Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
File: 3231362e3134362e32342e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier: YT55975QLI8Xq/xWkXmYNy8L/OJBcIO8RO644FyEYFc=
Subject key identifier: F3:B6:26:C9:61:60:2C:8C:78:4E:60:01:FF:75:C9:BD:16:77:19:60
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 3628F144B700479B30A10A7378A03724B9E9431F
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
Signing time: Wed 05 Jun 2024 23:32:20 +0000
ROA not before: Wed 05 Jun 2024 23:27:20 +0000
ROA not after: Wed 04 Jun 2025 23:32:20 +0000
asID: 48925
IP address blocks: 216.146.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:28:f1:44:b7:00:47:9b:30:a1:0a:73:78:a0:37:24:b9:e9:43:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Jun 5 23:27:20 2024 GMT
Not After : Jun 4 23:32:20 2025 GMT
Subject: CN=F3B626C961602C8C784E6001FF75C9BD16771960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:12:01:d5:58:66:b1:11:e6:93:2e:1e:f7:
49:97:1b:5b:14:57:f3:ff:d3:44:5e:58:8d:3a:4c:
ff:6a:9f:d0:b9:a4:57:a6:39:5c:ca:90:ea:e2:d2:
e4:64:1c:bd:ce:ab:98:36:14:5a:9b:03:fd:4f:45:
d4:7e:82:e0:93:21:24:1c:a3:95:8e:94:66:0f:e0:
7f:39:34:7c:02:44:f7:53:88:e8:2f:4b:ab:0d:fa:
ed:27:f6:be:72:e0:ed:9b:83:7f:07:d6:90:28:cb:
5b:93:c6:8d:8b:1b:09:f5:10:79:07:eb:7f:c7:b1:
e1:24:2e:c7:63:f5:2f:e4:97:56:0c:30:e7:34:3d:
97:a5:77:e7:0f:1d:cc:34:39:ea:40:90:61:64:34:
8d:34:30:98:60:58:d4:a9:0b:f0:0f:3f:f4:b7:7f:
d4:c0:70:ae:ca:e0:15:b8:3e:67:32:e2:5c:3e:81:
11:9f:5e:16:d6:d1:15:fa:84:47:e5:a5:4f:03:ec:
cf:9f:69:bd:e0:03:11:04:34:c4:a9:99:01:9f:06:
ce:7b:7a:2f:34:f0:e6:7a:0f:b9:26:47:b7:0f:d4:
f1:60:8d:0c:de:06:97:f6:73:16:84:a6:d9:00:0e:
4f:2e:04:88:19:57:14:d0:54:2c:cd:3e:74:ee:5a:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:26:C9:61:60:2C:8C:78:4E:60:01:FF:75:C9:BD:16:77:19:60
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6c:1a:e7:14:f4:6d:50:a9:cd:b7:fc:f3:af:e7:ec:df:c5:
f0:f7:c0:99:2e:3d:be:3c:7c:7d:fe:ee:73:63:22:ef:ea:b5:
bc:5c:d4:76:af:b6:0e:d3:8f:9c:d9:8e:c2:ee:b9:d2:57:e3:
4c:c5:f6:b4:06:27:d5:33:78:8c:ce:47:6b:22:b7:8c:3f:ce:
e4:ec:66:70:28:a0:0c:09:0f:ab:7b:e0:87:c2:9b:05:be:7e:
75:d9:e2:ea:ab:36:11:88:38:d9:5a:7f:28:7e:62:04:0b:cc:
51:d2:bb:92:7c:9e:f3:89:31:e3:a2:e9:67:f1:9e:aa:95:6f:
07:70:b6:8e:f1:f5:a6:62:bf:64:09:6b:3d:c0:d5:1f:fc:9a:
3c:e6:da:d3:aa:d7:48:6d:68:4b:8b:22:c4:3a:68:e6:79:2c:
02:85:82:53:db:48:96:13:0d:d3:30:20:a3:a1:92:3e:38:37:
2e:56:6b:16:22:22:05:dd:08:a8:47:01:e0:a8:8b:c8:14:32:
5f:26:32:6a:35:ce:e5:4e:89:6f:e4:99:a2:dc:11:a8:a7:10:
11:28:7c:be:a7:59:b4:22:c5:6e:5e:0e:58:80:16:30:56:5a:
60:86:a1:59:81:da:cb:bd:f1:08:a3:e7:df:61:cf:04:6c:5e:
de:bc:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:00 2025 by rpki-client