Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa
File: 323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa (raw, json)
Hash identifier: X991EKazEYp1dkGCBgM3voqxOPf0TRgTz5Bsb1VsbBU=
Subject key identifier: D3:AB:25:7D:BB:7E:9A:18:5B:E4:8D:B1:34:0B:EB:25:81:1C:9D:CC
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 75A160A7F4EC0AF839A9D2D8B48A36E18DAB9FC5
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa
Signing time: Mon 27 Jan 2025 11:45:41 +0000
ROA not before: Mon 27 Jan 2025 11:40:41 +0000
ROA not after: Mon 26 Jan 2026 11:45:41 +0000
asID: 25862
IP address blocks: 2602:fafd:fb8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a1:60:a7:f4:ec:0a:f8:39:a9:d2:d8:b4:8a:36:e1:8d:ab:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: Jan 27 11:40:41 2025 GMT
Not After : Jan 26 11:45:41 2026 GMT
Subject: CN=D3AB257DBB7E9A185BE48DB1340BEB25811C9DCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:db:cf:2f:e7:2c:58:54:60:7d:72:4f:06:
b2:15:60:8d:b9:24:42:5e:15:50:c1:e8:e2:20:cd:
f9:99:24:60:f2:ca:d0:7d:10:74:ce:7a:c8:b5:1b:
64:37:cc:01:2a:32:51:ea:d3:8d:28:25:d6:43:a4:
ca:85:03:7a:08:64:fd:af:4a:ba:83:6d:49:92:ca:
9a:1f:13:cc:3b:42:c5:b0:e3:7f:0e:5d:c8:cf:29:
d9:fc:be:7f:68:dd:77:b7:56:5f:6f:3f:24:a9:e7:
f8:74:de:5e:a6:8e:be:54:6e:01:e7:80:c4:96:9f:
c1:05:a7:4b:4d:d3:13:97:bb:d2:05:0b:52:1e:14:
82:09:30:6f:8c:d5:f5:73:77:89:c2:41:06:be:c7:
b2:a9:36:43:9f:f0:0c:1a:4f:ac:06:6d:20:5f:7d:
8c:18:98:24:aa:1c:53:6e:da:a8:3b:a1:e1:e0:ad:
63:d8:c1:48:50:4f:40:1a:ff:2c:1b:0d:5f:4a:7f:
43:87:45:ec:ef:0a:d9:9a:f8:48:21:45:36:ce:54:
44:10:91:d3:7c:d9:cb:85:f0:19:35:0a:c3:5a:05:
36:a4:a3:39:bb:5b:ef:ea:fd:b3:3b:65:ef:62:66:
a7:fc:1d:15:be:11:1d:97:b3:34:55:1f:76:b5:26:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:25:7D:BB:7E:9A:18:5B:E4:8D:B1:34:0B:EB:25:81:1C:9D:CC
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:fb8::/48
Signature Algorithm: sha256WithRSAEncryption
12:0c:1b:46:83:77:da:8c:a6:28:03:e7:fa:16:7b:6b:2a:17:
4f:de:96:8c:b1:fa:d2:e3:75:90:c6:06:9c:e7:5a:1c:96:a5:
1d:18:48:ff:80:82:d1:ae:57:ba:b7:25:f8:85:e2:e6:39:ed:
b2:bc:77:a8:83:82:bc:36:5e:f5:1d:20:db:55:07:e0:57:fe:
3b:4d:f9:91:fe:ed:e4:c7:20:d7:ed:3e:03:a4:3f:3e:97:12:
40:a4:e4:ba:08:64:70:20:b8:4e:a2:e2:30:97:d3:81:f7:f3:
40:fa:2a:f8:a9:1b:37:ef:ca:3b:ef:bf:84:c2:9a:6b:0c:ec:
be:3a:7f:11:cc:87:5e:98:79:4f:30:b5:20:5e:3d:02:5c:e3:
9d:21:c2:e3:71:07:85:6d:1f:bc:31:51:3b:55:d0:a3:9b:cb:
3c:fa:a9:0c:89:06:a4:33:cb:d4:aa:48:4d:fc:90:22:89:ac:
fe:d2:ed:d9:95:48:44:ed:df:10:a1:62:9f:90:4b:25:ac:74:
74:b4:86:05:3d:c3:2d:bc:fd:30:3f:39:af:d5:f2:4a:49:54:
69:ba:1c:cd:b3:09:da:7d:c1:4a:db:33:f8:d8:c6:27:68:b4:
d7:3a:fa:31:30:cd:14:14:b7:73:35:4b:86:30:97:21:cf:08:
98:a6:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:18:31 2025 by rpki-client