Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137383a3a2f34382d3438203d3e20323135393738.roa
File: 326130353a646663313a393137383a3a2f34382d3438203d3e20323135393738.roa (raw, json)
Hash identifier: 27PgVpfQMyqC3f/OST2t4Ic54/4djMJdcdrlV+AwUlc=
Subject key identifier: 62:9C:C4:65:45:1D:6D:85:4F:FE:F1:4E:12:7B:85:CB:76:32:1D:A0
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 21E78746D53E3A8BE4FF93DEC05E00B8434E2814
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137383a3a2f34382d3438203d3e20323135393738.roa
Signing time: Mon 11 Dec 2023 17:24:53 +0000
ROA not before: Mon 11 Dec 2023 17:19:53 +0000
ROA not after: Mon 09 Dec 2024 17:24:53 +0000
asID: 215978
IP address blocks: 2a05:dfc1:9178::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e7:87:46:d5:3e:3a:8b:e4:ff:93:de:c0:5e:00:b8:43:4e:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Dec 11 17:19:53 2023 GMT
Not After : Dec 9 17:24:53 2024 GMT
Subject: CN=629CC465451D6D854FFEF14E127B85CB76321DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:8c:45:d8:41:36:5e:01:ef:8a:09:39:f2:
23:3f:47:8a:de:0e:0a:aa:4a:d4:b6:e2:4c:eb:51:
5c:28:37:2f:65:65:60:03:50:3f:02:c7:34:52:4b:
52:10:84:a6:ba:fc:53:de:94:74:82:ce:e2:7d:0a:
f6:73:18:ba:f3:09:9f:26:96:67:f2:61:c3:cb:d7:
a7:a5:ea:1f:b3:f2:79:da:8c:84:2c:28:95:e3:22:
f3:fc:9e:4a:03:ff:95:f1:4d:38:c6:67:20:79:5d:
b2:60:ae:99:4a:3b:df:f0:c7:15:94:f5:9c:73:bd:
1c:26:89:79:de:c4:2f:9b:e7:12:6a:14:42:31:82:
98:00:5b:7b:89:2e:47:10:d5:ef:9c:ef:2c:d5:86:
15:51:d0:1b:f5:35:ae:c8:6d:e0:4d:ae:eb:62:56:
d9:90:b8:54:0e:91:6a:25:40:b5:0a:1b:b4:01:56:
a6:37:ca:ae:47:f3:1e:64:03:c8:40:48:82:83:35:
f1:70:bf:20:61:8f:26:47:49:77:18:28:29:9b:d3:
45:3e:54:d4:94:14:1d:05:1f:4b:87:6c:0b:db:a6:
77:a0:0b:81:ed:43:16:5b:12:ae:69:7d:dc:91:8d:
cc:f8:4b:db:5c:41:a4:cd:b6:0c:82:ed:26:4c:a1:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9C:C4:65:45:1D:6D:85:4F:FE:F1:4E:12:7B:85:CB:76:32:1D:A0
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393137383a3a2f34382d3438203d3e20323135393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9178::/48
Signature Algorithm: sha256WithRSAEncryption
53:96:f8:2e:c6:ca:09:59:69:ea:2b:aa:d5:51:13:67:f2:a5:
68:12:ae:3a:31:47:45:4e:5a:9b:ab:8c:ac:48:35:c4:14:30:
62:91:69:77:8f:79:a7:c3:c3:73:20:59:5f:57:af:46:d6:97:
2e:59:ff:de:90:4b:d2:14:ef:bc:43:8b:5d:7d:a1:a3:97:74:
c5:da:21:f7:0b:04:7c:84:83:b9:6c:97:62:4e:52:8e:4e:6a:
aa:72:c3:44:43:a1:d2:50:d4:ec:f4:75:02:e6:68:cd:a4:07:
5f:87:fa:aa:80:98:97:e1:83:6b:fa:c2:39:5a:c3:87:b6:5c:
3a:45:88:bc:67:a6:ca:ee:b3:ed:67:8b:d1:2e:88:81:27:3f:
db:48:a5:7d:73:af:2c:22:62:e9:8f:7d:54:34:40:1b:09:03:
50:c6:95:f1:d9:3b:81:d5:9e:7b:2b:68:51:64:2f:19:82:00:
b5:53:86:da:0a:1f:22:de:fb:22:18:a1:3b:a5:ea:a6:e5:e8:
40:71:c4:db:4d:34:ea:09:2b:dc:35:87:b5:ea:f1:ad:c9:d4:
75:e9:f7:3d:f1:77:f1:8f:6c:7e:94:99:5a:c7:4c:d8:ce:bd:
ef:13:8d:89:0b:1f:e0:3c:a4:eb:9a:92:5e:22:1d:ce:48:44:
a8:07:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:32 2025 by rpki-client