Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
File: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier: wVp4YEv0t3dNFBj7z0WS+J9iHIKEQspXspUxf+IIu0Q=
Subject key identifier: BC:B9:30:47:5A:4C:2F:E1:2C:51:57:6A:A7:5A:E3:10:EF:A9:CE:DB
Certificate issuer: /CN=B126634521E5E49C535FCBEC43BA2D922C30E136
Certificate serial: 38811D757AABF9BE10D792CABE9D5DB3B45B0E17
Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
Signing time: Thu 27 Feb 2025 04:51:49 +0000
ROA not before: Thu 27 Feb 2025 04:46:49 +0000
ROA not after: Thu 26 Feb 2026 04:51:49 +0000
asID: 50104
IP address blocks: 2a0a:6040:4400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:81:1d:75:7a:ab:f9:be:10:d7:92:ca:be:9d:5d:b3:b4:5b:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136
Validity
Not Before: Feb 27 04:46:49 2025 GMT
Not After : Feb 26 04:51:49 2026 GMT
Subject: CN=BCB930475A4C2FE12C51576AA75AE310EFA9CEDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:34:3e:f0:97:13:0c:13:09:35:61:32:1a:
9e:d5:4d:89:ed:56:81:b8:31:9c:5f:ce:34:2d:8e:
da:3d:f1:3a:6e:a9:eb:0b:91:f9:e2:2c:d4:7d:ec:
73:78:d4:6e:e7:f0:21:e1:1d:9d:fa:08:6c:63:97:
24:fc:03:19:97:af:db:1f:eb:6d:9e:7f:19:49:ba:
ca:1a:d3:ea:55:a1:e2:d1:74:25:ea:a4:44:2e:c5:
98:60:f8:3a:5a:c6:18:26:5c:83:1f:6a:55:27:21:
64:6f:8f:5d:b2:ca:cd:e8:55:19:5b:85:d0:3f:17:
1f:2c:85:ab:e2:d7:27:33:27:07:97:b8:e6:ed:3a:
84:40:39:2f:5d:bc:b6:7c:eb:4c:b3:23:52:5c:4d:
63:e9:2a:3d:c1:9c:12:a7:4a:9b:06:01:5d:f9:36:
63:eb:6b:f4:c6:f0:5b:77:9f:b9:87:38:f3:0c:ce:
65:ba:cd:b0:c9:2c:91:4e:e4:69:d0:f9:9a:25:6f:
e9:d1:9c:01:14:d4:ef:87:cb:eb:ad:ee:5f:79:e2:
ff:b5:9f:38:49:88:b5:35:df:68:8b:6d:ff:e5:4f:
68:7f:ed:33:05:2f:38:29:58:f1:9e:8d:e2:59:c1:
d5:57:bb:20:1a:be:58:48:34:4b:c5:f8:80:b4:f1:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B9:30:47:5A:4C:2F:E1:2C:51:57:6A:A7:5A:E3:10:EF:A9:CE:DB
X509v3 Authority Key Identifier:
keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4400::/48
Signature Algorithm: sha256WithRSAEncryption
c7:cd:18:be:5e:6d:93:3d:ec:48:c2:90:54:94:3e:aa:56:74:
20:05:d5:e0:c6:0f:4e:17:84:76:4a:8d:ce:ac:b0:bb:22:8b:
6b:22:60:44:4f:6a:f4:99:94:ee:de:6a:c3:6f:e8:9d:9f:1b:
ea:b0:bd:4b:c2:76:09:3e:05:27:6f:d9:0a:67:77:00:b8:97:
a3:f1:1b:ff:bc:cc:7b:1c:12:98:15:1a:06:38:d6:63:c5:a4:
c9:c3:18:6b:e4:7f:93:86:a1:38:3a:ad:aa:b7:d2:96:67:e7:
b1:ec:16:ed:bd:fa:85:21:5e:2a:80:6a:73:6f:dd:c4:fe:e5:
05:b0:93:a4:c6:f5:80:ac:8c:71:13:dc:5b:39:24:c7:88:7b:
f6:9f:e4:40:30:29:69:1b:66:e8:68:c3:ef:b9:46:79:8a:58:
7d:c2:31:f7:65:90:6f:28:b3:15:dd:cf:51:6d:9d:35:36:ef:
8a:d1:6b:3e:a4:6b:f5:03:c7:93:92:82:86:f6:28:61:43:ba:
70:7e:6e:16:58:93:ba:f9:2f:d1:b9:81:46:94:63:76:64:d9:
0a:ae:18:16:20:b5:dd:19:92:63:57:dd:6c:11:ea:a0:24:91:
fc:17:aa:88:3a:af:db:72:42:f1:1e:ac:4b:83:a5:da:02:cb:
77:f8:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:50 2025 by rpki-client