Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136383a3a2f34382d3438203d3e20313938353930.roa
File: 326130353a646663313a393136383a3a2f34382d3438203d3e20313938353930.roa (raw, json)
Hash identifier: ZOgH9Gkg+Up3LRxtr/k3RR98oWeqvSm55+eTopqZUvo=
Subject key identifier: 8C:7A:E7:58:E8:03:77:BE:6B:9D:8E:AB:36:ED:36:D4:F5:10:44:3B
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 74F4F380D7972A5A285F28DC52BDD739A05D86EB
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136383a3a2f34382d3438203d3e20313938353930.roa
Signing time: Tue 23 Jan 2024 14:24:36 +0000
ROA not before: Tue 23 Jan 2024 14:19:36 +0000
ROA not after: Tue 21 Jan 2025 14:24:36 +0000
asID: 198590
IP address blocks: 2a05:dfc1:9168::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f4:f3:80:d7:97:2a:5a:28:5f:28:dc:52:bd:d7:39:a0:5d:86:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Jan 23 14:19:36 2024 GMT
Not After : Jan 21 14:24:36 2025 GMT
Subject: CN=8C7AE758E80377BE6B9D8EAB36ED36D4F510443B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:4d:5f:67:13:f0:37:fe:c1:b2:f2:6c:a0:
c2:55:eb:ce:d4:23:ef:f2:1f:8a:48:51:6b:9d:16:
13:63:1b:98:a9:06:20:ff:db:d4:d8:ec:04:13:93:
94:0b:fe:01:1f:d9:d9:3c:d7:c6:a9:f2:0e:8d:02:
ec:1a:5f:b4:95:81:8a:2b:3c:31:b4:d4:d0:38:f6:
55:ed:3d:e7:33:c2:6d:2b:d4:50:8f:5a:57:ec:87:
7e:8d:d3:14:af:ac:49:c7:f9:99:e1:22:69:81:e5:
18:72:21:b7:92:57:74:27:14:75:11:06:5a:30:83:
e5:a4:2c:d3:65:6e:40:72:5d:ea:9d:06:d1:ef:87:
8d:39:f0:df:2c:b3:3c:4a:cc:4c:1d:1b:d3:3f:32:
77:b3:1e:e8:66:db:14:57:79:33:4d:e5:69:e7:f2:
11:e6:f6:93:ea:ef:0e:45:65:42:aa:aa:db:11:3f:
6d:1c:4f:77:b7:54:25:8e:1c:70:d4:14:3d:e6:33:
79:37:6a:75:1e:23:6a:da:72:2f:7f:44:29:e0:8c:
fe:31:cb:c8:ac:e0:95:09:33:52:ae:70:df:53:3c:
c8:e3:cb:3a:f7:08:68:80:61:b9:d9:4a:f0:ae:7c:
97:8b:d6:fc:6c:fc:67:4a:e2:8a:1a:d8:46:9c:41:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:E7:58:E8:03:77:BE:6B:9D:8E:AB:36:ED:36:D4:F5:10:44:3B
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136383a3a2f34382d3438203d3e20313938353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9168::/48
Signature Algorithm: sha256WithRSAEncryption
63:0a:c1:1a:6c:a0:15:03:99:e1:8e:f8:52:64:4e:99:9e:82:
10:24:53:2c:fa:cd:d8:8e:8a:d6:d1:cd:be:4f:2f:7b:0e:3f:
ab:c6:64:5d:2f:47:5d:a6:f0:8e:4c:0b:13:46:18:46:cf:8c:
5b:ae:9e:48:bc:bd:20:91:c0:05:f7:68:ed:f2:02:b8:eb:dd:
5c:1e:db:63:7d:57:3c:69:b5:d1:3b:46:1f:4f:3c:f7:7c:7d:
4a:9c:ad:82:c1:4a:5c:0d:1a:89:e3:a9:36:a0:44:66:04:78:
92:12:14:ec:a1:5a:b8:ba:2d:9b:11:f3:78:37:85:ba:7a:65:
0d:50:3a:06:4a:cf:18:4e:c9:f8:88:55:62:ca:0b:ea:6f:1b:
01:c9:70:cc:39:b1:b4:8b:d1:c0:b0:b3:c2:d5:03:03:65:96:
6a:36:d1:29:20:5e:36:23:d8:ad:d9:88:2d:8e:e6:2d:2c:01:
05:b7:17:d9:ab:ec:e1:bb:2d:76:ab:ec:0f:a9:f0:1e:6c:a6:
a5:4b:12:4e:c3:4e:cc:e3:10:de:c3:95:6e:7e:00:a1:be:c8:
5e:1d:e9:9c:7b:b4:c6:6b:be:a0:ac:6a:bf:05:ce:a3:cf:18:
19:d7:32:5d:bf:f7:bb:0a:67:cf:17:a5:75:1e:9e:a0:0e:b5:
dc:da:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:28 2025 by rpki-client