Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa
File: 326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa (raw, json)
Hash identifier: WQEhQqKfoAzf/Rx8ZDheQFLvWSMunjJmmOIGKnpWp78=
Subject key identifier: 3F:E8:B7:7C:CB:1C:1A:7F:3D:8F:6B:8A:14:A9:CE:77:7D:00:58:77
Certificate issuer: /CN=B126634521E5E49C535FCBEC43BA2D922C30E136
Certificate serial: 1E2091CBE2C887939DB25890D98EC131E135A013
Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa
Signing time: Thu 27 Feb 2025 04:51:49 +0000
ROA not before: Thu 27 Feb 2025 04:46:49 +0000
ROA not after: Thu 26 Feb 2026 04:51:49 +0000
asID: 50836
IP address blocks: 2a0a:6040:4401::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:20:91:cb:e2:c8:87:93:9d:b2:58:90:d9:8e:c1:31:e1:35:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136
Validity
Not Before: Feb 27 04:46:49 2025 GMT
Not After : Feb 26 04:51:49 2026 GMT
Subject: CN=3FE8B77CCB1C1A7F3D8F6B8A14A9CE777D005877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fb:49:11:60:74:b7:c8:24:d2:54:f7:89:dc:
7b:2c:c5:28:76:f5:eb:76:8c:11:a5:22:60:a3:2e:
af:d7:36:ac:48:55:02:f0:c9:e5:ff:d2:0f:30:ed:
39:3f:c8:95:f6:da:7f:29:f6:d3:c7:13:fb:a3:a1:
74:e3:09:04:e8:6a:67:6f:51:57:6a:6c:b1:63:46:
74:ca:9a:1d:60:49:a0:3f:da:0e:d0:76:34:29:16:
91:fc:a7:64:4d:70:a1:15:32:5a:4f:98:60:18:84:
67:e2:7f:b5:2e:a2:f5:5e:27:e3:b9:10:3f:51:ed:
9f:eb:65:82:c0:57:2c:a6:0e:f7:41:bc:6d:bc:7e:
40:a7:4c:2f:98:72:7f:e3:cf:2b:e2:3a:39:ee:1d:
ed:47:35:31:0d:6c:b4:ac:98:8f:02:fc:8f:90:c0:
b8:8c:b1:d0:2f:37:43:a9:90:c0:3e:68:90:2c:f4:
ce:7c:d7:86:c6:4d:fe:c7:b3:90:92:66:da:98:fe:
de:10:52:f4:2e:fa:46:8d:a4:9f:3f:71:92:ea:a5:
89:61:e4:cc:7f:cc:09:9c:85:57:35:28:3f:90:ca:
4e:42:2f:f7:ff:28:50:03:22:ee:aa:fa:ba:89:25:
b1:15:e1:e1:3a:af:97:53:89:f7:9f:5d:07:45:57:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:B7:7C:CB:1C:1A:7F:3D:8F:6B:8A:14:A9:CE:77:7D:00:58:77
X509v3 Authority Key Identifier:
keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4401::/48
Signature Algorithm: sha256WithRSAEncryption
c1:ff:b4:eb:77:71:27:9b:ef:c1:4b:68:02:5a:c1:e2:16:4d:
8f:af:fc:cb:7b:c9:7a:97:ea:ba:8e:e9:7e:48:c1:6c:0c:44:
db:d0:45:1d:71:c0:64:7b:29:8e:7f:e3:fe:2c:52:fc:79:f1:
40:3c:33:cc:84:bf:4d:9b:49:06:22:5b:d2:75:0e:a3:e7:67:
37:a8:53:c0:9d:98:b5:4f:03:b9:1b:43:04:7c:d3:99:7a:bd:
70:cf:46:59:9e:64:3c:5f:50:ac:27:4d:0f:a5:f0:3d:00:cd:
77:0e:9d:9f:36:77:9c:3f:b1:f3:8d:60:eb:dd:2b:5d:96:5a:
c8:e5:14:ba:b5:81:c9:cc:c9:77:ff:37:5f:c1:7b:3c:62:db:
6b:a5:ff:00:9d:91:ba:00:98:55:0f:1f:f6:83:0c:d9:34:da:
27:86:92:25:ec:44:86:87:9b:66:22:fc:1e:e0:4f:89:2a:ed:
a6:1e:b7:85:85:ec:52:5f:e1:0d:0a:a8:35:3d:49:33:e8:28:
84:2f:04:ef:45:d0:fb:5d:f0:60:de:4c:4a:2b:a9:49:ea:9d:
54:07:a5:63:3a:82:4e:e9:7f:ee:67:1b:1c:06:19:d6:02:0e:
81:0a:1b:56:65:c8:94:f7:c8:db:52:3d:1b:d0:e7:ee:2f:1e:
96:52:01:ae
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUHiCRy+LIh5OdsliQ2Y7BMeE1oBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIy
QzMwRTEzNjAeFw0yNTAyMjcwNDQ2NDlaFw0yNjAyMjYwNDUxNDlaMDMxMTAvBgNV
BAMTKDNGRThCNzdDQ0IxQzFBN0YzRDhGNkI4QTE0QTlDRTc3N0QwMDU4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs+0kRYHS3yCTSVPeJ3HssxSh2
9et2jBGlImCjLq/XNqxIVQLwyeX/0g8w7Tk/yJX22n8p9tPHE/ujoXTjCQToamdv
UVdqbLFjRnTKmh1gSaA/2g7QdjQpFpH8p2RNcKEVMlpPmGAYhGfif7UuovVeJ+O5
ED9R7Z/rZYLAVyymDvdBvG28fkCnTC+Ycn/jzyviOjnuHe1HNTENbLSsmI8C/I+Q
wLiMsdAvN0OpkMA+aJAs9M5814bGTf7Hs5CSZtqY/t4QUvQu+kaNpJ8/cZLqpYlh
5Mx/zAmchVc1KD+Qyk5CL/f/KFADIu6q+rqJJbEV4eE6r5dTifefXQdFV1NLAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUP+i3fMscGn89j2uKFKnOd30AWHcwHwYDVR0j
BBgwFoAUsSZjRSHl5JxTX8vsQ7otkiww4TYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IxMjY2MzQ1MjFFNUU0
OUM1MzVGQ0JFQzQzQkEyRDkyMkMzMEUxMzYuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhj
NC80LzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQzNDMwMzEzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTMwMzgzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQEQBMA0GCSqGSIb3DQEB
CwUAA4IBAQDB/7Trd3Enm+/BS2gCWsHiFk2Pr/zLe8l6l+q6jul+SMFsDETb0EUd
ccBkeymOf+P+LFL8efFAPDPMhL9Nm0kGIlvSdQ6j52c3qFPAnZi1TwO5G0MEfNOZ
er1wz0ZZnmQ8X1CsJ00PpfA9AM13Dp2fNnecP7HzjWDr3StdllrI5RS6tYHJzMl3
/zdfwXs8Yttrpf8AnZG6AJhVDx/2gwzZNNonhpIl7ESGh5tmIvwe4E+JKu2mHreF
hexSX+ENCqg1PUkz6CiELwTvRdD7XfBg3kxKK6lJ6p1UB6VjOoJO6X/uZxscBhnW
Ag6BChtWZciU98jbUj0b0OfuLx6WUgGu
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:10 2025 by rpki-client