Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa
File: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier: VuhrRc57Yh+d4FPS5p4z7y+vRIenONiukH/Vc0UeFcQ=
Subject key identifier: 40:EF:D3:E3:15:9C:6C:1B:24:B9:E0:FE:0E:3F:81:78:4C:78:D8:45
Certificate issuer: /CN=6085227D041EE38A5046749BFCC9B1327B980374
Certificate serial: 3D0DB5C96CA8958F2FF055BBFCED067B0363578F
Authority key identifier: 60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa
Signing time: Fri 27 Oct 2023 09:49:27 +0000
ROA not before: Fri 27 Oct 2023 09:44:27 +0000
ROA not after: Fri 25 Oct 2024 09:49:27 +0000
asID: 47496
IP address blocks: 2a05:dfc1:c42c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0d:b5:c9:6c:a8:95:8f:2f:f0:55:bb:fc:ed:06:7b:03:63:57:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085227D041EE38A5046749BFCC9B1327B980374
Validity
Not Before: Oct 27 09:44:27 2023 GMT
Not After : Oct 25 09:49:27 2024 GMT
Subject: CN=40EFD3E3159C6C1B24B9E0FE0E3F81784C78D845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:19:42:bd:6e:db:71:34:ef:c6:da:f8:cd:
8b:04:41:e0:55:3b:f5:93:d5:d2:00:f0:f1:2f:1d:
f5:34:f9:75:d2:65:0f:19:07:f6:c6:50:75:0f:d3:
4b:5a:d5:65:24:e8:e7:7c:fe:4a:52:d0:05:a2:94:
ab:e5:a8:20:5e:17:e0:b9:07:53:91:a9:4e:95:ef:
23:d5:14:a4:a0:a9:16:59:18:7a:10:29:38:a9:39:
38:c2:7c:a9:1f:90:83:37:98:3a:f1:d3:6e:c9:b3:
3e:22:e3:9a:20:a2:5e:8a:bc:ef:b0:8d:27:da:4c:
eb:5a:a1:c6:04:4d:d2:f5:34:38:3c:5d:26:3b:f9:
06:b0:6f:c8:2d:b4:d9:d3:03:4a:2b:5a:78:6a:92:
b5:0c:96:f1:e9:af:9f:4f:53:1a:7a:8b:6f:06:2f:
6c:5e:ce:54:b3:11:92:8d:5e:88:cb:2c:e1:57:c9:
6d:59:33:69:cf:f3:a6:84:7f:e4:df:50:e8:be:cf:
a9:d9:9f:bf:16:2d:84:bb:c9:28:9b:9d:6c:1f:75:
c3:29:c6:89:46:f9:3e:94:6e:1f:3b:97:fe:d0:00:
b3:3a:3d:95:5a:c0:fe:95:9a:b7:53:b1:a7:aa:f6:
4b:35:f0:6b:10:26:42:57:14:32:74:1c:8c:ad:31:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EF:D3:E3:15:9C:6C:1B:24:B9:E0:FE:0E:3F:81:78:4C:78:D8:45
X509v3 Authority Key Identifier:
keyid:60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c42c::/48
Signature Algorithm: sha256WithRSAEncryption
5e:8d:4a:e4:fe:eb:e3:3e:53:f6:94:2b:3e:29:37:59:27:fd:
43:ec:5f:8f:6f:2c:c6:ee:49:a9:a4:16:76:82:55:af:12:bb:
81:ad:d8:2d:94:e8:cf:a1:5a:7b:32:c5:5a:af:a5:d7:df:d9:
17:88:69:35:9d:d3:17:0f:2a:55:8e:b3:81:2e:3c:31:0e:b4:
06:db:f5:9e:bb:f9:63:ef:c5:fd:1d:07:82:99:8a:77:1d:e7:
69:00:7d:2a:b9:1e:fb:e0:b4:ae:45:43:92:57:bc:ca:37:65:
78:e1:54:70:f9:0e:3c:b5:2f:a7:a4:38:e6:69:84:ce:d2:35:
d1:9c:16:08:7b:3b:71:0c:c8:cb:29:d4:be:dc:ed:0c:de:b0:
6c:57:69:77:78:06:49:50:72:a5:47:bc:39:77:5a:ef:58:15:
65:61:d1:5e:61:ee:56:41:c6:c1:ef:e1:b6:e2:51:42:e0:3a:
7e:ee:cf:94:58:8a:e2:2b:51:36:be:ab:7c:01:a6:9b:50:a5:
b3:0c:25:a5:e4:3d:c4:86:c9:db:30:db:a9:3f:d4:0b:d2:5f:
f4:cc:37:25:98:78:ba:ab:0f:a9:42:a4:91:1d:1d:a5:1a:d3:
bc:38:47:84:1f:8e:af:2c:ba:dd:bf:b2:45:3c:ee:b4:8d:70:
47:36:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:55 2025 by rpki-client