Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139633a3a2f34382d3438203d3e203434383137.roa
File: 326130353a646663313a393139633a3a2f34382d3438203d3e203434383137.roa (raw, json)
Hash identifier: 1obnU7eZPbK9lf8p5lrvGqYFU1HoiwSjIroZOIrpWA0=
Subject key identifier: 5C:41:19:77:A5:7F:EA:89:96:4E:43:50:3E:D6:51:8F:AB:8B:33:35
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 1A249B82FE0BA1068A1528B63BF90BC52499DF38
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139633a3a2f34382d3438203d3e203434383137.roa
Signing time: Mon 01 Apr 2024 09:31:43 +0000
ROA not before: Mon 01 Apr 2024 09:26:43 +0000
ROA not after: Mon 31 Mar 2025 09:31:43 +0000
asID: 44817
IP address blocks: 2a05:dfc1:919c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:24:9b:82:fe:0b:a1:06:8a:15:28:b6:3b:f9:0b:c5:24:99:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Apr 1 09:26:43 2024 GMT
Not After : Mar 31 09:31:43 2025 GMT
Subject: CN=5C411977A57FEA89964E43503ED6518FAB8B3335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:cd:d8:45:de:96:dc:fe:4d:bb:27:44:96:
ef:40:30:a6:d1:14:21:05:37:40:54:73:e5:bd:d1:
d2:4b:1b:c4:ab:c7:d0:dd:a1:e9:8f:d2:99:3a:d0:
3a:2a:dc:0e:05:7e:30:0c:71:09:ba:51:d1:99:b4:
0c:ab:5e:51:64:0b:70:e9:1e:39:92:a1:9d:0e:f5:
be:f6:88:90:3d:f1:a6:c0:91:9e:9b:cf:f0:e4:f0:
f7:6d:24:c9:63:9e:a9:3b:8d:02:fd:0b:eb:2f:62:
5b:30:ad:b7:8e:29:eb:70:43:13:29:0b:a3:d7:00:
59:d4:bd:41:c1:40:09:ea:e3:a4:cc:23:e4:87:fe:
af:57:75:52:a4:3c:c3:03:e3:e5:73:35:e3:46:86:
72:cf:8d:da:0a:46:8c:82:ef:8b:63:85:e3:11:72:
be:31:18:49:86:83:1e:b2:c8:a3:c0:0b:53:5e:cd:
7b:33:9a:36:95:e6:6b:56:ed:73:f5:d5:2f:66:70:
4b:bb:34:47:f1:97:4b:5a:5b:c9:72:63:79:f6:c7:
aa:ba:ae:0e:75:ec:dd:d3:14:ba:8d:51:01:82:cc:
0b:83:f6:a9:77:f1:ac:9d:78:cd:09:9c:ea:9c:fa:
c2:90:0e:37:55:87:7c:f7:6a:f9:fb:4e:4e:d3:a2:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:41:19:77:A5:7F:EA:89:96:4E:43:50:3E:D6:51:8F:AB:8B:33:35
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393139633a3a2f34382d3438203d3e203434383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:919c::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ca:d2:79:e2:e1:1b:90:5b:18:6a:4f:c0:30:7c:57:a1:c6:
99:79:8e:56:97:9c:04:72:a5:39:37:e7:b7:e0:e7:4b:a9:57:
7d:e3:c1:86:8e:47:b8:c5:c8:17:f8:70:22:3e:6e:44:54:cd:
a7:de:eb:c4:b2:e2:99:8a:27:04:c7:83:32:af:eb:f5:6e:02:
a9:4e:61:e3:a0:67:5c:ef:ad:fd:32:50:4a:56:d0:a2:8a:de:
00:ac:ea:9b:e2:10:ec:e0:5d:a9:6c:83:72:5b:40:58:6c:8b:
12:4e:7c:3e:1f:d9:52:f1:f0:70:b8:d3:06:c1:9a:63:76:01:
8f:1c:c0:b9:f1:72:ac:09:e1:64:6a:c8:29:d8:31:27:8a:1d:
82:95:dc:9b:ea:35:86:bf:35:17:33:c2:57:8d:19:a0:90:1f:
9d:17:56:cd:19:3d:7a:fa:d6:4c:9f:a6:0a:20:a3:ae:d6:2f:
f0:f3:55:30:52:16:49:5c:25:c5:92:32:12:8c:1a:b3:35:70:
1a:b9:3d:9e:b3:2c:1d:30:b9:1d:87:3c:d9:aa:16:a5:ef:3c:
a1:37:27:78:64:7e:e1:22:95:04:1e:3d:40:6a:c4:a4:13:89:
b2:f1:58:f0:44:a7:e7:81:3f:bd:cb:b1:f0:47:f7:f0:b1:ab:
6d:ea:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:33 2025 by rpki-client