Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa
File: 326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier: nM1x/6i5ovdODqd+kHclQd1JSnKjhlv7tJfnF1aNyD8=
Subject key identifier: 5D:2B:8D:85:44:CB:18:5E:AE:AB:D7:5C:71:02:CC:70:2C:C5:80:59
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 6D5013248D0F8EADA46E339E4F026D192559CFCD
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa
Signing time: Sun 26 Nov 2023 11:08:44 +0000
ROA not before: Sun 26 Nov 2023 11:03:44 +0000
ROA not after: Sun 24 Nov 2024 11:08:44 +0000
asID: 47272
IP address blocks: 2a05:dfc1:9200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:50:13:24:8d:0f:8e:ad:a4:6e:33:9e:4f:02:6d:19:25:59:cf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Nov 26 11:03:44 2023 GMT
Not After : Nov 24 11:08:44 2024 GMT
Subject: CN=5D2B8D8544CB185EAEABD75C7102CC702CC58059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:41:6d:74:0d:8a:81:0c:b2:b5:00:ad:2f:
ef:56:29:0e:11:17:98:dd:3d:d0:86:2c:54:e0:18:
81:f9:34:75:d6:d6:43:66:9e:5b:0d:72:77:a9:c9:
d6:e9:7f:16:7c:9b:a2:9b:98:36:6f:87:1b:43:98:
5c:e3:b3:5c:82:cf:dd:8d:1e:3e:08:96:ea:46:e5:
92:9f:26:fa:59:1e:61:d5:f6:07:cc:e3:5a:b3:5e:
4a:5b:3b:4c:9c:41:eb:89:a9:da:01:13:1a:b8:cc:
4a:c2:8e:d4:4b:1f:a4:80:93:6c:33:f3:02:32:2e:
92:91:f9:65:4c:b8:cd:df:11:0b:3b:0f:cc:35:63:
22:24:0c:af:2e:ce:5b:d9:67:4a:03:ba:40:69:5e:
19:4a:ef:3d:db:41:21:d6:0f:e2:00:1d:45:44:b8:
1e:c4:5f:18:63:49:6d:0b:81:56:38:22:cc:2a:cd:
32:b9:f3:97:57:d8:a8:a4:22:50:6f:eb:16:a2:9b:
e4:fc:a1:91:4c:cc:fe:e0:fc:7c:48:f2:7b:c8:82:
1a:c6:71:9f:a1:26:4b:5d:d4:08:25:0d:80:cc:10:
c4:dc:d3:fd:04:ec:7c:cd:49:04:42:7b:d4:0a:9a:
ed:ce:5c:3a:ea:38:53:4b:ec:a9:c8:47:31:a1:2a:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:8D:85:44:CB:18:5E:AE:AB:D7:5C:71:02:CC:70:2C:C5:80:59
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9200::/40
Signature Algorithm: sha256WithRSAEncryption
73:d1:26:b2:23:15:d6:52:50:58:a9:b8:9f:fa:5d:51:01:7d:
db:30:cc:c7:84:00:54:15:02:10:a9:e0:9e:05:4a:03:a6:89:
7a:1c:91:71:d0:98:61:f2:77:53:ee:bb:e3:84:1a:da:82:74:
6e:8d:f0:de:4f:fa:3b:4e:52:b3:c8:44:e4:b5:15:62:ad:ec:
1b:98:05:40:09:59:35:70:ac:96:e0:a8:79:a9:e2:36:10:71:
82:62:c1:f8:83:4b:21:f4:88:93:fc:e8:4c:f9:49:93:4d:af:
44:af:bc:88:40:5d:a5:7e:2d:62:26:5d:1a:6f:bd:ae:53:6c:
f9:a9:1f:98:03:fc:b5:11:62:da:ef:fe:4a:ba:97:0e:aa:e1:
46:54:50:d7:0b:b8:ea:68:cf:8a:48:d9:dc:45:ff:81:d9:3d:
8f:4d:f7:76:5d:92:a0:e1:4e:14:e9:a2:62:42:1d:1b:38:ad:
96:ef:48:1f:ad:2f:da:6b:8c:ce:0c:f9:01:49:98:c4:7f:af:
8c:15:3a:15:ba:f2:19:d6:6f:ab:96:a4:30:9d:0a:23:22:fd:
de:0a:42:de:e4:a3:3d:a3:ae:11:b9:30:61:8e:92:11:59:eb:
0c:8a:7e:14:93:2c:42:71:ae:c8:80:54:57:45:3c:32:8e:b0:
fd:9c:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:09 2025 by rpki-client