Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393135383a3a2f34382d3438203d3e20313937353430.roa
File: 326130353a646663313a393135383a3a2f34382d3438203d3e20313937353430.roa (raw, json)
Hash identifier: aPsewEklhaXjWolIvQVvXlAbuO0HI6fJzxQ/7IgPsn4=
Subject key identifier: E2:87:B5:9A:EB:A7:08:A1:34:8C:FA:B6:57:8C:37:A2:42:B3:E0:F8
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 32BEDFC48C3A1D0270B4BB428F2B94D054849A89
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393135383a3a2f34382d3438203d3e20313937353430.roa
Signing time: Sun 28 Apr 2024 09:01:51 +0000
ROA not before: Sun 28 Apr 2024 08:56:51 +0000
ROA not after: Sun 27 Apr 2025 09:01:51 +0000
asID: 197540
IP address blocks: 2a05:dfc1:9158::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:be:df:c4:8c:3a:1d:02:70:b4:bb:42:8f:2b:94:d0:54:84:9a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Apr 28 08:56:51 2024 GMT
Not After : Apr 27 09:01:51 2025 GMT
Subject: CN=E287B59AEBA708A1348CFAB6578C37A242B3E0F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:f0:62:19:2b:67:ea:fa:f3:f0:0d:a5:71:
0b:c8:c7:fe:b7:3b:dc:ce:2b:76:75:04:0c:91:ac:
05:99:02:1e:11:18:77:ba:83:7c:3e:fb:60:82:a5:
2f:59:68:ef:57:e8:0d:cb:9f:23:50:d8:18:6f:be:
99:a3:66:84:71:29:1b:31:21:d9:2f:3e:6a:5c:df:
90:9e:f3:2e:d5:d7:ca:8a:41:11:1e:ef:53:7e:8c:
9a:2b:46:99:ad:7e:df:be:26:23:dd:44:2d:48:3e:
58:42:d5:ab:1b:0b:48:1d:cb:78:05:64:ae:9f:df:
e9:29:70:85:7f:39:23:53:f0:5b:5b:e2:13:cf:db:
c5:79:3c:12:e0:95:33:b9:ff:e3:53:92:62:f0:14:
73:96:3b:78:51:b6:e1:5d:7b:bb:52:1e:e6:21:ef:
9e:00:c0:4d:af:d5:d6:1a:3e:56:eb:9c:b4:46:b5:
21:78:0a:a4:65:92:70:d7:68:01:65:f2:46:0e:9e:
e8:84:55:fe:60:2e:7c:bb:17:47:1d:69:34:dc:64:
40:a2:89:3c:0a:ec:f5:34:67:37:7b:65:ad:fb:a1:
11:6a:01:8d:87:54:6a:f9:90:9b:46:fb:9f:ad:2d:
88:ae:79:b3:8c:39:c1:ec:f4:7c:73:b9:c5:cc:60:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:87:B5:9A:EB:A7:08:A1:34:8C:FA:B6:57:8C:37:A2:42:B3:E0:F8
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393135383a3a2f34382d3438203d3e20313937353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9158::/48
Signature Algorithm: sha256WithRSAEncryption
2e:20:5d:c6:1e:93:96:f4:af:08:4b:c5:cb:10:eb:5d:22:23:
45:2c:8d:12:ac:62:e7:3d:66:96:58:52:cb:5d:9c:4f:31:48:
6f:db:4c:da:bf:11:d2:3b:97:bb:20:ec:1a:1d:09:b5:cf:65:
62:74:40:74:d9:5a:f8:45:02:ab:0b:1e:77:40:1e:d0:91:a8:
0b:b8:4a:1f:21:71:62:1c:72:ac:43:cd:a1:14:92:62:ad:82:
6f:50:a2:3b:54:97:48:10:f0:b7:e1:cb:17:8f:a2:a7:ee:15:
ea:65:02:6f:e8:32:82:db:dd:cf:42:05:d2:aa:12:e5:5e:5a:
64:81:21:47:c8:2b:0f:b2:c1:2d:9c:71:ab:10:e1:69:b9:ab:
ae:d5:4b:37:8f:3e:50:c4:e2:8d:68:75:06:20:d6:cb:b3:37:
25:40:6e:02:f7:94:60:d1:a5:67:65:9f:13:22:58:4e:c9:b7:
d8:93:b3:ae:08:86:bf:be:5c:43:c5:26:00:ef:aa:61:75:81:
95:0b:30:43:8d:d6:cc:62:e1:31:0d:2d:28:d9:19:18:34:3a:
24:28:7e:86:c3:10:5c:2a:01:25:bf:bd:55:58:22:53:c6:c8:
8b:b2:0a:a1:83:ad:51:98:50:0b:d5:e6:71:db:97:cf:77:94:
1a:9c:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:12 2025 by rpki-client