Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
File: 326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (raw, json)
Hash identifier: 2UzpijYu6ppbrXSoP64q7eyqlCPWXHynlMUw49H76BU=
Subject key identifier: C6:65:83:A5:31:C7:23:8C:0D:F5:BE:DE:56:03:8D:02:13:07:E1:A0
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 3AAF6A3C7EF7E5E3CEBB01EEC28AC085DB0A9821
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 199177
IP address blocks: 2a05:dfc1:1fd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:af:6a:3c:7e:f7:e5:e3:ce:bb:01:ee:c2:8a:c0:85:db:0a:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=C66583A531C7238C0DF5BEDE56038D021307E1A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:d8:29:3e:5d:fb:e3:fa:2a:14:fb:7e:43:
79:72:1d:b1:81:96:24:3d:e1:ca:7d:b9:84:7e:96:
8d:22:ba:ab:95:5c:14:2d:ec:02:7e:37:eb:b0:2d:
30:bc:d7:9e:0d:be:5d:7e:03:b6:68:e4:94:1a:78:
92:00:3c:5d:62:f2:bb:d9:b1:50:95:7b:18:56:51:
0a:25:cd:11:4f:92:18:41:7d:51:d5:88:da:ac:5d:
6f:b3:87:07:98:99:d7:5b:68:1a:19:ea:1b:7f:42:
cb:a4:61:4c:46:4a:54:ff:47:26:6c:fe:be:d5:af:
94:3e:d8:8c:fd:69:97:8e:57:b6:76:37:7c:5b:d3:
ca:0e:ad:d9:e0:18:37:04:62:c0:c2:ed:2c:3d:a6:
9f:b0:dd:ec:48:52:2a:07:ab:9c:b1:98:d3:71:7a:
b8:28:ea:e6:88:d6:20:0f:76:30:12:e0:93:f8:19:
58:07:10:68:d0:ff:34:ce:36:43:d0:60:c2:99:f4:
61:f5:b3:99:3d:a7:18:c1:08:19:35:91:47:ce:62:
51:cb:4a:6c:14:ad:57:82:b6:b2:1b:d1:ec:06:65:
98:a1:c1:26:fb:92:a0:cb:a2:56:d6:1e:55:15:8d:
72:61:26:ac:0d:f5:69:a2:48:72:18:4c:96:38:5f:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:83:A5:31:C7:23:8C:0D:F5:BE:DE:56:03:8D:02:13:07:E1:A0
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1fd0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:9b:42:3a:3e:1e:05:7a:9d:ec:e9:4c:d3:ae:6a:71:97:45:
f2:65:96:8e:d8:de:47:9e:5a:18:08:3c:de:fd:ed:b8:49:a1:
ae:45:d7:9e:f7:af:7d:91:78:fd:da:d3:f2:a0:9f:e0:da:02:
74:2c:d5:51:80:46:6e:84:93:72:e5:6f:4f:f0:d3:e4:6b:54:
b3:a3:c8:6b:34:d0:6b:55:8c:05:be:ab:42:60:a2:30:ac:68:
9c:31:a3:01:f7:c3:3e:76:a8:81:5f:a6:8a:be:98:d6:19:3b:
f7:97:67:20:10:e3:a8:7d:27:62:23:5c:6e:19:f8:4e:cc:c0:
93:ee:f3:2a:f1:69:6b:d6:8e:11:a7:ad:e6:ff:b1:46:98:85:
0b:bb:f5:5d:ad:92:a3:a4:75:24:f9:e6:d6:99:65:07:e0:bc:
e1:9b:54:8d:e1:cf:a7:a9:05:01:70:47:68:e0:32:22:55:a4:
59:05:18:0b:df:e3:9a:81:4d:41:a9:34:36:f8:ec:3c:73:96:
05:b2:f4:71:c4:9c:87:42:4b:09:d7:98:65:84:e6:45:c4:a8:
62:5a:f7:6e:b9:80:9b:eb:d5:a7:47:28:ee:ae:38:cd:ef:a1:
7f:e6:15:de:25:21:c2:04:e2:3d:b4:55:e1:6f:bd:2c:6b:73:
77:8c:e0:cc
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUOq9qPH735ePOuwHuworAhdsKmCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhD
NTg0RjlGNzAeFw0yMzA0MjEwMzI0MjBaFw0yNDA0MTkwMzI5MjBaMDMxMTAvBgNV
BAMTKEM2NjU4M0E1MzFDNzIzOEMwREY1QkVERTU2MDM4RDAyMTMwN0UxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjNgpPl374/oqFPt+Q3lyHbGB
liQ94cp9uYR+lo0iuquVXBQt7AJ+N+uwLTC8154Nvl1+A7Zo5JQaeJIAPF1i8rvZ
sVCVexhWUQolzRFPkhhBfVHViNqsXW+zhweYmddbaBoZ6ht/QsukYUxGSlT/RyZs
/r7Vr5Q+2Iz9aZeOV7Z2N3xb08oOrdngGDcEYsDC7Sw9pp+w3exIUioHq5yxmNNx
ergo6uaI1iAPdjAS4JP4GVgHEGjQ/zTONkPQYMKZ9GH1s5k9pxjBCBk1kUfOYlHL
SmwUrVeCtrIb0ewGZZihwSb7kqDLolbWHlUVjXJhJqwN9WmiSHIYTJY4XwdtAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUxmWDpTHHI4wN9b7eVgONAhMH4aAwHwYDVR0j
BBgwFoAUghYgWF0UWh7RCbdanMkVCMWE+fcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdm
YTQ0LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgyMTYyMDU4NUQxNDVB
MUVEMTA5Qjc1QTlDQzkxNTA4QzU4NEY5RjcuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzQwZDZjNmY1LWFhMzItNDlkNy1hYmZhLWU2MDg0YmM3ZmE0
NC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzE2NjY0MzAzYTNhMmYzNDM0MmQzNDM4
MjAzZDNlMjAzMTM5MzkzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBd/BH9AwDQYJKoZIhvcN
AQELBQADggEBAH2bQjo+HgV6nezpTNOuanGXRfJllo7Y3keeWhgIPN797bhJoa5F
1573r32ReP3a0/Kgn+DaAnQs1VGARm6Ek3Llb0/w0+RrVLOjyGs00GtVjAW+q0Jg
ojCsaJwxowH3wz52qIFfpoq+mNYZO/eXZyAQ46h9J2IjXG4Z+E7MwJPu8yrxaWvW
jhGnreb/sUaYhQu79V2tkqOkdST55taZZQfgvOGbVI3hz6epBQFwR2jgMiJVpFkF
GAvf45qBTUGpNDb47DxzlgWy9HHEnIdCSwnXmGWE5kXEqGJa9265gJvr1adHKO6u
OM3voX/mFd4lIcIE4j20VeFvvSxrc3eM4Mw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:09 2025 by rpki-client