Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393135613a3a2f34382d3438203d3e20333933353737.roa
File: 326130353a646663313a393135613a3a2f34382d3438203d3e20333933353737.roa (raw, json)
Hash identifier: 17SO4VsD7f3sOYsCDFJmskbk3dg9Tn2KbbNYbLVbk9k=
Subject key identifier: D0:23:E9:8E:A4:98:83:FF:74:DE:36:7C:60:FC:D3:F5:98:4B:62:33
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 330341253D0718A3C4D7C39E98DC086444C6CBFE
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393135613a3a2f34382d3438203d3e20333933353737.roa
Signing time: Mon 04 Dec 2023 06:41:20 +0000
ROA not before: Mon 04 Dec 2023 06:36:20 +0000
ROA not after: Mon 02 Dec 2024 06:41:20 +0000
asID: 393577
IP address blocks: 2a05:dfc1:915a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:03:41:25:3d:07:18:a3:c4:d7:c3:9e:98:dc:08:64:44:c6:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Dec 4 06:36:20 2023 GMT
Not After : Dec 2 06:41:20 2024 GMT
Subject: CN=D023E98EA49883FF74DE367C60FCD3F5984B6233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:5e:f5:26:c0:46:19:d6:72:8b:2a:8d:8e:
7c:38:ae:88:8e:a9:05:10:3c:cb:6d:a6:bf:50:f2:
36:18:f1:b3:1c:11:2e:21:10:36:ab:3d:9f:08:8c:
8c:ba:c3:eb:f5:e8:70:8f:70:fb:db:2a:86:74:6b:
b4:3a:25:8b:a4:9d:7b:aa:6b:98:5d:de:a9:2a:0e:
41:63:36:9b:84:8d:40:66:a5:3f:2f:2f:4a:f0:4d:
7b:f3:6d:86:49:17:6e:ba:09:4d:68:ab:ac:8a:08:
fd:a9:0d:8c:81:cd:b8:b8:64:18:54:d9:ef:aa:b5:
d3:60:f2:b6:d7:2e:e2:42:5d:94:02:db:62:b2:0a:
a3:1c:76:89:b3:07:3a:3f:ca:39:e3:5c:0e:1a:c5:
7d:69:71:07:0f:f9:a0:38:ec:1e:b6:e0:f4:ae:4b:
e9:f1:24:dc:40:a4:16:f0:53:d7:9e:43:f9:09:a5:
28:7c:52:37:80:18:5d:a2:62:02:84:8f:2f:bb:3f:
ad:c0:21:3d:8d:43:ed:7c:c7:66:7f:0c:08:a1:1b:
79:e5:46:3f:5e:75:1e:c1:4d:a5:51:6a:28:39:71:
d7:9d:ce:85:4a:51:56:bf:0f:20:0b:04:c7:0b:cb:
e9:6c:1a:5a:bb:24:96:83:e4:0a:5f:39:5c:a9:ac:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:23:E9:8E:A4:98:83:FF:74:DE:36:7C:60:FC:D3:F5:98:4B:62:33
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393135613a3a2f34382d3438203d3e20333933353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:915a::/48
Signature Algorithm: sha256WithRSAEncryption
a9:e6:d8:0f:fe:63:f7:95:39:64:43:04:95:6a:a2:64:82:c9:
ab:9e:3a:35:86:57:15:fd:f0:95:49:fc:ff:69:ef:cb:9f:f7:
17:b2:11:01:aa:ff:cb:11:b7:19:8c:43:96:f4:94:9d:b4:f4:
7c:ed:8d:61:2f:b0:29:6e:8e:e3:87:c3:fb:58:11:e3:10:5d:
ae:0b:c3:18:ce:93:67:7e:c9:04:1c:e6:71:5d:f9:02:60:dc:
21:fd:7e:35:d4:4b:d0:80:30:98:d5:7a:b0:6d:02:ba:40:c0:
63:c9:37:95:f3:7a:e9:27:5d:68:03:17:f8:b4:5e:a8:d7:22:
b3:a4:a9:22:bc:e3:ef:97:94:59:b3:99:d7:4d:80:0e:0d:93:
55:a5:15:d7:21:a9:d1:19:05:ca:e9:80:3c:8d:86:46:73:f6:
aa:db:67:e7:aa:bd:fc:21:12:a6:ca:bd:bf:12:38:f1:41:ac:
4f:1c:d5:29:60:64:fb:b2:35:20:53:e1:e4:2e:dc:25:e7:f9:
a4:ae:cd:42:47:9e:1c:70:7b:56:9c:52:6f:39:89:5c:35:13:
1a:a2:4d:0b:d9:b9:ec:ef:bf:c7:4f:44:d2:73:57:79:57:b7:
5d:c3:07:24:73:f2:3d:a6:93:d9:d8:b0:2e:d1:ba:7a:91:c1:
8c:46:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:54 2025 by rpki-client