Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161633a3a2f34382d3438203d3e20323035323131.roa
File: 326130353a646663313a393161633a3a2f34382d3438203d3e20323035323131.roa (raw, json)
Hash identifier: D+PxwfeknBZMW7iqkeYLHL+9CZJ4v8nqI5FDlLSssfo=
Subject key identifier: F3:1A:66:56:8E:6D:7C:C2:49:78:46:5F:8E:E9:AB:37:D4:4E:37:91
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 4629C0817E63A7B1EDA74BB80775F17DC97D91B7
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161633a3a2f34382d3438203d3e20323035323131.roa
Signing time: Mon 08 Apr 2024 19:32:51 +0000
ROA not before: Mon 08 Apr 2024 19:27:51 +0000
ROA not after: Mon 07 Apr 2025 19:32:51 +0000
asID: 205211
IP address blocks: 2a05:dfc1:91ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:29:c0:81:7e:63:a7:b1:ed:a7:4b:b8:07:75:f1:7d:c9:7d:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Apr 8 19:27:51 2024 GMT
Not After : Apr 7 19:32:51 2025 GMT
Subject: CN=F31A66568E6D7CC24978465F8EE9AB37D44E3791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:9a:01:e1:ec:2d:31:36:e6:0d:5b:34:04:
5c:a7:d4:6f:fe:19:d7:87:d7:fb:3c:d1:87:27:9c:
72:a5:d4:a4:53:24:1c:ff:78:4c:31:ff:64:c8:c7:
db:8f:14:34:34:74:45:e8:fa:7a:5c:ce:52:23:d1:
c7:01:f4:93:8a:cb:1a:be:7d:f5:5e:43:1a:cf:5f:
34:ab:b7:7f:cd:46:b5:72:bc:2d:b7:ec:d9:06:f3:
5c:ea:f8:6e:f0:d0:49:0c:e6:23:7c:52:51:57:8f:
26:7a:9e:6d:50:3f:14:ec:d4:60:17:18:cb:b6:7a:
4a:98:76:58:69:6d:d5:93:2a:37:31:76:1e:d5:a4:
09:19:c5:3d:48:65:d6:2d:07:bc:3f:be:41:d8:d0:
c7:06:24:b0:d8:67:29:44:32:7a:d9:d4:fa:45:55:
12:4f:16:b2:c0:eb:0b:62:a5:97:28:46:73:9b:58:
1b:8c:56:52:74:18:11:e4:fa:44:a9:0a:88:b9:ba:
5f:a4:9e:49:19:f1:f1:1c:e3:93:a1:79:51:e8:59:
96:66:70:a2:11:be:61:4a:d5:bf:b4:64:be:db:04:
ba:89:91:d8:fb:40:b5:bb:0f:19:8b:1a:24:45:0b:
08:12:9b:ba:37:b6:aa:ff:ab:d2:7c:ae:41:65:71:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1A:66:56:8E:6D:7C:C2:49:78:46:5F:8E:E9:AB:37:D4:4E:37:91
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161633a3a2f34382d3438203d3e20323035323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:91ac::/48
Signature Algorithm: sha256WithRSAEncryption
45:09:ab:6f:a3:55:fd:31:c2:77:fe:0c:8f:4f:1a:e5:38:cb:
3a:45:4e:5b:b5:59:f6:c0:2b:e8:b3:21:b2:0c:b4:5e:6e:58:
22:6c:e6:f4:8e:eb:a7:77:ba:69:d2:ad:dd:77:e5:7d:43:2a:
06:2a:92:ad:be:7c:2c:09:7b:24:b1:c2:8b:ac:01:fb:ef:e5:
a4:28:b9:f4:bb:c8:bf:62:ac:2f:f1:7d:34:c4:a0:71:a3:9d:
f3:a6:4d:e9:63:fe:1b:d8:a6:fc:22:3a:57:dc:a8:b7:3a:0b:
ff:dd:3a:10:4b:73:20:8f:6a:ab:d5:e5:58:87:b9:a8:8c:4c:
82:f5:8a:87:cf:1d:ed:4e:05:62:49:0d:6d:71:43:e4:e8:2b:
28:8c:88:26:e2:7a:b3:7f:a4:ee:05:f8:6e:e9:b6:43:28:90:
6a:58:1f:9a:f2:79:f0:25:0a:8e:cc:88:99:f4:50:e2:0e:d0:
f4:c4:00:8d:b6:e5:66:b6:d6:7f:6e:08:34:47:85:fb:55:ab:
7d:03:ce:01:e2:9b:87:2d:4f:25:3f:4f:a6:9b:7a:6f:ef:69:
f0:0f:5d:c2:61:e9:f9:d4:1c:d9:3e:4d:50:41:7b:4b:20:81:
51:17:e2:03:5a:a5:76:0b:ea:e2:01:aa:17:70:4e:03:63:e6:
cf:b7:32:de
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIURinAgX5jp7Htp0u4B3Xxfcl9kbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF
MDVFN0I3NjAeFw0yNDA0MDgxOTI3NTFaFw0yNTA0MDcxOTMyNTFaMDMxMTAvBgNV
BAMTKEYzMUE2NjU2OEU2RDdDQzI0OTc4NDY1RjhFRTlBQjM3RDQ0RTM3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4poB4ewtMTbmDVs0BFyn1G/+
GdeH1/s80YcnnHKl1KRTJBz/eEwx/2TIx9uPFDQ0dEXo+npczlIj0ccB9JOKyxq+
ffVeQxrPXzSrt3/NRrVyvC237NkG81zq+G7w0EkM5iN8UlFXjyZ6nm1QPxTs1GAX
GMu2ekqYdlhpbdWTKjcxdh7VpAkZxT1IZdYtB7w/vkHY0McGJLDYZylEMnrZ1PpF
VRJPFrLA6wtipZcoRnObWBuMVlJ0GBHk+kSpCoi5ul+knkkZ8fEc45OheVHoWZZm
cKIRvmFK1b+0ZL7bBLqJkdj7QLW7DxmLGiRFCwgSm7o3tqr/q9J8rkFlcWLZAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU8xpmVo5tfMJJeEZfjumrN9RON5EwHwYDVR0j
BBgwFoAU9zfYG/vv/e7J7DK3uGQRLeBee3YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y3MzdEODFCRkJFRkZE
RUVDOUVDMzJCN0I4NjQxMTJERTA1RTdCNzYuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3
ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMTYxNjMzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzUzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BkawwDQYJKoZIhvcN
AQELBQADggEBAEUJq2+jVf0xwnf+DI9PGuU4yzpFTlu1WfbAK+izIbIMtF5uWCJs
5vSO66d3umnSrd135X1DKgYqkq2+fCwJeySxwousAfvv5aQoufS7yL9irC/xfTTE
oHGjnfOmTelj/hvYpvwiOlfcqLc6C//dOhBLcyCPaqvV5ViHuaiMTIL1iofPHe1O
BWJJDW1xQ+ToKyiMiCbierN/pO4F+G7ptkMokGpYH5ryefAlCo7MiJn0UOIO0PTE
AI225Wa21n9uCDRHhftVq30DzgHim4ctTyU/T6abem/vafAPXcJh6fnUHNk+TVBB
e0sggVEX4gNapXYL6uIBqhdwTgNj5s+3Mt4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:13 2025 by rpki-client