Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44570.roa
File: AS44570.roa (raw, json)
Hash identifier: XlwDzulfucJWpSbpQUOrNs4/Mk/gyIYY5xBMvkWNnVo=
Subject key identifier: 46:A4:B1:F3:40:AC:85:BA:53:4A:EC:AB:E9:5D:EB:E6:50:DF:13:E3
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 6710C15FB67092E551CE863D08C37661822F379B
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44570.roa
Signing time: Wed 18 Dec 2024 10:54:12 +0000
ROA not before: Wed 18 Dec 2024 10:49:12 +0000
ROA not after: Wed 17 Dec 2025 10:54:12 +0000
asID: 44570
IP address blocks: 2a06:9f80::/32 maxlen: 48
2a06:9f82::/32 maxlen: 32
2a06:9f83::/32 maxlen: 32
2a06:9f84::/32 maxlen: 32
2a06:9f85::/32 maxlen: 32
2a06:9f86::/32 maxlen: 32
2a06:9f87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:10:c1:5f:b6:70:92:e5:51:ce:86:3d:08:c3:76:61:82:2f:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Dec 18 10:49:12 2024 GMT
Not After : Dec 17 10:54:12 2025 GMT
Subject: CN=46A4B1F340AC85BA534AECABE95DEBE650DF13E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:1a:e6:59:b9:78:e5:fc:c4:51:44:64:e0:
66:33:57:4a:7c:79:ed:12:be:cf:71:56:c7:06:5e:
4b:a9:bf:be:73:26:aa:d4:1e:3b:8e:aa:e1:22:17:
ce:cb:75:e4:2b:d5:bf:14:c3:76:87:25:2a:2d:e7:
81:a2:e8:bf:12:43:49:e3:e5:2c:87:db:98:a4:92:
ae:c8:b2:21:6e:cd:61:78:ad:4c:81:27:f1:b9:2f:
9e:70:bb:33:e0:6d:b5:cc:03:c9:51:72:82:e0:1e:
10:fe:55:ab:a4:02:1d:c1:5c:39:7a:c9:61:4f:53:
fb:00:47:e0:05:13:65:23:eb:a6:ca:6a:ad:49:66:
e4:4b:4f:63:65:38:e6:c8:8b:cd:53:5a:ac:c0:7f:
aa:4d:e6:e4:e2:64:29:4d:31:37:da:49:ed:15:d8:
d2:7c:8d:01:f3:dc:06:d0:f7:c4:91:bb:e1:59:1a:
60:8a:b0:de:b5:02:87:e2:80:09:3e:c7:7b:65:ef:
ec:d2:4c:c5:ca:50:a6:36:00:73:4c:1f:f0:09:31:
49:b2:5a:20:b3:8d:0d:41:85:4b:86:67:82:a0:22:
d5:eb:b4:7c:80:38:fe:bc:51:ca:79:0b:01:67:27:
fe:e7:3b:06:41:87:6f:10:db:05:cd:7e:de:19:2c:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A4:B1:F3:40:AC:85:BA:53:4A:EC:AB:E9:5D:EB:E6:50:DF:13:E3
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44570.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f80::/32
2a06:9f82::-2a06:9f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
30:08:09:56:f2:e1:7e:9b:fb:bf:ed:bc:e8:bf:a8:e7:ed:e0:
13:25:42:af:ed:45:4f:4a:1d:3a:49:9e:d3:4f:4c:7f:60:b7:
e5:ed:e7:f7:92:44:92:bb:c6:13:e5:18:fe:ff:45:19:91:46:
b0:60:bc:48:05:e5:99:cd:81:ab:d0:b9:2d:0d:8e:74:97:c8:
2d:93:0c:f6:31:77:33:77:e0:64:bd:ce:b7:5f:cc:6f:bf:25:
9d:6f:c5:98:fe:d2:c2:e0:ba:39:9b:6a:6b:1d:bb:1e:74:05:
44:fd:84:9e:fa:f8:74:d5:31:83:b4:3e:24:5a:dd:b4:c2:56:
5c:0d:33:6e:92:f6:bc:45:95:3c:d5:6b:6d:a4:18:ae:ef:e9:
d1:af:01:96:99:0f:52:ca:f4:4a:c3:45:bd:5c:74:5d:51:20:
a7:d5:da:f8:0b:60:c3:1f:28:cd:4c:73:60:46:87:17:05:c4:
c4:87:62:6f:9e:6e:ea:96:dc:53:d6:9a:57:d3:5a:a7:73:b9:
b5:5e:66:fe:ab:c2:60:b3:76:5b:88:30:5c:a4:72:03:93:92:
87:db:41:a3:b6:a6:98:0f:3c:33:8e:6a:d5:45:ee:f3:85:95:
dd:c2:3e:17:5b:6f:ac:9d:8d:cc:6e:e3:52:bd:ee:ae:cd:05:
a6:8f:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:34 2025 by rpki-client