Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa
File: 326130353a646663313a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier: 4x/y/aOrXXt5v4gpx54t1fJRJ1zf8plblkTs+4/2Z70=
Subject key identifier: 85:71:7B:8B:5A:C9:97:B3:A5:6E:4D:6C:93:23:F0:54:89:F0:1F:3C
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 0288DB5DD039E027AFCCA0346477EB0C43F639FA
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 48581
IP address blocks: 2a05:dfc1::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:88:db:5d:d0:39:e0:27:af:cc:a0:34:64:77:eb:0c:43:f6:39:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=85717B8B5AC997B3A56E4D6C9323F05489F01F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:e5:69:7e:7f:f1:00:17:dc:26:1e:4f:f9:
5f:9f:1d:b4:d8:c7:ff:0a:76:ba:3a:42:1b:e9:ec:
63:a7:ab:3b:d3:e0:59:c7:b7:bc:d3:58:b6:5f:0a:
71:f0:72:bd:ba:82:85:82:85:9f:19:15:7e:f4:f1:
e8:23:c7:e9:39:80:27:6f:34:93:5a:c4:80:fc:6e:
82:e2:28:6c:0b:70:b3:50:09:9a:56:02:16:55:ef:
2e:d8:13:24:52:5c:88:83:fa:51:e5:02:b5:2f:0d:
dc:c7:1a:ad:80:81:b9:25:af:2f:25:71:cd:d5:22:
0d:51:85:d3:46:fc:2e:0f:49:3c:f4:a8:f0:5e:be:
f3:cd:0c:2a:63:a1:98:58:8d:fa:02:cf:ab:04:16:
87:30:4b:81:07:b6:94:d4:8e:c9:78:75:94:f9:42:
b2:43:79:39:09:10:c7:77:e7:9f:1c:78:48:5f:7d:
68:78:07:61:a5:93:5e:fc:f2:93:86:af:e0:44:96:
93:07:3b:23:af:c9:ad:c4:9c:e6:63:6a:86:59:21:
3c:ee:59:cb:23:97:c5:92:bf:0f:c3:d9:43:b1:c1:
f8:2e:dd:ae:8d:e9:09:a1:5a:65:99:1f:d6:5a:47:
56:5d:b5:2e:e1:27:1e:f9:40:a2:92:ef:96:1c:c4:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:7B:8B:5A:C9:97:B3:A5:6E:4D:6C:93:23:F0:54:89:F0:1F:3C
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1::/40
Signature Algorithm: sha256WithRSAEncryption
4d:ed:11:6e:fe:cd:ed:c4:4b:ec:d3:05:05:e1:6c:de:10:93:
f0:3b:e8:92:a7:f6:61:43:50:78:53:80:48:7a:fe:82:4f:b1:
87:88:30:b7:59:70:c2:c2:fb:e4:72:e5:3a:ee:83:65:12:d2:
04:80:bb:bc:4f:43:a3:87:fc:6d:9e:71:d5:0b:db:4a:2d:fe:
00:c1:8a:8f:dc:3a:ab:2b:53:64:00:ba:d0:89:21:0c:7e:1e:
40:d2:4e:43:44:79:2e:c1:c8:3f:33:41:eb:70:e7:8a:15:b2:
0b:9d:54:24:7a:ae:a1:72:04:82:ba:4d:2a:ae:5b:f2:c2:82:
2d:a2:98:af:98:b2:33:4a:43:19:a1:d9:82:a4:31:4d:4c:77:
b9:7e:84:5d:ef:88:29:84:29:2a:0a:fe:03:a5:50:57:ab:ff:
03:49:06:f7:70:98:84:14:7c:b0:e1:7f:cb:39:e4:c1:f3:06:
62:52:7b:02:39:0e:df:ea:77:67:83:91:8e:71:49:d6:74:c3:
df:5a:47:d5:ac:4b:43:54:d0:39:f5:e0:79:32:38:7e:49:f3:
9c:59:24:f0:9f:13:fd:6b:7d:f0:86:47:18:e3:8c:18:0c:47:
2f:ef:be:29:69:c2:7d:94:49:aa:17:ae:63:d7:ce:a2:93:59:
46:f8:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:33 2025 by rpki-client