Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa
File: 3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier: NDV7CCj1h3CwATMIZgQq87DAPVBpgSJ1FM8/WSOjJh0=
Subject key identifier: 37:D6:0D:02:06:0A:37:0D:88:82:9B:53:2B:63:65:4F:FF:BC:FE:1D
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 181E013CD6251049FA9CCC990D5FEDEFEA141A2F
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa
Signing time: Fri 06 Dec 2024 07:45:34 +0000
ROA not before: Fri 06 Dec 2024 07:40:34 +0000
ROA not after: Fri 05 Dec 2025 07:45:34 +0000
asID: 396998
IP address blocks: 162.222.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1e:01:3c:d6:25:10:49:fa:9c:cc:99:0d:5f:ed:ef:ea:14:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Dec 6 07:40:34 2024 GMT
Not After : Dec 5 07:45:34 2025 GMT
Subject: CN=37D60D02060A370D88829B532B63654FFFBCFE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:0a:30:aa:74:88:5a:61:a7:f3:ad:45:b3:
04:5e:16:f0:29:b3:5d:5a:9f:ab:0f:ee:2f:9c:bd:
06:64:fd:f8:c1:37:bd:b5:71:86:d4:23:a8:92:d2:
82:6a:da:f3:3c:a0:a6:e2:71:24:3d:a8:bc:6d:da:
70:e2:45:40:5e:1a:c4:01:1d:16:e5:16:b9:34:aa:
20:78:b4:34:ab:eb:3a:57:fa:8a:60:fe:c5:11:08:
47:73:5d:1a:9c:e7:e3:6e:bb:4a:36:98:46:e4:b6:
39:a3:4c:8d:22:c4:72:05:b8:8d:b8:96:b9:7d:03:
8d:e6:b4:5c:d1:55:4c:4c:62:2d:2d:52:17:1f:e2:
b7:31:ca:7c:25:56:9c:54:96:df:e9:05:6b:5c:fe:
f3:32:dc:93:76:30:57:34:76:31:68:f8:28:60:90:
23:c5:92:47:6f:18:67:cf:6a:20:61:88:41:c9:55:
c9:22:98:02:83:f6:3f:eb:fd:77:6f:4c:cd:c1:30:
41:b1:51:21:8b:73:ab:cc:ae:b6:85:e6:2e:78:c7:
74:73:e2:63:92:28:4b:0d:59:db:38:f0:d1:96:b5:
cb:b9:7d:3a:52:37:2d:02:74:32:5c:86:11:f1:3f:
b5:da:a9:4a:d9:fc:1e:42:8e:d5:58:e5:f1:b5:a1:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D6:0D:02:06:0A:37:0D:88:82:9B:53:2B:63:65:4F:FF:BC:FE:1D
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.222.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7a:5c:cf:1a:25:d6:f5:55:54:bf:f9:14:6f:f2:09:33:b8:
2a:de:f2:3c:c9:c2:fe:c6:16:c0:03:09:a1:b6:a9:45:04:38:
e9:51:75:46:4c:13:17:9b:b7:be:67:5c:28:02:51:55:e1:31:
67:85:38:82:5e:cf:78:24:c4:20:0b:30:2a:ba:4d:9e:0a:ad:
21:04:04:25:12:d6:78:96:a1:2c:fa:3f:71:98:23:53:a6:27:
15:86:29:07:25:2e:89:14:14:49:b5:b3:45:a4:96:3a:40:22:
fb:e5:48:99:68:2c:9a:99:02:76:09:23:0f:3f:a4:8d:a6:7c:
b6:0e:d3:50:1a:b2:37:83:37:b7:14:66:d0:4c:ec:65:27:04:
4d:c5:b6:d3:31:ef:62:f6:b8:97:3b:50:19:bb:8e:94:a8:ce:
a1:bb:33:c2:20:fe:a8:cd:9a:d1:0f:7e:0c:fb:f9:1e:c8:4a:
80:22:b5:34:2b:c2:9b:de:a6:ff:c4:f5:cc:05:1b:25:a7:45:
a5:76:4b:81:6a:c6:75:93:16:90:17:a8:ed:18:ec:4c:9f:fc:
ac:77:c3:9f:d2:97:81:e9:53:e2:2a:85:d3:5e:ea:1a:f6:ff:
df:8b:10:64:81:e8:52:5c:93:c1:02:84:61:86:67:63:f5:bd:
cd:dd:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:33:19 2025 by rpki-client