Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa
File: 326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier: UkN9gldKwVslidAkhojBVMPWXCWuiG0oVJUtaFQyFlU=
Subject key identifier: F4:99:BD:4E:52:1D:AF:37:C9:EC:2B:28:40:0A:08:BF:56:CE:2B:1E
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 4F413748C1A86FCD3A512DC7809EF12423F3CF55
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa
Signing time: Wed 24 Jan 2024 21:31:57 +0000
ROA not before: Wed 24 Jan 2024 21:26:57 +0000
ROA not after: Wed 22 Jan 2025 21:31:57 +0000
asID: 47272
IP address blocks: 2a05:dfc1:9100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:41:37:48:c1:a8:6f:cd:3a:51:2d:c7:80:9e:f1:24:23:f3:cf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Jan 24 21:26:57 2024 GMT
Not After : Jan 22 21:31:57 2025 GMT
Subject: CN=F499BD4E521DAF37C9EC2B28400A08BF56CE2B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:12:b6:6b:de:cf:1c:a5:fa:82:46:07:5a:
2f:19:21:3b:61:0e:64:4a:ab:29:50:63:b5:7e:b4:
9b:63:cf:d3:b4:ed:bc:76:e1:7f:57:29:b4:88:5c:
b2:26:99:64:f8:2e:32:73:2d:3f:4a:e7:a4:12:d5:
f5:42:02:5d:62:40:03:b6:76:47:36:89:5b:46:57:
d9:37:de:56:1d:cd:03:16:0b:f7:1c:38:22:d0:9e:
57:1b:a3:b3:0b:c2:bc:50:ef:84:b3:29:91:43:bc:
89:3f:24:f2:19:72:c5:b9:f3:84:f2:2c:54:5b:98:
a3:04:6f:17:a4:52:b6:48:03:7d:30:db:ad:c2:d4:
fe:bf:26:36:7b:97:d1:1c:00:14:ab:2d:ce:7f:10:
29:4e:06:1a:6c:6e:b4:c0:5e:90:15:19:57:22:9f:
b9:ce:b2:4e:f8:d5:3a:2a:57:cb:48:09:84:38:ee:
fd:c7:cf:c0:f0:de:fb:a8:4e:54:2a:55:a3:80:61:
e8:3b:50:4b:1e:6d:bf:18:de:fb:1c:27:74:63:27:
79:e8:5a:71:e0:b9:5a:9a:22:46:11:98:eb:9b:33:
d6:41:7f:34:14:51:46:8b:25:af:c9:62:ab:4a:9f:
49:4f:64:d4:79:fb:a1:60:0a:be:a5:8f:eb:dc:1f:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:BD:4E:52:1D:AF:37:C9:EC:2B:28:40:0A:08:BF:56:CE:2B:1E
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9100::/40
Signature Algorithm: sha256WithRSAEncryption
a7:b1:6b:ac:c1:a5:37:60:e0:5c:db:c2:11:84:f7:b5:c1:b6:
01:ae:49:1f:36:4b:28:63:bd:a7:69:11:90:31:4e:b8:79:3e:
37:ae:0d:07:3c:32:dc:ee:f4:49:85:96:0a:ab:9c:61:92:ba:
c3:21:e2:e4:89:04:57:6b:3d:0e:9b:e6:a2:89:49:57:9d:37:
f1:cf:d4:9b:ef:91:e6:8b:97:f0:32:ff:b9:da:78:6e:87:ce:
c3:7e:fd:ec:4b:30:3a:c0:93:40:ba:8f:03:aa:61:56:ef:58:
a4:5b:7c:65:68:46:9f:02:56:34:a2:42:7e:32:a9:4f:5f:c1:
b2:b3:31:9f:36:f5:7b:e9:d3:9e:ec:aa:cd:63:5f:6f:0f:ad:
b3:6e:02:dc:52:3c:01:4b:cf:8d:42:f9:3f:52:81:49:cd:31:
bb:59:b4:ed:47:c1:c6:91:d5:92:5e:c3:9a:c6:ab:77:c1:5c:
16:82:0b:75:4f:31:9e:8b:91:da:1e:84:4a:69:cd:84:70:05:
49:1d:74:b7:d3:37:b4:78:6d:12:ea:1b:a4:a6:e1:66:21:89:
85:bc:3a:16:0e:a7:a1:50:6c:3b:eb:09:e0:02:ec:9d:53:64:
95:d5:ba:37:01:30:82:41:9c:f4:bb:b8:1e:76:36:3d:6e:46:
09:77:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:58 2025 by rpki-client