Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa
File: 323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa (raw, json)
Hash identifier: svoUA40v3ZcCswz9PqRdb20ZfiA+yVOxeM/B2RUj+ok=
Subject key identifier: 33:5C:B6:83:1E:4F:B8:80:F4:8F:20:00:97:27:39:6F:D0:AF:00:EF
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 763830942D167A682CE861756EBA80BD764FD737
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa
Signing time: Wed 26 Feb 2025 12:45:54 +0000
ROA not before: Wed 26 Feb 2025 12:40:54 +0000
ROA not after: Wed 25 Feb 2026 12:45:54 +0000
asID: 924
IP address blocks: 2602:fba1:e00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:38:30:94:2d:16:7a:68:2c:e8:61:75:6e:ba:80:bd:76:4f:d7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Feb 26 12:40:54 2025 GMT
Not After : Feb 25 12:45:54 2026 GMT
Subject: CN=335CB6831E4FB880F48F20009727396FD0AF00EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5e:30:a3:c6:50:f3:7d:d5:61:5f:25:66:72:
6d:5c:63:b6:b6:ed:13:b4:6a:66:08:c3:82:2f:ed:
7f:02:dd:87:b7:6e:c2:ed:3e:c9:19:46:c5:5b:1f:
2a:ee:b0:aa:74:bd:34:04:22:9e:61:2f:21:c0:9c:
57:70:37:d4:1b:b2:27:2c:9c:1f:c3:52:70:7e:c8:
3f:32:17:13:7f:99:8f:2e:c2:49:8f:09:c3:47:a2:
f2:79:fc:8e:d9:d0:11:16:90:5d:f4:d8:a8:20:73:
78:92:f1:fc:e5:ff:6c:d3:d8:c8:98:c7:e4:7b:40:
f9:17:44:88:1d:0f:9d:7c:4b:ea:01:cd:e3:31:3c:
4f:44:12:ec:eb:63:20:b1:7e:9b:e0:49:10:7f:e9:
7d:2f:b5:91:e4:a8:96:7d:45:70:42:0c:2f:ac:41:
b6:b8:55:41:a4:37:82:2d:b2:9b:2d:23:d3:e0:2e:
07:93:17:c7:0f:86:c2:ae:9b:96:7f:f2:a9:66:69:
85:9b:0c:de:42:7e:44:b2:3b:91:87:57:9a:a8:f3:
f7:b5:d5:88:6e:01:d6:77:18:2d:1c:eb:4b:f7:7b:
b3:de:e8:1d:ce:43:42:42:e0:57:26:b9:77:2a:68:
73:7e:34:19:1d:e4:bb:1b:4e:ce:ad:ce:cd:41:12:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:B6:83:1E:4F:B8:80:F4:8F:20:00:97:27:39:6F:D0:AF:00:EF
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fba1:e00::/40
Signature Algorithm: sha256WithRSAEncryption
79:9a:84:5b:42:fc:7e:08:74:b8:42:da:70:73:69:ff:d2:86:
e2:4c:57:f1:de:cc:5d:a9:6e:c3:bf:32:c2:9d:34:02:ac:5e:
fd:f4:b5:ef:d1:7f:b9:a8:c0:99:66:a8:ad:71:a4:25:07:5e:
b4:c8:4f:de:07:00:09:e3:8e:bf:05:27:69:67:43:f6:fd:84:
5b:7f:57:a9:98:bb:5f:be:2e:f1:b7:d8:63:86:36:72:66:ac:
30:f0:97:ea:63:1d:cc:b8:78:a1:13:66:d9:40:4e:e4:ac:7e:
b9:5d:3e:85:38:58:f4:df:89:1b:0f:9b:0c:29:df:67:14:cd:
f5:26:d7:3e:77:e5:90:91:96:f5:64:c9:ae:e1:b6:2a:72:53:
25:9a:02:93:ed:32:aa:5c:2c:50:33:d6:6e:97:c1:80:af:4c:
51:66:ee:4f:e3:9b:b0:16:5a:5c:dd:fe:f5:ad:31:af:42:b9:
2b:41:db:73:e3:3b:57:61:c0:ec:cf:99:47:42:08:8f:91:fa:
24:6b:97:c9:84:76:c3:24:83:84:2c:76:36:9e:2c:fc:f0:43:
50:8e:07:21:a4:34:fd:7d:11:aa:8f:5e:4f:d2:17:8e:ef:29:
3b:a6:4f:a5:1f:7d:dc:21:98:ae:70:f8:ca:f1:2e:7e:22:56:
7c:15:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:15:00 2025 by rpki-client