Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa
File: 323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier: ZiRunc+lEo5gurmGdfOAZcCaT4IxAvZ+jyG6b5vWZUo=
Subject key identifier: E4:59:8F:31:6B:DD:8F:FC:17:9F:41:24:95:77:B5:89:D5:70:96:B4
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 7A5E22BFD48EAE31B7BCDA8C2FA09C400A0F109A
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa
Signing time: Wed 15 May 2024 14:59:37 +0000
ROA not before: Wed 15 May 2024 14:54:37 +0000
ROA not after: Wed 14 May 2025 14:59:37 +0000
asID: 23470
IP address blocks: 2602:fafd:fe0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5e:22:bf:d4:8e:ae:31:b7:bc:da:8c:2f:a0:9c:40:0a:0f:10:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: May 15 14:54:37 2024 GMT
Not After : May 14 14:59:37 2025 GMT
Subject: CN=E4598F316BDD8FFC179F41249577B589D57096B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:8a:d4:b5:06:6f:71:46:4d:61:d6:34:a7:
59:24:30:51:f0:bf:44:5f:df:2e:43:7c:16:a7:79:
f3:da:7b:4f:fa:65:4e:66:e0:70:82:f8:01:c8:22:
39:91:e6:20:e8:06:cc:16:c2:b7:09:c3:e3:16:86:
4f:9f:5c:42:ab:b1:90:df:37:cb:78:14:f2:4d:36:
ef:e4:90:1d:7e:71:42:c3:22:a0:64:7b:6a:d7:a1:
9c:03:a4:d1:24:c9:dc:a5:09:33:c5:bd:13:51:ac:
19:aa:1f:50:d1:92:f9:3f:02:7b:8d:67:53:d3:52:
36:88:55:32:fb:d9:77:58:04:41:56:de:2b:75:30:
d8:9a:f5:73:7d:2c:e0:53:2f:ac:e4:36:14:f6:ba:
2f:dc:ba:9d:40:78:5c:51:4e:28:6c:29:31:a6:56:
c7:9a:e9:64:0d:fe:bf:08:46:d7:66:5d:0f:e1:52:
ee:69:90:48:18:e8:f2:42:9f:9c:08:b0:a2:ff:39:
1a:c1:36:e9:a3:37:c1:39:9e:98:a1:8b:82:3c:09:
03:14:8f:6f:48:91:02:f1:ae:66:58:40:45:2a:93:
26:94:f9:65:2c:54:6a:23:98:f6:da:8d:22:73:3d:
8f:06:a3:ed:8c:8f:54:c2:98:85:bc:be:dd:ff:5f:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:59:8F:31:6B:DD:8F:FC:17:9F:41:24:95:77:B5:89:D5:70:96:B4
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:fe0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:37:db:1f:7a:d6:d8:a2:65:78:12:2b:ac:30:d4:8f:9d:8c:
97:b9:ac:43:69:ab:30:7a:93:31:c2:13:32:57:e1:d9:9e:6f:
ec:3f:fb:5f:9e:8e:45:e8:db:1d:12:87:30:42:67:1e:4f:55:
0f:8d:c5:ef:0a:28:ba:bb:06:04:d2:ac:8d:9d:52:cc:47:37:
5b:7f:e5:8c:a5:68:aa:75:b2:41:94:0d:fe:05:4a:18:3b:8a:
b1:66:98:20:2a:91:a9:81:23:eb:52:10:9a:13:60:bd:1e:86:
3c:ee:b2:fb:d0:c4:0b:d7:3a:8f:74:ac:a8:08:ee:eb:00:ac:
6a:01:fc:d0:5f:92:8a:09:39:76:33:80:08:23:31:1b:69:be:
4a:95:74:8e:ca:5a:88:8f:22:72:22:8e:93:c8:cc:d9:50:16:
95:16:77:ba:82:0f:29:08:e7:ee:fe:1d:04:34:4f:e2:61:2e:
b8:39:09:d5:fb:89:5a:11:fd:86:cf:26:83:48:b5:d6:4d:af:
e9:e5:a0:dd:56:9c:25:bf:aa:74:68:31:74:f0:27:1c:14:e9:
3b:8b:60:21:0a:0c:75:ea:32:3e:3c:02:d0:ab:de:fd:ff:65:
6c:23:78:46:ff:74:bd:80:4a:96:6d:d0:23:ff:89:56:ad:98:
af:24:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:17:31 2025 by rpki-client