Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3430203d3e20323034383537.roa
File: 326130353a646663313a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier: ygXVhV9SYiRmFREYilEiSIACkrZXElr6TONr3dIhsxo=
Subject key identifier: 93:B4:80:FE:5A:D4:D3:3C:88:EC:C9:68:16:7E:3B:D7:11:A5:18:42
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 68F4BF95F87B1EEE947746E27BE9BF25D522FA37
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3430203d3e20323034383537.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 204857
IP address blocks: 2a05:dfc1::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f4:bf:95:f8:7b:1e:ee:94:77:46:e2:7b:e9:bf:25:d5:22:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=93B480FE5AD4D33C88ECC968167E3BD711A51842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:e5:4d:61:1a:bc:f3:75:87:14:6c:ff:7e:
dd:6c:3f:e1:b9:66:c9:c1:ac:8f:c1:c5:e7:1b:dd:
56:01:27:7f:aa:73:92:a2:fc:c4:79:97:a1:db:e2:
af:b8:1d:42:55:35:4d:4f:75:a2:68:dd:77:cc:b1:
0b:49:51:8c:be:f3:d9:7b:51:0e:d6:a9:8c:9d:f9:
6a:5f:05:2c:c6:ab:2a:17:23:d8:fc:93:1d:9d:88:
54:19:28:a1:8a:50:6b:b2:bf:c6:35:0d:8b:b5:82:
8a:71:d3:bd:cb:8d:ab:0b:29:35:04:11:77:51:7d:
47:9a:c9:d2:29:43:2d:bc:47:5d:43:e3:eb:5d:f5:
3d:d7:e3:82:8f:c1:cc:c6:b2:66:c4:44:b7:ee:50:
c8:93:26:7e:fa:4e:12:58:5a:69:82:4d:dc:a5:7c:
9f:61:19:81:34:05:b1:1d:9a:ff:59:c9:a4:70:f3:
25:59:09:54:3b:ff:ef:29:b7:d7:ec:16:40:12:fb:
17:a3:ec:81:01:64:6e:83:85:b2:c5:e4:49:67:f8:
3a:1c:57:87:b4:5b:7c:09:9f:14:6d:de:2f:a1:1a:
c8:88:ed:59:bd:a5:01:29:99:98:cc:b8:68:bc:89:
14:dd:84:f9:92:9c:68:da:4f:f3:26:54:dc:c0:76:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:80:FE:5A:D4:D3:3C:88:EC:C9:68:16:7E:3B:D7:11:A5:18:42
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3430203d3e20323034383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1::/40
Signature Algorithm: sha256WithRSAEncryption
91:a5:ad:87:a3:65:f3:70:d7:ab:6b:c3:fc:77:c5:90:b3:35:
62:69:0b:89:47:be:0c:fc:91:f3:08:60:3c:f5:cd:47:74:63:
1e:c7:82:3e:e8:5f:ef:86:65:92:8b:72:25:12:75:5d:04:e8:
0e:80:67:a1:62:71:db:d1:5e:c7:2f:0b:87:3a:db:79:db:12:
93:a8:67:02:aa:f8:0f:96:6d:38:9b:65:f0:0a:c0:a4:3b:57:
e7:07:6b:ac:f7:5d:c9:2d:c2:2f:a8:52:5e:95:ee:10:c9:67:
1f:33:47:98:4b:56:20:43:a1:fe:27:5d:be:03:77:66:82:2b:
9e:e1:55:17:cd:3d:c6:eb:a0:44:25:3a:aa:d4:f5:66:c1:f8:
bd:64:f8:d9:36:5f:46:ef:63:05:bd:50:fa:77:37:fd:c1:30:
24:6e:4e:7e:cf:34:2e:ce:ef:90:0d:f2:26:c8:43:52:6d:ea:
06:12:3b:72:0c:0d:04:a4:92:f4:d5:c3:fc:35:ef:e9:8d:84:
1f:4c:c7:d1:77:b6:42:02:eb:85:81:b2:e4:ae:4b:ef:42:d4:
ff:df:e0:8c:29:49:9e:d0:2a:ac:fd:5b:16:bb:64:6f:87:5b:
ac:ea:33:da:36:ac:97:a8:41:83:3d:07:b2:6e:81:bb:ec:30:
3c:5c:88:e6
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUaPS/lfh7Hu6Ud0bie+m/JdUi+jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhD
NTg0RjlGNzAeFw0yMzA0MjEwMzI0MjBaFw0yNDA0MTkwMzI5MjBaMDMxMTAvBgNV
BAMTKDkzQjQ4MEZFNUFENEQzM0M4OEVDQzk2ODE2N0UzQkQ3MTFBNTE4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaOVNYRq883WHFGz/ft1sP+G5
ZsnBrI/Bxecb3VYBJ3+qc5Ki/MR5l6Hb4q+4HUJVNU1PdaJo3XfMsQtJUYy+89l7
UQ7WqYyd+WpfBSzGqyoXI9j8kx2diFQZKKGKUGuyv8Y1DYu1gopx073LjasLKTUE
EXdRfUeaydIpQy28R11D4+td9T3X44KPwczGsmbERLfuUMiTJn76ThJYWmmCTdyl
fJ9hGYE0BbEdmv9ZyaRw8yVZCVQ7/+8pt9fsFkAS+xej7IEBZG6DhbLF5Eln+Doc
V4e0W3wJnxRt3i+hGsiI7Vm9pQEpmZjMuGi8iRTdhPmSnGjaT/MmVNzAdvyhAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUk7SA/lrU0zyI7MloFn471xGlGEIwHwYDVR0j
BBgwFoAUghYgWF0UWh7RCbdanMkVCMWE+fcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdm
YTQ0LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgyMTYyMDU4NUQxNDVB
MUVEMTA5Qjc1QTlDQzkxNTA4QzU4NEY5RjcuY2VyMIGtBggrBgEFBQcBCwSBoDCB
nTCBmgYIKwYBBQUHMAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzQwZDZjNmY1LWFhMzItNDlkNy1hYmZhLWU2MDg0YmM3ZmE0
NC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMy
MzAzNDM4MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF38EAMA0GCSqGSIb3DQEBCwUAA4IBAQCR
pa2Ho2XzcNera8P8d8WQszViaQuJR74M/JHzCGA89c1HdGMex4I+6F/vhmWSi3Il
EnVdBOgOgGehYnHb0V7HLwuHOtt52xKTqGcCqvgPlm04m2XwCsCkO1fnB2us913J
LcIvqFJele4QyWcfM0eYS1YgQ6H+J12+A3dmgiue4VUXzT3G66BEJTqq1PVmwfi9
ZPjZNl9G72MFvVD6dzf9wTAkbk5+zzQuzu+QDfImyENSbeoGEjtyDA0EpJL01cP8
Ne/pjYQfTMfRd7ZCAuuFgbLkrkvvQtT/3+CMKUme0Cqs/VsWu2Rvh1us6jPaNqyX
qEGDPQeyboG77DA8XIjm
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:43 2025 by rpki-client