q1NkI2ODIzMUY5QUJCNTgxNzJCRjIwMTFGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDp225Y+hjFMNSWYCWOQqtIzoO
Z9RoGdA8QcfLftaqcgZflfGoJvW6TpoXB6vhO8qb9CwjPMbhPrYcOWW/QLd0dM+2
5lqcN/Y0oaKVvaIOU9CawGcEPKsN5m2pxgU0zG/SeHWN+HtBAQ2NKaxDn6N3MssM
Sh7pag+g37YqIHw/4Qpo0k13qeeEAQUKyOS+hFxuzdYtlK46zmVp487vPKFmi7+N
nii4j81mlHq0F8gajJa0ZaIwhlBltEVJFyj5qPxjC9GZ+HtrH98l+vMGQO2rW992
dq02dNvBxF6PJuhaXQUrPjxUvSdN0Lt8qcsvQbvnxg+Y1Mt2FlLrYuAmJ0aJAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUAcxV+zG31WtoIx+au1gXK/IBH0cwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjA5NTQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwScwDQYJKoZIhvcNAQELBQADggEBAAoE
1jnIioqmZqmWEwThExc4lzvdWmh4UmKou8OKxGvqJLx3/YN1S4OoBJzJvxt+rqyT
WMpXX62WSPU5g9P2/OEHwPX9xMJN50COZgHvodHIrdrqGzN1m+G8ArwB0ZuGcixa
qq9VwxCZepNxOJXOxBYnqbo0WVOwTBn4Ojwx3wJZfMs0nWRFnUpHs4C6fbcpzTOJ
xZi5GzcFe0kAmTmaYnYfPBM8zjLbL/+tLLVKsnthFYthSghsHFt9Zp8pcs4WxVmX
AFKOTPIYHHqYFloCZj1Gp8R/Ak4mg23A2fpwvW9xwo4G76QCqCQQPtr1L4M7q7cy
K3vN2e2It7LxX3MPyMA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:03:26 2025 by rpki-client