Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa
File: 326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier: 4Sw++NzbUPjKW0w7m8ELWm938N69sJnOSV3fXvINWLk=
Subject key identifier: 13:99:93:0E:39:EE:1C:31:A4:33:E4:64:40:8F:47:2B:F3:B6:7A:24
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 09AFBB1C0E5074EAC0E45D21C9DDFA026CAB258F
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 208548
IP address blocks: 2a05:dfc1:1fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:af:bb:1c:0e:50:74:ea:c0:e4:5d:21:c9:dd:fa:02:6c:ab:25:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=1399930E39EE1C31A433E464408F472BF3B67A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:63:eb:b0:7f:e4:c9:2f:fc:8d:98:54:7c:
13:3c:b6:73:89:65:39:fe:1c:83:1a:86:a5:df:0f:
15:e1:19:02:43:4e:c4:4b:80:47:d3:1e:59:22:90:
67:9b:a7:67:7b:bc:28:fc:3c:c7:20:8f:5e:10:4b:
0b:50:2b:97:db:82:c4:4d:7a:8f:7b:f1:5e:30:51:
aa:5e:dd:b4:21:7e:57:88:5b:f2:0e:d2:44:3d:f8:
a5:a8:a3:c2:7a:0a:18:e1:0d:e4:ac:4a:a5:d9:6b:
60:76:3d:15:66:7f:9f:53:6b:e2:1f:da:4f:3e:eb:
99:8f:e3:46:65:d7:2a:3e:47:15:f0:45:ac:d0:75:
a3:b2:75:45:74:8f:d2:8d:a8:35:c6:2e:5a:4f:dc:
87:91:35:d8:1b:f9:54:00:ff:40:e1:9f:34:fe:0c:
a8:1b:ea:ee:31:ee:8f:c6:a7:68:53:3b:f9:c0:8a:
b6:f1:8a:d8:d2:d1:30:f8:38:de:09:51:e0:2a:38:
a9:42:f4:20:24:1a:de:37:9a:7c:bd:1c:82:01:79:
8c:82:65:07:c8:51:df:91:f1:46:3f:db:8a:01:de:
72:ad:b7:80:d9:ec:d0:e3:8c:b5:40:3b:9a:40:2a:
fb:2d:47:71:30:07:9f:cd:9b:b0:42:5d:59:c2:e9:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:93:0E:39:EE:1C:31:A4:33:E4:64:40:8F:47:2B:F3:B6:7A:24
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1fff::/48
Signature Algorithm: sha256WithRSAEncryption
3c:10:e1:00:05:a9:01:c7:62:8a:61:00:e1:5a:9f:b0:00:e4:
55:af:1f:66:c7:59:73:2f:2d:5b:40:1a:d9:f7:27:f9:8b:77:
a0:9e:ec:49:10:da:b3:fb:f6:79:17:f4:47:aa:2c:4b:37:49:
04:37:31:50:1f:a4:ef:3b:30:4e:3e:50:a6:71:59:9a:fb:2b:
f8:45:e9:bd:8b:b0:eb:9b:ba:61:24:87:ec:d4:60:40:78:8f:
9b:b6:af:fa:8d:5c:1b:d5:9c:bf:fd:f8:e2:dc:a5:74:44:de:
c3:58:53:66:08:27:cb:21:33:02:65:a4:46:00:9e:a4:00:01:
44:01:18:bf:cf:76:7f:c1:ce:ff:6c:34:72:8b:6d:d6:75:b3:
61:d3:9c:10:03:58:e1:69:84:00:a9:7a:13:05:39:5d:b0:ac:
1e:02:38:28:a9:71:1f:3b:6c:cc:54:0a:f1:e0:44:f9:6a:45:
e0:2d:fa:ac:b6:12:97:77:39:22:bf:de:ec:83:c0:06:30:9e:
22:cc:0d:7b:e7:2c:ee:04:1d:2c:27:74:ba:72:fa:8e:ca:be:
e6:b1:29:ed:c8:76:4a:60:0d:38:17:30:19:a7:22:7d:cc:3c:
19:e9:56:dc:cf:c9:a3:6d:c8:9b:f4:c8:22:b9:5f:15:50:88:
c4:ee:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:50 2025 by rpki-client