Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa
File: 326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier: 3yJInx37xUv3lNsuP3EzhLlNz8bOXf3P8Y41OF6Y7Ag=
Subject key identifier: 87:AC:05:78:5F:42:5C:65:31:F3:E2:7D:A8:F8:D3:A4:FA:C3:80:DB
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 0DCDCCAED105929632FB97843512CE8D357644E6
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 48581
IP address blocks: 2a05:dfc1:1f00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cd:cc:ae:d1:05:92:96:32:fb:97:84:35:12:ce:8d:35:76:44:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=87AC05785F425C6531F3E27DA8F8D3A4FAC380DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e9:5b:3a:8c:e1:7a:18:03:47:c6:af:d2:c7:
c6:3d:92:06:65:78:34:2d:92:54:49:0b:99:47:76:
f4:ab:bb:34:2b:05:75:e1:5f:6e:65:59:1d:ef:2d:
9f:23:d1:f7:fe:a4:65:b3:45:d2:dc:67:69:a0:0b:
ee:e7:46:9a:ca:98:46:18:45:b7:d4:47:c8:5e:ea:
2c:b1:48:91:db:69:12:a9:41:fb:12:c9:30:54:73:
7f:13:74:72:61:cb:64:c5:e6:02:54:02:2b:47:9e:
86:b8:f4:3f:13:ae:a8:e9:6a:39:77:ae:7f:ae:43:
e9:55:13:81:ca:28:ce:e5:d4:9f:be:f8:4c:9b:61:
4a:7e:00:65:2b:c0:24:65:22:52:7b:5d:03:4f:16:
24:41:2b:fe:8c:64:5b:b0:ea:59:e1:fd:09:e6:e8:
39:c5:65:d4:68:8a:a4:90:c4:99:00:4b:91:ad:97:
de:fc:a9:b5:6b:bc:52:97:5f:1c:21:68:03:2d:a5:
f5:de:2e:43:b3:a5:f9:bb:3c:c3:f5:59:84:ff:13:
80:19:73:97:bb:b5:cc:28:3c:66:bb:2b:bb:f4:b1:
07:69:48:f4:c3:5d:b5:18:07:e1:dc:af:7e:41:01:
79:18:57:46:fc:04:20:8d:f5:9b:e3:fd:49:01:72:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AC:05:78:5F:42:5C:65:31:F3:E2:7D:A8:F8:D3:A4:FA:C3:80:DB
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
3d:97:08:7d:31:75:52:2a:25:6e:8a:85:73:50:e1:c3:52:16:
0d:4c:c2:fd:3e:71:e4:09:e8:79:5b:bc:58:1c:b2:a6:88:72:
b7:a3:9e:2a:bd:3f:5d:8e:ea:a4:c8:89:79:34:13:ad:75:d7:
ae:c0:fe:7c:3a:f9:3a:52:e1:ff:1b:2d:0d:50:f8:38:4d:4f:
0a:81:1b:00:16:3b:c1:dd:84:cb:bb:76:d2:4e:d5:e8:d0:f7:
71:3f:22:5d:e7:07:4f:76:15:00:56:7c:68:87:ed:82:bd:6e:
9c:67:8c:bb:b9:60:e3:74:0e:76:ba:cd:2a:0c:e7:61:f1:75:
4f:6c:90:ef:1f:78:18:cf:d7:f0:17:fe:b9:c6:ef:5a:9d:db:
ed:14:19:ba:bd:db:f9:0d:8e:46:33:29:31:db:b2:bb:25:13:
2b:09:39:0f:73:ae:7c:34:b0:f9:27:6c:d7:be:2a:d2:ff:6e:
8b:b4:a2:90:8d:b9:d8:a1:66:43:0d:93:52:2a:4e:69:c5:95:
60:7c:4d:6c:1c:94:b3:ab:80:8e:fe:79:e3:71:b7:be:a8:3b:
44:25:b6:3c:44:d2:a1:7a:e9:52:f4:85:a8:49:8e:82:ac:a1:
2f:47:65:7e:dc:fc:2e:35:06:d9:d1:ee:3a:76:9a:77:68:cd:
cb:0f:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:42 2025 by rpki-client