Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa
File: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (raw, json)
Hash identifier: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=
Subject key identifier: CD:D8:85:81:24:CE:2A:2F:B4:36:29:32:02:91:10:78:C2:B7:B8:41
Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial: 0960959320E21C9D16237297D2B5EFEB20F3C04F
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa
Signing time: Mon 10 Mar 2025 22:37:41 +0000
ROA not before: Mon 10 Mar 2025 22:32:41 +0000
ROA not after: Mon 09 Mar 2026 22:37:41 +0000
asID: 16509
IP address blocks: 2a0a:6040:3f80::/41 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:60:95:93:20:e2:1c:9d:16:23:72:97:d2:b5:ef:eb:20:f3:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Validity
Not Before: Mar 10 22:32:41 2025 GMT
Not After : Mar 9 22:37:41 2026 GMT
Subject: CN=CDD8858124CE2A2FB436293202911078C2B7B841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:1d:d1:f7:07:0a:0d:d7:0a:ba:46:41:e0:
84:12:08:b4:aa:e6:dd:11:b7:ea:16:08:7a:36:fe:
30:2b:f0:24:02:00:d5:13:cb:2f:08:43:25:bf:7a:
cd:e3:a3:20:07:be:b3:94:4f:f3:a4:e5:9a:10:7f:
0c:fa:c2:d9:88:02:ad:c6:d2:f2:eb:e0:64:d4:e1:
60:4e:f9:ed:c2:4a:84:d3:2e:29:04:1a:84:0d:ac:
5d:3b:c8:72:93:76:63:51:a3:a1:91:26:5f:25:aa:
a3:4a:55:68:f8:17:86:12:5d:4e:d1:8c:03:2c:1a:
e8:3c:f4:20:0a:07:74:7d:e9:ff:e7:79:47:24:fd:
4a:fa:48:a9:4c:5e:d3:a3:a1:a7:79:59:da:b7:1b:
20:07:4b:11:5d:b9:b4:1e:d6:ca:3b:a6:9c:9b:a7:
33:09:13:a2:32:e4:9b:90:4a:7d:e6:53:53:ae:9e:
5f:d8:7b:db:f4:d0:82:05:3f:c0:7b:33:ea:5d:fc:
60:ab:d4:9b:79:45:15:88:26:19:7c:45:7b:a6:65:
8b:5f:c3:af:e3:cb:e0:95:b1:14:55:64:ed:da:ec:
43:a2:05:0b:a2:13:e3:e5:b4:bc:dc:18:c3:be:62:
04:f6:c0:34:19:f8:21:1e:e2:25:fb:c7:fe:a1:28:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:85:81:24:CE:2A:2F:B4:36:29:32:02:91:10:78:C2:B7:B8:41
X509v3 Authority Key Identifier:
keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3f80::/41
Signature Algorithm: sha256WithRSAEncryption
8a:7c:09:5a:a1:3f:32:27:7e:e6:0a:78:1d:2a:b2:b8:60:90:
d5:7d:9b:02:4d:8f:a2:41:d5:45:81:2e:09:30:f0:cf:a8:53:
b9:93:a2:8a:45:ca:54:5b:af:09:84:1d:75:69:8f:f0:e2:23:
01:18:94:80:49:0a:d0:c8:1d:91:1e:dd:76:d2:a9:04:d3:a1:
82:5b:8d:ef:66:3d:7d:70:25:ff:b8:f1:7e:9f:59:29:ed:f1:
1c:54:e7:9d:ba:83:68:61:d3:c3:a6:c4:a9:dc:df:c4:d7:d4:
76:37:22:ad:f3:9d:bc:6a:9b:fb:79:e4:df:55:27:ca:b7:9c:
91:7f:76:25:60:d7:a1:ae:60:da:64:ec:49:7c:25:69:75:85:
3d:60:a0:3f:ed:64:a7:d7:6f:c0:84:c4:1e:40:4a:fd:2e:70:
7f:2e:0a:cd:a4:a6:76:c5:eb:07:e1:15:de:08:a9:11:2b:70:
1a:53:bb:fe:f5:62:76:23:25:d4:47:f1:29:c4:78:83:50:b4:
d2:d1:cf:1d:ff:19:3f:7f:31:98:03:e3:31:db:18:a1:06:5b:
c0:ae:12:88:40:57:65:73:75:a5:d8:88:f9:98:7a:a6:80:43:
25:d7:dc:6d:7b:fc:8d:43:f0:07:14:3c:27:90:bd:e2:6a:1d:
85:df:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:55 2025 by rpki-client