Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
File: 326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier: 6i+x7Vl7LlIeZpzJGQ28lvnkv2T6BrnhdNri2ISUhQw=
Subject key identifier: 8A:59:9E:7E:A1:A2:BE:57:4A:64:BC:1E:06:07:5E:CD:E9:24:93:47
Certificate issuer: /CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Certificate serial: 7D5FCBADEEFBB4523C767BE32B5958D1BD37F227
Authority key identifier: F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
Signing time: Mon 12 Jun 2023 10:15:38 +0000
ROA not before: Mon 12 Jun 2023 10:10:38 +0000
ROA not after: Mon 10 Jun 2024 10:15:38 +0000
asID: 203843
IP address blocks: 2a0a:6040:a102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5f:cb:ad:ee:fb:b4:52:3c:76:7b:e3:2b:59:58:d1:bd:37:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Validity
Not Before: Jun 12 10:10:38 2023 GMT
Not After : Jun 10 10:15:38 2024 GMT
Subject: CN=8A599E7EA1A2BE574A64BC1E06075ECDE9249347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:06:54:bc:44:f2:e9:00:5b:5c:09:71:38:
04:4a:13:53:ad:f4:af:e3:22:a8:dd:47:0a:d4:3d:
05:68:d3:e1:62:fa:3e:bf:12:97:1b:29:00:32:0f:
e6:4d:1a:4d:bd:6d:e2:bf:17:52:7f:82:c2:2e:c4:
65:ad:1d:cd:5f:f3:d7:12:fc:0a:14:e6:75:21:c6:
02:3e:8b:e6:69:51:24:5c:44:09:3b:db:c5:a8:2f:
b6:df:48:51:8d:cd:3f:d4:f4:8d:bc:d7:68:38:47:
5a:c8:c4:6e:e7:db:ff:9a:95:ab:e1:90:3f:60:55:
25:0d:38:84:58:fc:35:cc:48:03:59:11:a6:72:5c:
a5:9e:94:e5:9b:b0:67:71:bd:e2:99:04:c9:2e:e1:
da:63:44:46:49:72:11:25:0e:9a:72:69:29:96:d1:
c8:3e:a2:14:f2:06:78:e6:2b:cc:2a:97:ac:6c:fb:
07:82:6d:b5:34:ef:77:79:e4:00:cd:64:8d:d2:24:
83:ed:09:d8:97:e2:9a:9e:5a:31:d4:3d:88:4a:1d:
75:6f:f3:53:ce:9a:e0:11:4d:17:36:ed:60:40:81:
11:46:a7:bb:cc:03:25:ec:0a:b2:a1:da:8b:e3:60:
0a:95:2c:70:23:af:25:45:25:01:47:33:d1:36:07:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:59:9E:7E:A1:A2:BE:57:4A:64:BC:1E:06:07:5E:CD:E9:24:93:47
X509v3 Authority Key Identifier:
keyid:F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a102::/48
Signature Algorithm: sha256WithRSAEncryption
44:17:d7:8b:21:e4:f2:52:b6:4d:d3:92:a2:49:46:6c:14:10:
63:b0:44:a2:1b:fe:de:28:1d:7d:e4:8c:df:56:7c:4d:31:90:
b5:31:92:32:de:8f:54:28:36:f3:32:2b:e6:9a:c5:ab:86:63:
8d:fa:90:bb:2c:88:e2:b2:57:1c:aa:ce:8b:5d:21:8b:79:b0:
cc:04:e3:1e:0f:5e:08:a9:b1:c6:9c:68:c2:b0:6b:ff:15:82:
c7:d2:d1:75:9e:ad:b2:3c:a8:e9:1f:87:5e:13:e4:96:39:c2:
af:09:aa:35:53:35:f4:5f:15:b5:2e:60:45:8c:e2:c7:e3:27:
b0:b0:3a:e8:62:b5:8c:a1:f9:ce:1e:43:db:9a:da:23:5b:b3:
a1:97:4b:6f:d2:67:cb:1b:18:c7:02:b8:5c:4d:db:19:66:04:
2d:b1:03:f7:15:12:fe:04:9d:5c:cf:de:06:46:23:89:e7:23:
55:54:b3:cf:d0:cc:0c:b8:7d:d3:b2:27:d6:ed:c7:a5:8b:ba:
e7:d0:0d:45:54:7c:40:49:a0:cf:d0:31:24:d7:5c:99:03:a3:
55:ff:c4:e0:0a:f0:e2:a2:e7:6b:7a:3f:d3:cf:10:59:62:e6:
dc:66:ac:c2:f3:d3:81:de:e9:4f:5a:3a:56:36:d5:74:6b:dd:
ec:b3:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:57 2025 by rpki-client