Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a313165303a3a2f34332d3438203d3e2030.roa
File: 326130613a363034303a313165303a3a2f34332d3438203d3e2030.roa (raw, json)
Hash identifier: WdwrfNxHZlwzcc82wxrr3hYhzNEPXcZ0mqq0hhakHik=
Subject key identifier: 53:C9:98:8D:57:89:CB:D4:CF:2E:8E:57:B6:D5:C5:C5:AB:40:0D:2C
Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial: 760D79FDF92371BCC03E0ECA776B4EE518A9808F
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a313165303a3a2f34332d3438203d3e2030.roa
Signing time: Fri 07 Mar 2025 20:48:01 +0000
ROA not before: Fri 07 Mar 2025 20:43:01 +0000
ROA not after: Fri 06 Mar 2026 20:48:01 +0000
asID: 0
IP address blocks: 2a0a:6040:11e0::/43 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0d:79:fd:f9:23:71:bc:c0:3e:0e:ca:77:6b:4e:e5:18:a9:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Validity
Not Before: Mar 7 20:43:01 2025 GMT
Not After : Mar 6 20:48:01 2026 GMT
Subject: CN=53C9988D5789CBD4CF2E8E57B6D5C5C5AB400D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:a7:10:f5:6f:e9:7d:e5:e9:c3:8e:c7:57:
69:ad:22:0a:ca:2e:17:a5:01:bc:55:5b:ee:f3:93:
b0:45:34:83:a2:48:69:79:15:0c:4e:d9:a9:08:0b:
8e:5c:31:4b:99:7d:3e:e8:6c:cd:18:01:a7:aa:56:
e0:c7:62:f1:70:87:3e:bb:99:13:ad:76:00:fc:2e:
c6:b9:c7:35:bc:75:a3:c1:33:d6:ec:ff:1d:d3:81:
d2:05:78:b1:a8:dc:b7:57:53:41:55:ea:38:8d:04:
7e:4c:7e:58:cb:f0:5b:a0:9d:b8:5e:0c:cf:48:a5:
8b:7a:4c:c6:72:c2:e6:60:55:69:62:3a:0d:46:27:
c1:1e:5c:c7:33:79:44:1c:f5:20:1c:eb:40:90:41:
59:cc:be:d4:7e:1f:51:87:57:46:5c:13:bf:52:ad:
8d:a5:1e:a2:16:1d:a1:96:60:b0:c7:ee:7b:75:d0:
b3:5a:d3:4e:84:43:58:ce:ca:42:ef:b2:75:6e:71:
a5:35:25:21:0a:1d:7b:06:0c:e0:5d:3b:5f:b7:eb:
ed:6c:9d:58:7e:ca:f1:24:79:5c:7c:ae:ed:ec:30:
e0:d7:cf:89:88:0a:aa:46:0d:1e:ab:87:bb:f2:bd:
7d:b6:0e:1c:10:8b:a4:01:a5:f1:ca:71:39:5f:7c:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C9:98:8D:57:89:CB:D4:CF:2E:8E:57:B6:D5:C5:C5:AB:40:0D:2C
X509v3 Authority Key Identifier:
keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a313165303a3a2f34332d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:11e0::/43
Signature Algorithm: sha256WithRSAEncryption
75:9f:53:0f:60:8c:53:33:6e:71:e1:4a:c5:b7:eb:3c:0c:31:
20:b1:cf:b8:69:62:f9:73:7a:45:cc:f9:be:df:cd:96:3a:9d:
b0:09:73:16:bd:95:55:49:83:d3:67:a4:16:41:68:64:fd:29:
33:0d:3f:50:9b:2f:39:dd:b7:b5:a8:85:c1:dd:08:30:ae:dd:
4d:71:76:fc:e1:d5:fb:9f:86:fd:bc:28:b9:2b:56:53:87:63:
3d:66:e4:05:01:10:d9:75:18:61:0c:96:a7:7e:fe:51:3a:36:
7d:72:63:62:77:ec:43:fb:48:09:24:53:29:3b:7f:60:34:b0:
be:99:e5:b2:75:c8:61:29:05:5f:2a:f8:8d:f0:95:06:fb:74:
30:66:db:ac:8e:74:43:c7:23:07:eb:94:1e:ae:e8:1b:b9:22:
8c:83:97:6e:20:94:7f:4d:b5:4c:60:b3:89:85:5d:35:50:f0:
1c:e4:83:23:ac:6b:8c:7f:a0:bb:16:24:01:de:af:e1:d7:5e:
d6:74:2e:e3:39:fd:5e:55:d6:84:5d:53:77:81:fc:1f:07:be:
a0:9d:80:61:42:2f:a6:2e:17:bd:af:be:c9:96:33:93:67:88:
41:66:0c:86:37:54:6e:db:bf:94:fe:80:41:db:3b:32:78:e4:
eb:7f:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:34 2025 by rpki-client