Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f34382d3438203d3e20393234.roa
File: 323630323a666261313a3a2f34382d3438203d3e20393234.roa (raw, json)
Hash identifier: eYK2cmCzYG1jRjqIzqeqdRqQwlDlSb9kY7lRVurL2Kc=
Subject key identifier: 01:D0:B4:42:1C:5C:37:43:26:51:42:B9:E7:FD:40:3E:74:21:A4:D8
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 54DE0279F8188B1580A225D683CF3472E34B6B9A
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f34382d3438203d3e20393234.roa
Signing time: Wed 08 Jan 2025 03:45:39 +0000
ROA not before: Wed 08 Jan 2025 03:40:39 +0000
ROA not after: Wed 07 Jan 2026 03:45:39 +0000
asID: 924
IP address blocks: 2602:fba1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:de:02:79:f8:18:8b:15:80:a2:25:d6:83:cf:34:72:e3:4b:6b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Jan 8 03:40:39 2025 GMT
Not After : Jan 7 03:45:39 2026 GMT
Subject: CN=01D0B4421C5C3743265142B9E7FD403E7421A4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:69:60:3b:6a:81:ec:19:84:72:82:ee:73:
00:cd:eb:69:b7:8a:3d:0e:e8:6d:17:5e:5a:1d:4f:
02:a7:cb:03:66:7b:33:84:ea:d9:26:1d:f0:b4:70:
bc:38:9b:f2:49:4d:ee:c4:11:c2:70:c1:ea:cf:e6:
9d:38:05:7d:af:cb:2c:2a:67:72:79:76:ed:21:6a:
93:44:4f:de:2e:c8:49:28:c0:8b:f6:06:0f:45:36:
9e:54:16:31:74:a8:16:7f:3b:3f:43:f5:cb:9b:9e:
e5:0b:58:6f:1d:d1:33:09:c1:2b:fb:f5:88:5a:48:
86:0a:f3:cd:54:ae:df:c1:e9:24:d6:68:27:a1:b1:
91:51:af:6b:90:d9:67:ff:00:08:8c:85:9c:a8:0a:
cb:0a:c5:7b:f9:83:e3:fd:78:a7:51:f0:04:75:af:
07:ae:7d:ce:f8:29:7a:e7:7e:ab:92:c6:31:09:65:
b7:02:35:c8:44:d7:9e:8c:1a:70:b6:75:08:de:b4:
b6:59:47:8b:0c:79:bf:89:30:97:92:9f:1b:76:05:
19:7b:4d:54:4d:12:48:1a:25:00:ec:1b:ed:9a:bc:
5c:6b:f1:6f:6a:e9:3d:44:58:ff:7a:18:db:75:74:
ff:16:95:70:b5:22:64:c9:f4:b3:f9:0f:71:df:be:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:B4:42:1C:5C:37:43:26:51:42:B9:E7:FD:40:3E:74:21:A4:D8
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f34382d3438203d3e20393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fba1::/48
Signature Algorithm: sha256WithRSAEncryption
3d:89:23:e8:ad:2d:df:88:1d:ba:96:97:51:4b:44:37:d3:86:
0b:3b:b8:52:94:de:70:df:86:0c:1d:d7:39:98:f9:8e:b6:e2:
10:ea:dd:43:3c:68:01:11:b8:5d:ec:0a:98:a7:8d:5e:3c:c3:
14:14:b5:11:15:6d:14:60:bb:54:3b:f2:93:7f:31:2f:b0:4b:
6b:f8:65:f8:e0:1c:1e:d3:1f:89:f0:c8:0e:36:77:4d:21:9f:
97:e0:44:bd:2d:1b:78:3b:43:b1:bc:5b:6c:e8:d9:95:3c:db:
bd:b9:05:a6:93:89:41:49:da:78:ec:de:6c:b2:be:d3:86:3c:
5c:13:a5:82:79:21:dd:fb:19:cb:84:a0:d5:6b:44:16:18:95:
02:60:98:40:4d:2d:95:07:02:9d:cc:e6:42:31:cb:2f:50:cb:
9b:d2:0f:85:e9:fd:be:67:93:e2:75:34:fb:81:6f:54:b0:81:
09:65:39:20:3f:1b:a5:5d:da:c0:ef:34:14:34:e2:17:05:51:
61:bb:56:3c:f3:eb:f0:00:f7:a3:31:60:88:22:10:de:ab:0f:
aa:d4:9b:20:33:6e:61:fc:31:a9:e6:6b:6d:11:0c:56:e1:c5:
8d:fb:be:dc:55:f3:94:50:d1:48:bb:ae:af:35:14:ea:6c:3e:
9b:e2:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:54:17 2025 by rpki-client