Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3730303a3a2f34302d3438203d3e20323035363633.roa
File: 323630323a666261313a3730303a3a2f34302d3438203d3e20323035363633.roa (raw, json)
Hash identifier: fy8DevHiuSmbJAkP5jW8MzUsG5UK/ocLHUz5hhTu9tk=
Subject key identifier: AB:36:C8:D6:AA:99:5A:5C:4F:84:F1:C4:98:41:D5:54:06:CE:14:D5
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 3729C2FC7D619D4F42DA96D0460B400BACF040CE
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3730303a3a2f34302d3438203d3e20323035363633.roa
Signing time: Thu 09 Jan 2025 08:10:05 +0000
ROA not before: Thu 09 Jan 2025 08:05:05 +0000
ROA not after: Thu 08 Jan 2026 08:10:05 +0000
asID: 205663
IP address blocks: 2602:fba1:700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:29:c2:fc:7d:61:9d:4f:42:da:96:d0:46:0b:40:0b:ac:f0:40:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Jan 9 08:05:05 2025 GMT
Not After : Jan 8 08:10:05 2026 GMT
Subject: CN=AB36C8D6AA995A5C4F84F1C49841D55406CE14D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:d9:6b:fd:17:0e:c9:38:c8:71:87:cf:89:
84:db:8a:1b:3c:6f:0a:95:c9:c0:b7:2e:11:ec:22:
25:d2:6d:bc:dc:05:9f:3c:0b:de:4d:47:f1:2d:e8:
07:9d:28:2e:9b:70:db:26:c7:05:9d:ec:4e:14:88:
2d:b1:15:a8:a7:fa:51:15:2c:01:20:13:c7:64:8e:
af:46:8c:34:bf:7f:28:f4:32:6b:eb:27:d5:f1:94:
e8:87:f2:56:29:a7:94:4e:e2:e1:b5:48:53:40:55:
2d:7f:03:00:48:25:bf:87:bf:6c:c1:df:66:85:1a:
87:98:17:3f:dd:2b:dc:47:a8:c6:4e:fd:cf:f9:f1:
2d:cb:c3:96:1f:2c:60:d0:52:2a:30:0a:de:be:e8:
77:44:77:bf:89:d6:2c:6c:94:03:bf:29:73:13:af:
99:23:cb:ed:5b:78:60:d2:72:f3:a1:66:75:30:f3:
e0:f6:36:12:9f:3f:7c:2a:60:2e:74:7a:92:e9:c0:
06:0e:48:a9:dd:d0:69:cc:99:7a:72:97:17:15:98:
c8:d2:47:8a:00:97:b8:16:54:08:32:09:1b:a5:ef:
15:68:2b:5c:5f:18:0d:2e:80:1f:f5:ac:e1:a5:f6:
5f:1e:f7:87:cb:c0:39:30:f5:37:f5:70:a0:db:27:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:C8:D6:AA:99:5A:5C:4F:84:F1:C4:98:41:D5:54:06:CE:14:D5
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3730303a3a2f34302d3438203d3e20323035363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fba1:700::/40
Signature Algorithm: sha256WithRSAEncryption
d2:3a:17:92:ba:eb:27:7a:63:ce:92:a9:6b:34:b0:c1:ec:10:
07:7b:c4:43:70:43:38:c1:35:29:14:35:13:7c:bc:0d:19:4a:
47:54:5d:cb:51:f8:a0:7f:ba:83:9a:84:c4:9c:3f:c4:00:94:
a4:91:b3:c6:e9:2a:19:49:75:9f:36:2e:d6:8b:bc:af:ac:66:
b3:d7:b9:fd:f1:8c:8c:62:be:8a:b2:db:20:c5:76:fd:8f:74:
ff:24:a7:60:b4:b1:cc:ab:4e:72:65:00:6e:68:24:c2:bd:1a:
d3:2e:e4:e5:a3:a1:fb:51:b7:a3:c6:73:fd:aa:c0:68:dd:33:
52:d8:2d:4b:ce:14:ea:1e:29:f5:9b:12:8e:e8:21:f9:93:8a:
0b:95:da:ec:f1:50:02:81:49:b8:bb:90:44:55:e6:9e:2a:35:
f1:92:4f:f9:2b:b1:67:5a:80:ff:7d:72:76:da:86:46:2c:a8:
2c:d9:bf:f4:c7:13:7a:ff:71:44:3e:26:a4:71:49:e8:23:fc:
a1:14:e8:4c:7e:65:de:f2:b8:34:08:db:a7:a4:a9:4c:65:e2:
50:72:61:29:4e:db:76:79:18:20:05:e7:02:a8:83:5d:6b:1b:
92:07:43:f8:94:e6:c2:ea:91:45:e6:85:0e:94:1e:3f:74:67:
f6:eb:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:52 2025 by rpki-client