Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa
File: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=
Subject key identifier: 12:28:B9:2F:AA:D0:05:92:85:B9:B0:5C:31:70:1F:0F:8E:C5:4C:E1
Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial: 79EA964980F4E8AF2A333990949F0B8EB2214379
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa
Signing time: Wed 18 Dec 2024 10:58:12 +0000
ROA not before: Wed 18 Dec 2024 10:53:12 +0000
ROA not after: Wed 17 Dec 2025 10:58:12 +0000
asID: 47496
IP address blocks: 2a05:dfc1:c423::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ea:96:49:80:f4:e8:af:2a:33:39:90:94:9f:0b:8e:b2:21:43:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Validity
Not Before: Dec 18 10:53:12 2024 GMT
Not After : Dec 17 10:58:12 2025 GMT
Subject: CN=1228B92FAAD0059285B9B05C31701F0F8EC54CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:b1:65:fd:f4:27:48:23:80:58:c9:22:69:
67:dc:5e:6c:69:db:2d:bb:30:de:98:f1:2f:37:e1:
10:1c:ee:21:82:7b:94:5e:9f:1e:5d:20:1e:46:1e:
da:06:bc:0b:64:4e:ef:4b:fb:73:18:e5:96:80:ec:
bd:1a:e3:99:e9:c7:5b:dc:9d:7e:b5:0b:bb:1b:14:
b7:7a:c0:be:cb:2e:66:69:0f:e5:51:56:21:5d:f4:
a3:8a:6e:86:34:8d:96:d7:0f:d7:a7:b8:79:e8:40:
e2:48:ab:67:72:44:09:7d:23:ce:97:4a:05:5c:1c:
3b:f3:69:03:f2:b8:52:0f:6d:53:a6:e5:14:23:24:
4e:d9:58:f7:83:d8:a5:75:c6:1c:9a:26:b7:6e:e5:
a7:55:0b:0f:08:c5:bf:61:d4:f8:eb:c6:ba:67:3e:
c1:48:90:0e:57:62:80:45:18:95:f0:b5:80:67:a0:
a6:5f:a0:0f:c7:5f:6b:ed:a3:87:66:82:15:a2:5a:
09:63:b3:cf:09:31:dc:e3:89:fb:56:b7:48:a0:8b:
d4:65:55:c7:33:25:bc:d2:3d:c4:d0:3b:79:1f:41:
3e:1b:81:1e:38:2f:26:de:93:b4:c9:97:b5:7d:68:
29:ff:70:dc:42:c3:07:25:74:f5:df:8d:7a:1d:ff:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:B9:2F:AA:D0:05:92:85:B9:B0:5C:31:70:1F:0F:8E:C5:4C:E1
X509v3 Authority Key Identifier:
keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c423::/48
Signature Algorithm: sha256WithRSAEncryption
51:83:4f:48:a0:54:ec:b8:22:3b:57:1e:01:7b:21:0e:31:ea:
ef:d5:f5:39:7d:00:85:c8:30:2b:d0:83:53:cf:61:a7:ff:ad:
83:41:2b:3b:a8:58:45:f1:21:15:df:f0:e4:4c:d8:cc:55:40:
9d:6a:a8:b3:f1:0f:1b:1d:94:b7:27:9b:2a:fe:81:01:b5:95:
a9:ae:ca:c2:22:13:8a:8f:58:20:f5:b7:7a:28:68:94:d2:b3:
81:91:44:37:ae:ed:88:c4:14:a3:e6:7d:6f:22:48:0d:a9:29:
50:e3:cc:4d:82:59:19:8e:2a:4c:df:9f:d5:a5:64:e7:1e:15:
7f:6c:b3:4d:ae:1e:5e:81:a1:f1:b2:d8:dc:bd:7e:20:05:28:
36:80:d7:9a:6d:6e:ac:6c:f8:3e:82:b6:c6:83:85:4a:ba:b6:
a7:11:d2:ec:88:5a:dd:0e:91:d9:56:8d:15:f9:0b:09:b7:ca:
81:6d:56:1d:f7:18:16:fd:ee:bd:ff:75:25:53:d1:2e:a0:6c:
61:2a:1c:7b:92:8c:70:db:90:fd:ab:4b:ae:7a:99:fd:bb:01:
83:51:a0:82:1a:a1:a0:23:20:4f:3b:f5:b1:20:52:2a:5f:bf:
b2:74:d4:e0:3c:b4:53:84:35:1d:d7:2b:fd:d6:ff:07:31:4f:
be:50:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:41 2025 by rpki-client