Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa
File: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier: a/PEhvzrP+G5MwSsL0gkzB1gZuBpDOMslVaEMTvEPWA=
Subject key identifier: 9C:26:0C:AF:02:A3:2C:45:1C:C7:F7:C8:DB:21:76:FE:2D:1F:E4:DC
Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial: 6243EB2F7FFC73079D9807C365C96489D632E36F
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa
Signing time: Fri 20 Dec 2024 19:58:48 +0000
ROA not before: Fri 20 Dec 2024 19:53:48 +0000
ROA not after: Fri 19 Dec 2025 19:58:48 +0000
asID: 216107
IP address blocks: 2a05:dfc1:cb1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:43:eb:2f:7f:fc:73:07:9d:98:07:c3:65:c9:64:89:d6:32:e3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Validity
Not Before: Dec 20 19:53:48 2024 GMT
Not After : Dec 19 19:58:48 2025 GMT
Subject: CN=9C260CAF02A32C451CC7F7C8DB2176FE2D1FE4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:f3:5f:8a:db:71:eb:83:3b:95:13:47:ae:
5e:f0:31:52:47:99:62:af:25:dc:c6:fe:8b:ca:f4:
82:97:60:9e:34:ff:ae:88:cc:1c:df:fd:1a:c5:8b:
3d:6e:1a:28:e2:5c:01:8a:34:ba:28:b8:e2:fd:06:
cb:f4:ed:21:ca:4c:9f:b8:d9:45:ff:af:8c:a3:18:
cd:6e:66:97:8d:45:ec:30:07:c3:65:c9:24:93:7b:
6e:d4:42:19:d8:2f:4e:fc:ad:10:44:4c:e5:d8:60:
cf:cb:5b:9f:7f:ce:42:43:e0:6d:00:43:ec:90:e6:
76:e7:50:ed:f0:ae:bd:68:13:77:d9:54:7a:7b:1c:
5b:fa:50:c2:2c:b6:ab:27:bc:c7:7d:ab:78:ba:ae:
85:6d:83:00:7c:bc:f4:46:fe:9f:12:0e:08:4f:30:
82:0b:93:ef:ee:10:9a:41:2e:f7:1e:a5:a3:cf:c9:
07:55:8f:3c:17:2f:ce:ec:f3:9b:8e:6d:9a:4a:67:
6f:99:0a:80:e9:a5:f7:09:5b:ff:d4:dd:c1:75:13:
fd:63:fc:d4:6e:2b:8a:c4:1f:61:78:4a:fe:02:61:
aa:eb:dc:58:07:c3:81:1f:0e:67:ec:d6:2b:63:32:
69:0a:2e:03:a4:c7:c5:87:54:1a:fc:82:0d:46:8a:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:0C:AF:02:A3:2C:45:1C:C7:F7:C8:DB:21:76:FE:2D:1F:E4:DC
X509v3 Authority Key Identifier:
keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:cb1::/48
Signature Algorithm: sha256WithRSAEncryption
4b:4a:08:4a:86:82:c8:47:d1:62:c6:6e:42:64:fa:59:c4:94:
e9:ca:cf:3f:17:ca:ed:88:2a:60:35:cd:b2:f9:e0:ea:58:39:
ef:1c:c9:3b:03:55:36:99:7a:0b:5e:4f:d4:f4:ad:21:53:74:
b1:a9:ae:7a:ca:9c:b6:1f:f0:4c:65:40:5f:85:1e:70:15:5a:
74:c4:94:7b:48:3b:df:4b:26:df:b7:29:e7:0e:e0:fa:1a:9c:
9c:51:cb:99:a8:91:d2:54:71:24:a6:c8:1a:e1:7d:41:a5:e5:
ea:4b:2e:ad:ba:e1:30:5e:00:72:cb:88:b7:7f:ef:1d:f5:39:
7c:9b:d5:22:8f:24:40:93:d6:99:e9:42:b2:db:2c:b5:ae:12:
44:b9:22:59:d5:af:8c:a6:75:c1:6d:46:a1:c6:7b:3c:8d:b3:
8f:b6:db:08:c5:ba:4b:38:4e:74:d4:18:c4:e1:5c:c4:b2:3c:
bf:ff:44:a2:c2:5c:28:d6:99:1e:d6:7c:ae:2a:ce:fe:41:db:
95:21:f6:51:af:2f:bb:0a:e2:df:ed:a4:da:1e:b8:7c:da:6c:
f2:ab:8e:0a:c9:b2:61:9f:c8:b7:ab:ce:c5:17:43:bf:9e:41:
49:b6:b2:d2:d6:a4:1e:ce:64:70:ca:6f:ef:21:9a:d8:53:74:
88:1f:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:52 2025 by rpki-client