Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20393234.roa
File: 32332e3136382e3233322e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier: cY1pnGj1bLnbQqRzgq3IX6F1nkAxUGFvg7ieJBfbkLY=
Subject key identifier: D2:E3:F8:F4:BF:7E:F5:B3:8E:97:70:54:55:AB:D8:D7:96:03:07:7E
Certificate issuer: /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial: 60227460B5D3243FBA536A6D0DCF505D4B1CAEBF
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20393234.roa
Signing time: Sun 08 Dec 2024 03:45:35 +0000
ROA not before: Sun 08 Dec 2024 03:40:35 +0000
ROA not after: Sun 07 Dec 2025 03:45:35 +0000
asID: 924
IP address blocks: 23.168.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:22:74:60:b5:d3:24:3f:ba:53:6a:6d:0d:cf:50:5d:4b:1c:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Validity
Not Before: Dec 8 03:40:35 2024 GMT
Not After : Dec 7 03:45:35 2025 GMT
Subject: CN=D2E3F8F4BF7EF5B38E97705455ABD8D79603077E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:27:0a:bc:61:e2:c1:bb:4e:d9:98:ae:03:
96:1a:6d:6d:df:e9:ea:1d:a0:ca:ae:9e:cc:0e:b8:
c8:40:a5:b3:ba:cd:6a:ce:d8:e2:a3:7a:aa:e3:43:
c5:6c:ff:0b:08:8e:9e:62:26:11:6e:8e:40:9b:f2:
7e:bf:0a:af:a2:66:ca:97:47:80:a1:55:74:9e:fb:
d1:cd:fb:00:c8:2f:83:37:05:6e:3f:b3:3d:75:f0:
35:a4:73:67:f5:61:3d:f1:fd:20:12:76:99:07:8f:
02:87:bf:4c:5e:2c:cf:c0:be:7e:97:2a:a8:f2:40:
49:3f:be:d2:ec:3b:f7:31:79:a0:a2:de:a9:6e:bd:
ce:58:53:96:05:d8:6c:64:f2:98:85:8f:b4:2b:46:
b1:c6:24:5b:e4:18:25:ab:82:46:33:24:96:a1:53:
04:10:fb:e7:64:05:86:01:20:ba:38:eb:b0:86:b2:
39:00:2c:12:b2:1e:be:13:15:cc:47:fb:eb:d4:50:
0f:ad:bf:26:53:29:c8:1f:a7:2b:14:90:3f:64:0c:
64:45:a0:ca:ad:c2:83:af:65:6c:e7:fc:ed:70:7e:
8d:83:b9:ef:8e:80:7b:04:97:48:9a:a5:a6:e0:ab:
7b:1b:8f:b3:6a:b9:3b:1b:0e:a5:ab:99:03:f5:c4:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:F8:F4:BF:7E:F5:B3:8E:97:70:54:55:AB:D8:D7:96:03:07:7E
X509v3 Authority Key Identifier:
keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.168.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0b:b2:ba:fe:2a:57:49:54:0e:86:c0:bf:1c:0e:33:63:45:
8f:25:34:db:5f:f0:81:8a:5d:aa:72:c7:0b:0b:d6:87:0d:fc:
46:e8:d4:0b:8e:78:80:3a:84:dd:e6:bd:af:56:ff:c6:df:6a:
d0:08:58:a9:fa:fb:ac:5b:20:d2:30:49:cc:44:3f:e3:21:0a:
75:a6:b2:63:0e:17:e8:b9:cd:18:97:86:b1:73:7f:16:84:93:
a4:45:26:e9:2a:bb:cb:94:b5:55:c4:b4:0f:15:a9:9d:f0:ed:
99:7c:46:4f:0b:52:5b:d9:d8:8c:4e:b0:e8:a1:d4:73:fb:31:
6e:03:7b:82:3d:eb:4c:8a:6f:5f:19:93:24:42:97:da:68:1c:
bf:e5:2d:c4:e7:1c:b3:23:d8:51:83:e2:a0:da:88:18:cc:5a:
2d:6c:13:39:11:e7:ae:d9:62:51:06:69:6f:09:16:65:d4:19:
0d:e9:de:9b:1c:6e:83:7a:ca:5d:38:00:56:a6:60:7d:d1:5a:
24:3a:d6:a3:e1:de:17:e2:e2:a9:ad:2f:3d:83:42:0d:20:e0:
ae:3b:6e:39:25:f5:4b:53:cb:6f:00:be:db:f1:27:4e:4b:ab:
c6:93:f3:96:4f:8b:d5:f8:55:ff:4e:7f:48:c2:2e:e5:33:36:
ea:8b:9a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:07:36 2025 by rpki-client