Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa
File: 326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa (raw, json)
Hash identifier: aifr/NLDzvOxIGjAKgDN1Pvj5BSRBo/pLbH71Wa9SC4=
Subject key identifier: 98:C7:DE:89:29:57:DB:8A:B3:60:DD:00:5C:B2:D7:B5:05:DB:95:36
Certificate issuer: /CN=B126634521E5E49C535FCBEC43BA2D922C30E136
Certificate serial: 3FA54891B6DACA3F19711114E9B938C4A2C3B5C0
Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa
Signing time: Thu 27 Feb 2025 04:51:49 +0000
ROA not before: Thu 27 Feb 2025 04:46:49 +0000
ROA not after: Thu 26 Feb 2026 04:51:49 +0000
asID: 200775
IP address blocks: 2a0a:6040:c200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a5:48:91:b6:da:ca:3f:19:71:11:14:e9:b9:38:c4:a2:c3:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136
Validity
Not Before: Feb 27 04:46:49 2025 GMT
Not After : Feb 26 04:51:49 2026 GMT
Subject: CN=98C7DE892957DB8AB360DD005CB2D7B505DB9536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:49:d7:6a:11:e7:d7:07:fd:76:5e:3c:fb:
05:ee:58:a2:27:08:57:4a:56:fb:d2:eb:32:17:6a:
8f:7d:9f:0c:22:17:bd:d0:7b:11:5f:92:1f:2c:bb:
fc:e4:7f:c5:91:56:5c:34:bd:96:ee:66:b6:71:0a:
09:5f:45:1c:df:59:e1:c1:f6:35:ce:3b:2c:e1:59:
7c:1d:da:08:4a:03:fa:df:7a:60:6f:1d:7f:d1:27:
49:3e:8c:91:10:2d:e2:0f:e4:b8:11:bc:69:03:50:
13:c7:96:23:50:71:71:a3:2a:42:03:88:5a:3e:31:
83:62:75:d9:2b:01:b5:39:c0:7c:33:39:52:08:7a:
ee:42:d6:ed:a3:92:4f:13:70:e7:eb:af:24:e7:a3:
90:a4:c3:47:a6:c9:be:3f:d9:3a:79:a6:5d:c3:ff:
f9:4e:03:c5:fc:90:7a:de:5a:36:3e:4e:c4:70:e1:
1f:ea:9c:77:fb:77:67:de:ea:39:85:74:4b:5f:47:
ca:aa:5e:79:21:a6:10:3b:73:78:d3:41:fa:b9:f9:
b3:ba:17:17:15:a5:a0:e9:04:69:36:66:2e:e8:58:
0a:fa:1d:36:bd:99:59:52:54:b3:ea:b7:38:4f:14:
c3:5b:be:fa:02:8f:22:9d:bc:54:62:9c:39:6b:03:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C7:DE:89:29:57:DB:8A:B3:60:DD:00:5C:B2:D7:B5:05:DB:95:36
X509v3 Authority Key Identifier:
keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:c200::/40
Signature Algorithm: sha256WithRSAEncryption
01:8e:4d:f5:b6:6d:f8:68:02:db:28:2f:3c:8b:d2:18:19:f7:
32:8f:17:a8:d9:6d:38:0b:e7:f0:10:7c:b3:6e:bb:fd:35:26:
54:5d:37:da:1b:37:8e:32:a0:9f:80:d3:4e:a1:2d:be:42:3f:
a1:53:a3:e4:20:d1:6f:22:fb:fc:2c:af:ef:b9:a4:10:5b:04:
eb:d4:d5:05:04:fc:9c:74:bf:cc:aa:70:72:20:3a:50:36:3e:
e2:96:60:53:86:e1:55:1e:c0:4c:3a:06:60:52:22:42:8a:1e:
34:30:b0:ed:d5:ed:41:91:d7:d0:cf:76:43:e1:68:f6:1c:f6:
d2:ba:98:fb:cb:d9:2e:3d:c3:b5:cb:1b:a8:32:13:05:59:28:
56:06:12:a8:ca:98:d2:a1:32:c5:07:e9:3d:d1:a6:85:52:b9:
06:42:80:39:48:52:dd:fb:43:ae:2e:d7:e5:c4:ee:75:5b:e3:
19:c8:ac:34:97:d3:3c:34:b1:d6:bd:91:a8:ec:dd:24:d2:22:
f5:a1:73:a0:3b:ff:5a:33:19:d8:9c:a8:3b:6e:3e:65:4a:3e:
f8:59:df:8e:22:ac:e8:8f:a1:bc:cf:b1:01:f6:e8:96:14:d2:
db:40:c6:ad:84:ec:2b:52:e0:4d:04:0e:c2:df:69:1f:bf:43:
ad:34:58:9d
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUP6VIkbbayj8ZcREU6bk4xKLDtcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIy
QzMwRTEzNjAeFw0yNTAyMjcwNDQ2NDlaFw0yNjAyMjYwNDUxNDlaMDMxMTAvBgNV
BAMTKDk4QzdERTg5Mjk1N0RCOEFCMzYwREQwMDVDQjJEN0I1MDVEQjk1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5UnXahHn1wf9dl48+wXuWKIn
CFdKVvvS6zIXao99nwwiF73QexFfkh8su/zkf8WRVlw0vZbuZrZxCglfRRzfWeHB
9jXOOyzhWXwd2ghKA/rfemBvHX/RJ0k+jJEQLeIP5LgRvGkDUBPHliNQcXGjKkID
iFo+MYNiddkrAbU5wHwzOVIIeu5C1u2jkk8TcOfrryTno5Ckw0emyb4/2Tp5pl3D
//lOA8X8kHreWjY+TsRw4R/qnHf7d2fe6jmFdEtfR8qqXnkhphA7c3jTQfq5+bO6
FxcVpaDpBGk2Zi7oWAr6HTa9mVlSVLPqtzhPFMNbvvoCjyKdvFRinDlrAzPPAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQUmMfeiSlX24qzYN0AXLLXtQXblTYwHwYDVR0j
BBgwFoAUsSZjRSHl5JxTX8vsQ7otkiww4TYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IxMjY2MzQ1MjFFNUU0
OUM1MzVGQ0JFQzQzQkEyRDkyMkMzMEUxMzYuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhj
NC80LzMyNjEzMDYxM2EzNjMwMzQzMDNhNjMzMjMwMzAzYTNhMmYzNDMwMmQzNDMw
MjAzZDNlMjAzMjMwMzAzNzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAwjANBgkqhkiG9w0B
AQsFAAOCAQEAAY5N9bZt+GgC2ygvPIvSGBn3Mo8XqNltOAvn8BB8s267/TUmVF03
2hs3jjKgn4DTTqEtvkI/oVOj5CDRbyL7/Cyv77mkEFsE69TVBQT8nHS/zKpwciA6
UDY+4pZgU4bhVR7ATDoGYFIiQooeNDCw7dXtQZHX0M92Q+Fo9hz20rqY+8vZLj3D
tcsbqDITBVkoVgYSqMqY0qEyxQfpPdGmhVK5BkKAOUhS3ftDri7X5cTudVvjGcis
NJfTPDSx1r2RqOzdJNIi9aFzoDv/WjMZ2JyoO24+ZUo++FnfjiKs6I+hvM+xAfbo
lhTS20DGrYTsK1LgTQQOwt9pH79DrTRYnQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:00 2025 by rpki-client