Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa
File: 326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier: /XMJ7etXS1hdyZiSRfsVhKNJ9A3aFwREqQW2o76l/Xc=
Subject key identifier: 54:5E:EC:B4:B5:B1:B3:55:AA:01:16:6E:58:06:60:A1:17:C8:65:EC
Certificate issuer: /CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Certificate serial: 3334CA4D136E9595DE9F9CB66A4CEAC71A3BEC8E
Authority key identifier: F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa
Signing time: Mon 02 Jan 2023 17:32:48 +0000
ROA not before: Mon 02 Jan 2023 17:27:48 +0000
ROA not after: Mon 01 Jan 2024 17:32:48 +0000
asID: 203843
IP address blocks: 2a0a:6040:a101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:34:ca:4d:13:6e:95:95:de:9f:9c:b6:6a:4c:ea:c7:1a:3b:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Validity
Not Before: Jan 2 17:27:48 2023 GMT
Not After : Jan 1 17:32:48 2024 GMT
Subject: CN=545EECB4B5B1B355AA01166E580660A117C865EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:9c:b2:c3:71:e1:fe:9c:ab:c8:9d:37:1f:
d9:78:ea:56:ec:2b:4b:a5:69:fb:26:b2:a7:9a:64:
0f:c9:30:81:4b:38:93:ba:69:60:dd:a9:12:af:b2:
77:a9:c3:22:1b:ad:a4:aa:db:88:72:79:6f:fd:54:
6d:65:09:f3:94:53:50:c6:9d:87:67:de:6c:88:05:
5b:d4:f1:a9:f4:d8:00:62:d5:44:82:13:f0:9b:b1:
85:4f:ad:67:5b:91:5f:f3:15:aa:da:3a:51:db:84:
a7:05:04:38:5f:88:64:e1:1a:f1:7e:22:34:ef:7d:
fc:d8:48:42:3e:c1:16:94:5e:51:4f:e2:e7:68:fc:
2f:e2:44:95:c1:70:9f:ff:10:a8:3c:95:39:a4:c7:
5a:86:18:96:bb:a9:07:b9:b2:f8:b2:4f:38:26:4d:
73:d1:42:a4:d1:9b:77:35:5b:45:b2:31:ff:0a:bf:
4e:8f:5c:ef:f1:71:62:77:bf:71:84:1a:a7:ae:ef:
47:f2:12:26:72:76:06:68:9c:5f:70:d2:04:a7:66:
08:45:66:90:6f:01:c2:ea:e5:5c:10:d2:95:1b:06:
61:67:88:d8:84:c1:09:8c:0d:77:03:f7:a3:90:36:
bf:d4:83:8d:81:5a:fc:2b:89:03:50:80:3e:36:3f:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5E:EC:B4:B5:B1:B3:55:AA:01:16:6E:58:06:60:A1:17:C8:65:EC
X509v3 Authority Key Identifier:
keyid:F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a101::/48
Signature Algorithm: sha256WithRSAEncryption
9a:66:ac:a3:a2:60:80:30:69:22:1e:f3:95:85:96:c6:f0:ce:
38:bb:64:cf:7e:b5:8e:ed:ac:af:57:30:dc:29:17:a4:fc:fa:
67:e9:1d:90:11:a5:35:79:3d:94:5d:ab:04:7b:ed:b5:d2:85:
32:cf:ef:58:25:e2:0a:f1:80:61:a6:fb:28:35:a9:62:ce:f0:
46:76:d9:41:a2:74:0b:53:41:ed:77:f9:e6:c4:9d:75:40:29:
b7:4f:ab:a3:b9:78:6b:bd:4e:72:89:6f:02:0d:d7:88:a3:0b:
b0:a5:54:98:ae:47:86:33:8d:db:1b:43:4d:60:a9:64:d6:cf:
2c:5a:50:d6:17:2f:23:57:de:80:34:13:a5:90:83:b6:67:57:
c7:8a:21:96:d1:66:66:53:47:ff:f3:9b:12:da:0a:a0:3a:d5:
07:07:7d:ac:62:75:ce:e9:db:55:0c:16:bf:9e:80:dd:14:44:
17:71:af:e0:7c:6f:82:bd:b1:41:0d:c0:f9:6f:d5:0d:dc:ee:
77:f6:ba:29:19:a4:68:ff:c8:ca:f5:f1:27:6c:c7:2d:6f:9e:
5c:79:fb:60:e1:48:fc:31:5b:c3:c9:9b:d1:38:0f:c2:0e:22:
5e:c4:09:f2:74:50:ec:64:f7:71:85:90:04:b9:d6:a6:9d:76:
c4:35:61:50
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUMzTKTRNulZXen5y2akzqxxo77I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlCRUVDMEE5OTY0OTdBNjExQkJEMTM3RTRFRjBCMEQ1
NzRDNzhEMzAeFw0yMzAxMDIxNzI3NDhaFw0yNDAxMDExNzMyNDhaMDMxMTAvBgNV
BAMTKDU0NUVFQ0I0QjVCMUIzNTVBQTAxMTY2RTU4MDY2MEExMTdDODY1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUD5yyw3Hh/pyryJ03H9l46lbs
K0ulafsmsqeaZA/JMIFLOJO6aWDdqRKvsnepwyIbraSq24hyeW/9VG1lCfOUU1DG
nYdn3myIBVvU8an02ABi1USCE/CbsYVPrWdbkV/zFaraOlHbhKcFBDhfiGThGvF+
IjTvffzYSEI+wRaUXlFP4udo/C/iRJXBcJ//EKg8lTmkx1qGGJa7qQe5sviyTzgm
TXPRQqTRm3c1W0WyMf8Kv06PXO/xcWJ3v3GEGqeu70fyEiZydgZonF9w0gSnZghF
ZpBvAcLq5VwQ0pUbBmFniNiEwQmMDXcD96OQNr/Ug42BWvwriQNQgD42PySRAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUVF7stLWxs1WqARZuWAZgoRfIZewwHwYDVR0j
BBgwFoAU+b7sCplkl6YRu9E35O8LDVdMeNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzliMjI2ZTItNzUxMi00YmFiLWJlYzMtMTNlNDUzYWJj
MmI3LzIvRjlCRUVDMEE5OTY0OTdBNjExQkJEMTM3RTRFRjBCMEQ1NzRDNzhEMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5QkVFQzBBOTk2NDk3
QTYxMUJCRDEzN0U0RUYwQjBENTc0Qzc4RDMuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzM5YjIyNmUyLTc1MTItNGJhYi1iZWMzLTEzZTQ1M2FiYzJi
Ny8yLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjEzMTMwMzEzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzMzODM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAoQEwDQYJKoZIhvcN
AQELBQADggEBAJpmrKOiYIAwaSIe85WFlsbwzji7ZM9+tY7trK9XMNwpF6T8+mfp
HZARpTV5PZRdqwR77bXShTLP71gl4grxgGGm+yg1qWLO8EZ22UGidAtTQe13+ebE
nXVAKbdPq6O5eGu9TnKJbwIN14ijC7ClVJiuR4YzjdsbQ01gqWTWzyxaUNYXLyNX
3oA0E6WQg7ZnV8eKIZbRZmZTR//zmxLaCqA61QcHfaxidc7p21UMFr+egN0URBdx
r+B8b4K9sUENwPlv1Q3c7nf2uikZpGj/yMr18Sdsxy1vnlx5+2DhSPwxW8PJm9E4
D8IOIl7ECfJ0UOxk93GFkAS51qaddsQ1YVA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:45 2025 by rpki-client