Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136343a3a2f34382d3438203d3e20323130343735.roa
File: 326130353a646663313a393136343a3a2f34382d3438203d3e20323130343735.roa (raw, json)
Hash identifier: a8rFXqUe7AKSTUZAi/cBj+CyKq4TJi8Q95WlC/c3zpo=
Subject key identifier: C3:5C:5A:9B:91:D2:12:5B:BA:9A:46:BB:B5:9E:B5:28:D1:26:F1:10
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 588F9D01FD748454DB93BA0382D03A1E2E7C5EF2
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136343a3a2f34382d3438203d3e20323130343735.roa
Signing time: Tue 05 Dec 2023 18:12:21 +0000
ROA not before: Tue 05 Dec 2023 18:07:21 +0000
ROA not after: Tue 03 Dec 2024 18:12:21 +0000
asID: 210475
IP address blocks: 2a05:dfc1:9164::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8f:9d:01:fd:74:84:54:db:93:ba:03:82:d0:3a:1e:2e:7c:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Dec 5 18:07:21 2023 GMT
Not After : Dec 3 18:12:21 2024 GMT
Subject: CN=C35C5A9B91D2125BBA9A46BBB59EB528D126F110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:7c:5e:8f:48:c5:28:8b:93:ff:30:01:4a:
43:7e:15:de:eb:66:77:59:c3:e7:fd:6f:5e:7c:c4:
ae:0f:a3:f9:b7:32:83:db:a9:4a:47:af:d6:81:7a:
73:bc:53:df:9b:ff:f1:ad:9b:59:92:f6:87:0b:57:
08:ee:70:64:f1:ee:7a:4f:4c:25:17:2c:24:4c:2f:
83:a2:3d:bf:6f:fc:7d:aa:7f:f6:bc:4e:51:c7:9a:
95:82:de:42:24:ba:8a:58:c1:a4:6b:e6:91:ea:77:
80:72:ba:4d:c4:af:d3:71:f9:94:63:6c:92:45:b5:
77:b5:83:32:bd:4f:2c:b0:ff:6f:14:15:e3:57:18:
62:36:94:cb:1b:34:f8:47:d7:7a:4c:7b:52:df:0a:
07:0c:80:4c:d1:08:66:67:78:1d:8d:20:83:a2:2b:
7f:29:43:69:d7:68:e0:93:6d:39:23:db:b9:8e:f2:
2b:93:28:a7:c1:38:15:a1:9b:a6:e1:b6:4a:47:7a:
2d:dd:62:fd:e7:b1:a0:5b:a0:c4:37:5c:c5:ec:26:
8d:5e:9f:ee:7d:b8:ba:89:22:16:d6:0a:ab:d5:39:
13:68:bc:5d:8d:2e:1d:e0:26:47:2d:2a:02:55:a1:
28:39:0e:3d:78:94:8f:d1:80:b3:f2:8c:96:b0:0c:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:5A:9B:91:D2:12:5B:BA:9A:46:BB:B5:9E:B5:28:D1:26:F1:10
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136343a3a2f34382d3438203d3e20323130343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9164::/48
Signature Algorithm: sha256WithRSAEncryption
1a:4d:d2:8b:42:5c:4f:68:62:8f:05:8b:b4:e8:32:99:73:ac:
4e:2d:a4:cb:ae:53:1b:d5:16:ad:a8:c7:8c:39:6e:67:a5:19:
a7:0f:3c:17:f8:77:96:11:50:e3:2d:4a:05:ec:55:8f:5b:1b:
14:e9:c4:e0:ef:58:5c:4f:5f:e6:66:8c:ef:6f:64:33:82:ba:
fc:b2:b0:9c:e6:d1:0f:b2:8f:d1:88:61:e6:6b:d0:9d:b6:2a:
cf:f3:31:04:c9:b3:2b:0b:f1:82:dc:1c:63:07:9b:d3:3d:b7:
d6:44:2a:78:46:5d:37:8c:9d:2d:3d:5c:28:b1:46:4a:6a:af:
c5:3e:36:57:a0:b4:01:21:b2:92:66:df:2a:55:4c:fc:6d:e9:
c6:8d:96:65:f3:19:0c:05:a3:91:53:b0:6e:d2:da:ab:26:0f:
90:5c:8b:06:58:31:81:71:56:9c:a2:e3:68:6c:c1:37:2a:dc:
04:4a:7a:81:55:bf:db:28:ad:38:75:86:97:50:43:83:61:90:
7f:d4:c5:35:41:66:1a:0b:bf:0a:ac:dc:61:bc:13:a0:6f:b9:
86:eb:29:ea:48:e3:1b:18:40:ed:5c:f8:8e:6d:6d:bd:2c:64:
b8:cb:34:ab:b6:7d:fe:8b:ac:f9:2a:86:dc:7a:1f:b2:a0:64:
72:d7:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:09 2025 by rpki-client