Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa
File: 326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier: 8dPeHDoxWv+aRdOrOzdep2Jdk6flrpPwL5Ide1O6PBU=
Subject key identifier: 6F:CF:2F:AF:43:A2:57:A7:34:93:80:9B:6A:C5:BE:68:FD:56:8B:38
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 4EFAC0DDF94B7C7E14E5C1A1DDF72D4D13B71997
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 204857
IP address blocks: 2a0a:6040:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fa:c0:dd:f9:4b:7c:7e:14:e5:c1:a1:dd:f7:2d:4d:13:b7:19:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=6FCF2FAF43A257A73493809B6AC5BE68FD568B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:2f:a6:cc:11:de:95:92:a4:36:2f:0e:4d:
34:c0:1d:f4:32:82:05:db:87:a7:8a:ad:13:0b:57:
67:fd:5a:32:ea:ff:85:79:31:5b:04:b8:03:e8:0f:
f5:a6:7d:ea:8c:1d:20:62:b3:3f:b5:f0:be:44:a6:
66:ad:4d:51:c3:03:90:28:1f:fc:e2:d5:17:55:4b:
9e:b3:47:e2:43:35:90:13:ea:bb:6a:5d:c2:d6:9b:
f4:9e:94:92:1a:3f:e5:67:b4:50:a4:4d:27:4e:1e:
7c:c2:ca:2b:3a:db:2e:cb:1a:4b:c3:14:09:59:68:
20:99:f7:9e:51:82:5f:d1:0f:14:52:6f:9f:04:0c:
88:21:15:45:d9:16:00:55:6e:8d:b6:9b:29:eb:b2:
53:ad:36:8c:9b:08:37:f6:35:29:68:9d:13:ed:47:
1e:e4:de:d7:bc:73:55:69:84:90:42:91:92:45:94:
62:ce:93:be:54:4c:78:fe:00:59:96:0b:bb:54:4f:
92:ce:b2:e4:12:e1:70:d1:8a:76:b7:a5:83:dc:da:
fc:88:eb:c6:4a:73:5b:26:71:c4:e1:c3:60:b5:82:
35:d8:2e:6b:f8:49:a2:7d:4e:5c:91:98:22:5c:cd:
0a:bc:34:39:15:75:9c:09:78:49:73:17:0d:a7:e6:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:2F:AF:43:A2:57:A7:34:93:80:9B:6A:C5:BE:68:FD:56:8B:38
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:1000::/40
Signature Algorithm: sha256WithRSAEncryption
5d:9e:c2:f6:33:90:d6:8c:bd:fc:2b:93:f1:f5:10:05:29:15:
81:5c:78:5c:2b:cc:d0:8d:3a:eb:0c:28:51:67:4e:8a:1a:aa:
a8:58:2c:fd:21:f3:13:e7:02:c3:a7:b4:87:17:0b:9d:1c:f6:
6a:35:67:bb:f3:59:30:e8:df:f4:66:f0:0a:2a:7f:ed:e7:97:
38:1a:9c:1c:8a:da:69:ff:20:a5:b4:fa:24:9b:e3:f8:03:d0:
7e:8e:c0:cc:5d:03:25:78:2b:b1:0b:5b:a6:da:e7:49:38:bd:
ad:2d:22:0c:86:1d:d1:c9:39:8e:76:56:93:e4:5c:09:c4:3e:
fb:e8:3f:e6:9f:26:42:3b:e9:0c:e2:5b:e2:d2:4f:12:0d:c9:
61:bb:25:14:c9:1e:d8:28:d5:24:f1:ac:17:0f:89:77:d2:e0:
fd:c4:73:8a:1d:51:79:f8:56:6c:34:ae:ad:e9:f2:22:62:c4:
5a:7b:46:82:5a:f2:3f:d3:fb:ce:d3:8e:52:61:bb:cf:14:e5:
3b:74:bf:8d:d8:44:df:ac:79:97:e3:b0:a5:92:e6:15:ea:5b:
10:13:9d:c1:f8:2e:4f:f4:23:8c:00:82:35:67:14:f7:02:d2:
d7:1c:30:5e:f0:18:02:29:7e:87:5a:8b:29:e3:4e:6a:80:45:
07:84:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:12 2025 by rpki-client