Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
File: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (raw, json)
Hash identifier: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=
Subject key identifier: FC:26:F0:51:3D:24:55:01:41:94:42:E7:F4:84:88:32:8F:84:DA:0B
Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial: 60D425FA9CC7680E942DC958EEA9B97E7CD1FE11
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
Signing time: Mon 10 Mar 2025 22:37:36 +0000
ROA not before: Mon 10 Mar 2025 22:32:36 +0000
ROA not after: Mon 09 Mar 2026 22:37:36 +0000
asID: 14618
IP address blocks: 2a0a:6040:3f80::/41 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d4:25:fa:9c:c7:68:0e:94:2d:c9:58:ee:a9:b9:7e:7c:d1:fe:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Validity
Not Before: Mar 10 22:32:36 2025 GMT
Not After : Mar 9 22:37:36 2026 GMT
Subject: CN=FC26F0513D245501419442E7F48488328F84DA0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:40:9e:3f:6c:5c:df:14:56:d9:74:99:83:
5c:49:8d:b4:49:78:fd:1e:6e:00:76:4c:a9:2b:b0:
a3:dd:eb:b0:8b:85:f2:5d:8e:33:b3:20:86:98:3a:
3f:09:39:88:bd:d9:7f:03:b8:e0:e6:84:8b:1c:68:
5c:3d:c0:62:eb:e5:de:9a:81:8f:7f:c8:d1:c5:19:
ab:f5:ad:bf:07:11:b7:54:3e:8d:4e:57:c7:94:e5:
2b:80:fc:af:8e:2f:ad:12:d8:0d:a3:5d:59:c9:9a:
77:0f:7d:7c:07:3b:fa:96:63:9a:94:00:26:bb:26:
ae:9c:48:6b:9d:12:f3:ec:9e:b3:77:0b:9d:03:5a:
4f:c7:8e:fc:42:ae:67:d4:c9:78:aa:54:fc:33:e3:
ed:bb:d0:53:3c:c9:c2:35:7e:d4:21:b5:ea:0c:46:
a2:cc:9b:3b:fc:01:3a:56:ff:b4:85:99:ed:67:b6:
37:07:a5:8d:bd:04:18:49:08:cf:22:37:2a:d7:72:
f0:f1:6b:0d:8c:bb:e2:78:bd:3a:5f:2b:4c:f5:f1:
34:95:eb:95:44:6b:85:fd:58:68:0c:29:4c:e0:ac:
bd:b4:3b:38:8b:c3:64:32:10:ce:04:16:e4:ea:ee:
12:77:ab:57:20:8a:ec:fa:73:34:0a:d4:92:8b:3f:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:F0:51:3D:24:55:01:41:94:42:E7:F4:84:88:32:8F:84:DA:0B
X509v3 Authority Key Identifier:
keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3f80::/41
Signature Algorithm: sha256WithRSAEncryption
1c:b3:8a:35:3b:6c:fb:02:6b:d7:ff:05:84:5e:27:94:37:b7:
c9:19:59:5f:9d:75:d8:fd:40:df:0c:dd:6d:70:18:63:10:57:
ac:db:cf:7b:8c:99:16:2c:35:cf:a5:71:b1:dc:3a:1b:1d:5d:
30:68:cb:88:52:6b:21:bb:bb:a3:ab:c6:a1:71:bc:fc:dd:fc:
a3:1e:9c:fe:46:db:b3:3b:e0:66:74:57:92:50:22:9f:93:ed:
d1:d1:90:bd:71:af:68:f0:1a:f7:c6:d8:ca:68:6a:61:77:ab:
bc:ea:f7:88:a4:8f:5d:ed:54:26:1d:2b:d1:1a:5d:a7:07:dc:
00:95:a0:4b:a8:e4:70:3c:15:fa:27:31:2c:28:7b:5e:58:9e:
91:95:5c:2d:4b:4a:1f:59:1e:f0:98:03:b9:2b:a0:98:36:bb:
7a:d7:14:ab:6f:b9:fd:89:3f:be:4b:db:2f:75:45:d4:7b:5d:
00:4b:c2:41:88:2e:14:1a:ce:08:83:80:e2:37:d8:23:3a:98:
59:82:c6:c5:38:be:1a:90:c7:17:10:51:7e:5a:74:6c:b4:0b:
83:e6:c1:7f:69:71:4d:06:d0:08:eb:ec:c1:3d:bc:0a:86:53:
59:34:1b:7f:80:fe:df:07:9a:a3:ab:6a:25:8f:93:e4:e0:ca:
2d:26:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:34 2025 by rpki-client