Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20393234.roa
File: 323630323a663961663a3a2f34302d3438203d3e20393234.roa (raw, json)
Hash identifier: sZk6rftYbHAn5/CjSqu1td7rk/1YAEU2nr4zD7kW4Ps=
Subject key identifier: 93:94:CE:CB:60:A6:05:BA:4D:0A:43:C0:A4:FF:1F:F9:53:7E:5B:1D
Certificate issuer: /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial: 46DE99175177A0468B46EEA372AE9D3051894996
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20393234.roa
Signing time: Sun 08 Dec 2024 03:45:35 +0000
ROA not before: Sun 08 Dec 2024 03:40:35 +0000
ROA not after: Sun 07 Dec 2025 03:45:35 +0000
asID: 924
IP address blocks: 2602:f9af::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:de:99:17:51:77:a0:46:8b:46:ee:a3:72:ae:9d:30:51:89:49:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Validity
Not Before: Dec 8 03:40:35 2024 GMT
Not After : Dec 7 03:45:35 2025 GMT
Subject: CN=9394CECB60A605BA4D0A43C0A4FF1FF9537E5B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:92:87:6b:c2:37:a9:b5:7c:20:55:d5:42:
b6:27:b5:23:fd:a8:23:fa:fe:41:11:db:81:f5:cc:
52:ed:21:1c:06:0b:bb:47:3d:db:24:7d:58:0b:d7:
04:f0:cc:7c:b6:58:8d:17:d8:b4:72:98:04:21:e7:
eb:4b:cf:f6:2a:ab:1d:05:f4:3f:6b:73:0b:8c:83:
ea:32:66:06:2e:b4:b2:72:19:39:82:e6:c4:9a:a9:
09:4b:82:1c:fe:c9:6f:5b:a1:97:73:ee:1b:aa:82:
fc:c4:67:ce:71:21:65:b4:59:b1:28:da:c6:5a:78:
2c:c1:06:76:99:33:73:77:a7:17:3d:1e:74:7c:cd:
d6:24:8a:57:c7:3e:2a:23:40:db:92:85:c3:82:d8:
8d:fe:39:42:bc:64:e9:8f:98:ee:30:f1:ef:dc:4b:
ac:39:8a:e2:e2:b9:ca:e8:54:33:03:1b:55:1e:d5:
c9:5c:3a:50:da:f2:7a:74:75:f2:55:26:9f:78:21:
91:1f:3b:e9:75:2e:92:2d:fd:4c:76:1d:8c:0e:1b:
23:64:97:12:4c:00:db:1a:bd:6f:03:e8:61:f1:7c:
d0:87:b4:50:83:0b:82:55:58:fc:06:ca:68:19:ab:
7e:f1:9f:55:ea:c0:18:e8:5e:03:33:62:86:2f:c7:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:CE:CB:60:A6:05:BA:4D:0A:43:C0:A4:FF:1F:F9:53:7E:5B:1D
X509v3 Authority Key Identifier:
keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9af::/40
Signature Algorithm: sha256WithRSAEncryption
3b:bc:74:3b:87:87:54:33:de:05:e1:1d:f4:4b:b7:e3:a4:d2:
17:47:6b:b5:13:0c:e7:81:1f:b0:04:f4:f8:8c:5b:11:bf:fb:
4b:ec:96:3e:3f:f1:47:67:39:2c:7f:ec:f6:ae:8f:96:9f:db:
7a:36:77:db:f9:3f:1e:cb:a1:21:50:44:bd:e5:c8:a9:86:e6:
b6:6b:02:35:ed:8d:73:5f:4f:e2:75:77:6d:e3:08:b2:54:1f:
2e:eb:9f:d7:af:56:9f:6a:4e:bb:ef:40:31:03:7f:ef:72:53:
13:63:4f:13:f2:1c:bf:1f:bd:a4:b7:cb:8b:ae:99:9f:c3:c5:
ed:f1:c1:c0:19:85:a1:53:43:8c:e9:45:8d:40:85:dc:b0:42:
7c:3d:2c:6b:1c:16:bd:09:db:6c:e0:00:f9:dc:aa:05:64:b5:
0a:3d:71:c8:64:63:90:d9:62:06:6e:6e:7f:ef:f2:9f:d2:f1:
cb:db:a3:56:b8:ce:21:a5:2f:a2:27:c7:7f:10:90:a0:72:35:
33:33:86:96:6e:fb:63:aa:10:9f:12:94:4d:26:a8:c1:c2:8d:
8e:09:94:71:9b:34:78:08:51:20:7f:5e:6a:93:99:61:d1:ff:
48:93:f0:3c:92:ca:b0:2f:46:19:ba:53:a3:84:f8:a1:65:0a:
cb:77:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:54:30 2025 by rpki-client