Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393166663a3a2f34382d3438203d3e20323135313737.roa
File: 326130353a646663313a393166663a3a2f34382d3438203d3e20323135313737.roa (raw, json)
Hash identifier: cyyh8+fGl1d/SqBeCOLa6jNfsfMTMm7oQskjJmp95mk=
Subject key identifier: 75:CA:84:61:16:03:30:98:65:9E:80:67:DC:17:E0:62:B0:16:35:62
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 3C9CB707155D02832E29EB3547B51046EA0A08C4
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393166663a3a2f34382d3438203d3e20323135313737.roa
Signing time: Sat 04 May 2024 08:48:59 +0000
ROA not before: Sat 04 May 2024 08:43:59 +0000
ROA not after: Sat 03 May 2025 08:48:59 +0000
asID: 215177
IP address blocks: 2a05:dfc1:91ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9c:b7:07:15:5d:02:83:2e:29:eb:35:47:b5:10:46:ea:0a:08:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: May 4 08:43:59 2024 GMT
Not After : May 3 08:48:59 2025 GMT
Subject: CN=75CA846116033098659E8067DC17E062B0163562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:07:57:90:ce:55:d4:3c:6c:59:8b:00:6f:
5a:00:e5:6e:1f:2d:0a:c8:28:54:f0:df:5d:0c:39:
72:75:1f:5e:c5:fc:0e:0c:cd:04:03:a8:bd:9b:0d:
7d:8f:3f:e9:d8:65:80:53:ce:66:d9:fc:38:1e:ce:
2c:d5:01:ef:6b:71:d8:64:20:c8:b7:18:02:06:a3:
ca:77:a9:92:fe:88:72:3c:9c:27:a1:74:ee:f2:bc:
6b:77:2f:5d:f8:08:39:74:b5:a0:6b:00:60:30:43:
5d:bb:be:02:a5:84:7f:25:bf:50:06:6e:53:eb:ab:
9c:a6:57:7c:c6:5f:f5:4b:da:97:1e:d9:10:81:4c:
dc:00:b3:33:c9:5d:df:ce:1a:46:71:cb:22:ba:88:
f0:dc:a3:8b:c4:25:fd:0d:a1:ba:a8:2a:9d:bd:48:
a8:76:2e:76:0e:74:d5:3c:8d:f9:a7:09:15:38:9e:
4c:ee:fd:c9:e1:cf:af:c2:9b:a7:d9:2c:af:f7:2e:
8d:a3:e4:cf:9d:49:ff:19:dd:07:6e:44:f4:48:9a:
8b:0a:f2:f1:67:1d:d6:25:fe:fe:e5:90:20:39:86:
22:7f:fe:84:c7:1f:90:3c:7c:44:14:7c:75:5c:3c:
c4:a7:ee:73:09:b1:fc:17:5c:a3:ce:93:47:6e:3b:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:84:61:16:03:30:98:65:9E:80:67:DC:17:E0:62:B0:16:35:62
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393166663a3a2f34382d3438203d3e20323135313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:91ff::/48
Signature Algorithm: sha256WithRSAEncryption
67:38:f0:4c:7f:7e:7b:64:1e:52:48:c6:e3:1a:0a:ab:5a:53:
4f:af:00:84:f0:49:2b:0e:93:dd:6a:33:45:fa:fd:b4:29:04:
1d:a7:fe:86:a3:3d:ad:05:db:bb:19:72:8f:1d:ed:14:b5:d5:
16:b7:f6:12:e2:d6:3c:75:07:67:b1:b1:c6:1f:b3:ae:fe:9d:
13:fc:77:f4:60:eb:2b:3f:62:8c:cd:ac:97:e4:a8:31:c1:27:
5d:fb:f8:a3:90:c2:f7:9d:f8:a4:67:4d:cb:49:9b:c7:fd:20:
a2:e7:3b:3d:5c:c4:a8:23:ca:43:c5:ca:bb:41:24:3c:3f:18:
38:cf:88:52:15:0b:5c:8d:d7:3a:1c:78:57:25:eb:ab:84:67:
44:50:b5:3f:b9:3d:2b:14:c0:e7:71:99:60:38:b6:b8:44:29:
cf:a3:23:d5:ac:4d:1c:45:3e:8d:74:2d:f1:e4:fb:1e:49:6b:
9c:de:58:6f:01:e6:66:2e:1b:80:73:ba:64:97:91:16:4c:fa:
a8:7a:ac:94:9b:18:97:6e:11:91:dd:4e:1c:4c:35:0f:0d:75:
3f:1e:3c:9a:97:76:6b:66:bf:5d:21:c2:9c:48:84:6a:e6:74:
59:a9:14:f9:97:e4:c9:ae:b1:8c:d5:0f:92:00:a7:10:38:93:
3b:e0:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:26 2025 by rpki-client