Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139623a3a2f34382d3438203d3e20323136303431.roa
File: 326130353a646663313a393139623a3a2f34382d3438203d3e20323136303431.roa (raw, json)
Hash identifier: Aj9prY3WqK4d32kikJ4oOlY9yM9GMOKFEoUi/aDgACQ=
Subject key identifier: 6E:3E:6E:79:18:EE:45:D4:8A:27:24:21:2E:57:02:70:69:B6:FD:23
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 17183D2FC32D1005AB6223E8310AFF946F4E2424
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139623a3a2f34382d3438203d3e20323136303431.roa
Signing time: Wed 10 Jan 2024 18:15:33 +0000
ROA not before: Wed 10 Jan 2024 18:10:33 +0000
ROA not after: Wed 08 Jan 2025 18:15:33 +0000
asID: 216041
IP address blocks: 2a05:dfc1:919b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:18:3d:2f:c3:2d:10:05:ab:62:23:e8:31:0a:ff:94:6f:4e:24:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Jan 10 18:10:33 2024 GMT
Not After : Jan 8 18:15:33 2025 GMT
Subject: CN=6E3E6E7918EE45D48A2724212E57027069B6FD23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:f3:4d:92:ca:42:0f:bd:3d:bd:af:76:50:
3f:d8:5b:52:65:c1:3b:f2:8f:f7:9b:5a:d3:03:fc:
9a:3d:3d:49:ea:5d:df:82:ed:6e:ff:80:76:aa:6a:
b0:4a:03:d4:70:01:12:c7:43:da:93:3d:ba:f7:3a:
f7:eb:3e:de:b2:2c:9d:e3:fc:ce:53:0c:7a:36:ed:
96:c5:ae:5b:34:a1:f5:c9:6e:ea:57:39:76:95:ad:
94:7c:f8:78:c9:f0:38:35:d3:81:16:c8:97:3f:16:
4e:87:cd:89:4e:a8:d4:37:10:e1:47:f2:53:15:30:
d3:db:9d:cc:3c:0f:85:b5:3d:73:5a:fe:9d:52:a5:
4c:07:57:33:eb:7c:19:9f:0d:dd:58:a1:2c:14:a3:
a9:e3:22:33:0d:b4:e9:16:33:8f:58:92:66:2c:3c:
29:80:0e:2d:e9:82:2a:d0:55:32:f3:67:34:f8:22:
23:50:94:f0:cf:c3:de:60:e1:50:2d:8e:31:cc:98:
7e:50:c3:40:05:4c:2e:37:32:3e:ae:0f:89:5a:1c:
80:a5:24:33:ce:7c:d9:7e:b9:8a:b4:a3:c6:a4:d4:
a3:d3:5d:a1:ea:3b:ad:b4:a9:47:c5:65:a3:12:b3:
fd:f6:29:31:5f:74:b4:ee:ed:5b:aa:62:97:10:67:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:6E:79:18:EE:45:D4:8A:27:24:21:2E:57:02:70:69:B6:FD:23
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139623a3a2f34382d3438203d3e20323136303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:919b::/48
Signature Algorithm: sha256WithRSAEncryption
a9:80:7a:14:00:19:9b:d2:d3:b5:23:d8:2a:c8:88:d9:eb:46:
b6:35:8c:44:ed:39:13:55:3c:76:53:01:db:68:63:3f:b9:67:
ce:c2:e9:c2:90:97:c1:fc:65:9f:c6:23:d5:f1:fc:a1:45:c1:
58:e9:89:01:b2:54:86:c4:5e:a1:b2:15:71:85:eb:0a:1f:db:
25:b4:a3:02:2b:47:de:ef:f8:14:0e:b5:38:89:28:f8:ba:14:
6e:9c:34:bf:07:5f:19:e1:6e:92:ca:17:05:99:a2:21:b4:87:
b0:6f:83:7d:7f:6b:28:88:67:91:84:8b:f5:31:85:63:ed:81:
f6:d9:20:49:6b:dc:7b:86:8f:dd:63:6c:26:0c:2e:ae:36:95:
c9:ba:79:a4:d3:86:a3:dd:3b:ec:06:6b:3c:c2:07:d7:a3:7b:
48:ad:dd:e3:c8:5e:6d:4e:70:8a:f3:9a:b4:a6:9f:dc:b4:3d:
c9:20:68:b4:5c:de:01:31:7d:71:59:4b:f3:96:16:2a:c7:a3:
5b:6a:49:a4:aa:48:81:e4:44:1b:72:64:fb:3f:f6:33:33:66:
99:9c:2e:df:2f:6f:2d:f1:be:88:8c:8c:31:34:a7:b7:fc:d7:
0c:d7:42:32:03:aa:ab:9b:0e:af:a4:5a:35:23:61:af:c2:a9:
83:be:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:40 2025 by rpki-client