Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
File: 326130353a646663313a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier: 9SiH+5L7yS+LU6D2kpAdYQ4du/nM3r/mVeF+T2kFrqE=
Subject key identifier: C1:36:0F:4B:C3:9A:87:1E:33:9D:07:23:89:51:8F:0A:A0:19:C4:4C
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 147F9385782C001CE8D108235BDE0409190BA7D5
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 50224
IP address blocks: 2a05:dfc1::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7f:93:85:78:2c:00:1c:e8:d1:08:23:5b:de:04:09:19:0b:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=C1360F4BC39A871E339D072389518F0AA019C44C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:8f:11:e1:f3:99:59:e2:86:71:7f:84:07:
58:c2:c4:05:59:9a:71:43:02:da:55:86:8b:c9:ee:
59:e6:f9:c4:d7:b1:7b:b0:ae:e2:25:a3:fa:5e:6a:
dd:19:2e:9e:24:6b:01:3e:9a:a1:d8:cd:56:7b:63:
fd:5f:e8:32:25:3d:82:83:63:75:1c:7d:fc:42:17:
a4:0e:c7:3b:cd:0d:69:33:d5:a9:26:62:5b:e9:fd:
a2:70:7d:ff:c0:69:3c:7d:13:68:df:88:3c:0e:a5:
2b:22:84:24:4f:bd:80:b7:61:00:1b:d5:46:59:a6:
80:cd:c5:0e:be:f8:9f:15:58:de:58:74:ba:0b:7a:
11:5a:7d:53:c3:59:00:71:c1:5c:0c:ea:4c:e9:1d:
69:51:07:0a:9a:0e:f9:8c:cc:63:c6:de:6a:a8:11:
3f:92:d8:a5:0d:92:a8:80:15:4b:cf:da:d2:40:2e:
8f:d5:b5:41:55:ec:2c:16:be:00:e4:cb:16:e5:ad:
1c:18:ae:47:4a:98:27:37:75:0f:15:92:a3:6c:75:
63:7d:4b:3b:8c:5a:35:c3:76:e7:81:37:7f:f5:98:
ac:fd:68:69:71:f6:20:96:5b:14:7b:dd:bf:49:c4:
5b:2c:68:35:88:94:78:d9:91:d4:f8:64:0e:81:de:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:0F:4B:C3:9A:87:1E:33:9D:07:23:89:51:8F:0A:A0:19:C4:4C
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1::/40
Signature Algorithm: sha256WithRSAEncryption
37:04:5d:28:9a:1b:f2:49:4a:89:4f:a2:10:7a:aa:0b:f1:d9:
59:aa:77:e5:f4:b2:98:f4:de:95:52:86:12:a2:b2:91:fc:98:
7e:15:e0:7b:e1:5a:0e:59:10:55:d6:fd:c1:46:e0:b6:70:07:
08:6c:75:9d:65:58:a1:ba:98:64:b4:fd:87:24:07:c3:c4:bc:
d3:06:9c:b6:55:8a:7b:b6:f0:b6:16:73:a5:bc:4b:c1:87:15:
6b:dc:78:20:48:8b:9f:07:76:8f:33:e1:f3:bf:47:52:3e:26:
f2:86:02:f7:6f:d0:58:5a:8d:55:1f:c7:88:b4:57:d7:16:cb:
64:9f:08:55:2e:81:42:29:2c:27:fd:f2:d4:09:7a:20:74:3f:
7d:8a:3a:2c:2d:4b:f0:07:43:c0:2c:8f:96:48:25:64:40:45:
00:e9:5a:12:7d:ed:3f:e0:f5:03:0e:53:93:6a:54:8b:99:12:
c3:4d:8f:13:08:21:6b:ad:af:1b:c3:08:96:0c:f1:f9:d0:ff:
3d:e4:3d:96:ec:bb:aa:a0:79:ed:a5:f2:6a:0d:91:d5:dc:d9:
13:b7:3b:ed:7e:ae:61:44:57:c0:17:e6:59:24:3a:0d:66:70:
f0:65:bb:cd:94:af:fe:4c:10:c5:c3:b4:2e:aa:07:66:ae:35:
d4:9a:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:19 2025 by rpki-client