Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
File: 326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier: p+L0gJ5s4pa18pwYcJBq0zggr5uJmhzAFUc/FFoXFTs=
Subject key identifier: 18:A9:EB:56:A4:7A:B1:73:BC:20:D1:17:65:8C:B4:DA:84:30:24:0E
Certificate issuer: /CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Certificate serial: 4E83CF67C54BFB879ABC1CB5B28284F7D5A7EDCF
Authority key identifier: 49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
Signing time: Mon 16 Oct 2023 13:04:55 +0000
ROA not before: Mon 16 Oct 2023 12:59:55 +0000
ROA not after: Mon 14 Oct 2024 13:04:55 +0000
asID: 8075
IP address blocks: 2a0a:6040:a105::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:83:cf:67:c5:4b:fb:87:9a:bc:1c:b5:b2:82:84:f7:d5:a7:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Validity
Not Before: Oct 16 12:59:55 2023 GMT
Not After : Oct 14 13:04:55 2024 GMT
Subject: CN=18A9EB56A47AB173BC20D117658CB4DA8430240E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:e3:09:56:e2:9e:9a:b3:ad:ee:7c:74:bf:
3b:03:b8:f9:05:94:dd:82:44:3b:fd:f5:5f:df:68:
a2:e4:25:09:44:7f:73:99:12:f3:85:f6:a9:98:7a:
61:f0:66:cf:8f:83:12:91:5b:83:e6:a2:95:64:41:
64:c5:ea:f9:18:72:9a:68:4f:cb:4a:b8:5a:d3:99:
f7:b6:15:8c:f7:68:71:6b:35:e2:f6:f7:3a:f8:d5:
66:f8:6a:2f:61:63:cb:54:84:9d:cb:0f:98:c5:aa:
8e:26:67:41:38:d7:09:3b:7a:b3:cf:54:a1:9c:27:
cb:0a:69:99:b3:3f:8a:53:12:91:63:c1:f2:b9:26:
b4:75:1e:d5:1e:41:72:3e:e5:61:47:a9:7e:cb:d5:
1a:dd:9b:84:9c:44:fd:97:24:7f:3e:12:2b:85:04:
bc:ba:00:8b:9b:ca:5c:46:2d:f6:94:b3:e8:2e:e0:
79:f7:ed:03:a9:cf:12:f4:fa:32:91:af:4d:f8:40:
f1:e3:0f:dd:2e:e2:41:29:95:a0:91:5f:d5:ec:54:
7c:5f:a9:32:e8:ad:65:a7:3f:0b:45:64:38:d1:ce:
18:0b:4c:ff:fc:e4:3d:f0:da:13:6b:09:16:eb:e9:
f4:db:c9:67:53:fd:af:44:98:7a:50:84:39:d1:7e:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:EB:56:A4:7A:B1:73:BC:20:D1:17:65:8C:B4:DA:84:30:24:0E
X509v3 Authority Key Identifier:
keyid:49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a105::/48
Signature Algorithm: sha256WithRSAEncryption
64:85:df:26:1c:9c:e4:8e:aa:e9:4f:a9:75:ab:3a:50:20:c1:
7d:42:7f:a4:8a:0f:71:f4:df:98:33:e2:16:ba:66:9b:6a:ce:
d4:60:75:0d:54:7c:8b:1f:79:c7:07:4f:b9:62:e3:1a:45:23:
b4:6a:dd:18:60:7b:ec:9d:3c:34:08:26:db:52:52:1c:91:6d:
ba:53:64:e9:ff:46:a5:8b:02:76:af:c0:64:9b:71:6f:09:2a:
3d:9f:93:a7:69:db:e3:09:70:6a:ea:a5:76:20:78:c9:6b:d1:
45:71:85:fe:e3:54:db:53:12:30:c7:eb:a3:5e:87:c8:be:e0:
28:95:12:8c:fd:02:84:53:18:ba:3b:7a:43:59:a1:5a:c3:21:
06:99:c4:04:b5:83:e0:b7:75:ba:23:5c:5c:41:f1:9b:9e:62:
f6:2a:b6:e1:89:85:a7:fd:b3:a5:e4:fc:69:1b:43:6d:19:58:
f7:16:3b:22:ac:c1:60:30:23:d8:35:42:28:ff:44:33:7e:27:
86:cf:26:47:81:fe:15:fd:0f:08:30:1a:fa:fd:e7:3d:64:23:
6c:f8:d1:12:a4:09:72:00:60:31:44:1c:e3:f3:bc:0a:c3:5d:
3d:ee:b3:38:b2:13:67:ac:fa:82:6b:4e:5d:e1:79:d4:fc:3c:
aa:be:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org