Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa
File: 326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier: jYVzvnXnuwtrVqz6JTX8APoDfZh6uSo6rLlFqM6o0n8=
Subject key identifier: 07:5A:E1:EF:01:58:B6:38:EA:FD:49:9F:2E:94:1C:9A:70:6C:57:98
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 25FAE2DBD5E59F4CAF5B01545506CC13CED14A98
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 48581
IP address blocks: 2a0a:6040:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fa:e2:db:d5:e5:9f:4c:af:5b:01:54:55:06:cc:13:ce:d1:4a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=075AE1EF0158B638EAFD499F2E941C9A706C5798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:f0:06:99:64:b5:42:55:39:8c:a9:09:32:
0a:76:71:54:a8:34:2c:cd:23:21:f4:2f:ea:33:2b:
4e:16:f6:f4:b4:3d:9c:3d:e4:ae:1b:37:7b:d3:64:
18:3d:4d:1b:d2:9a:c3:0d:6c:7d:dc:d0:36:d2:78:
5e:69:45:f7:fe:03:53:68:45:25:92:b9:a1:50:5e:
cb:9b:bf:fc:8c:c8:70:9e:8e:01:b6:00:88:e9:04:
0c:48:c9:84:35:9d:b2:89:86:9c:82:2d:7b:d3:a7:
15:99:96:93:4d:f9:58:42:f8:eb:eb:9b:e9:9e:23:
da:7b:a6:01:f4:c9:0a:89:06:59:79:84:37:f7:1d:
a9:d8:c0:62:a9:3c:43:b9:c3:d0:5f:93:fb:b0:5b:
1b:00:95:73:26:47:e5:2a:82:02:43:3d:64:20:1b:
6e:2f:2e:95:6d:75:c0:1d:3f:82:fe:72:e5:59:67:
59:b4:fc:10:11:cf:79:bc:36:00:19:9f:b3:d7:9c:
9e:4f:25:71:7b:25:6c:08:a7:87:7f:77:26:e0:7c:
0e:ec:e3:70:5c:cb:35:ee:5b:b3:2c:90:2d:cd:d3:
e7:fc:76:a8:78:cf:22:53:c2:8e:b2:2c:71:d1:54:
9a:f2:69:d5:c6:3f:31:b5:a0:73:f6:8d:af:31:d9:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5A:E1:EF:01:58:B6:38:EA:FD:49:9F:2E:94:1C:9A:70:6C:57:98
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:1000::/40
Signature Algorithm: sha256WithRSAEncryption
60:cf:a6:b7:7e:ae:a4:01:f8:0d:03:1a:ad:fd:fa:1a:40:a5:
87:14:7d:87:7d:5c:74:91:d5:fa:03:2a:4e:8b:56:74:9e:b1:
06:d4:34:4f:26:1d:4e:a9:dc:75:ee:05:8b:5a:e6:1a:46:da:
c3:db:61:85:8f:bf:c7:8b:7f:35:39:43:2f:17:c6:66:aa:33:
fe:6f:2d:73:42:65:f4:cd:26:cf:d0:c8:1d:2f:95:f3:fd:4d:
78:c2:94:2e:cf:a0:c3:fa:ee:59:e1:4d:a8:1c:5e:d0:f2:a4:
40:99:e9:0e:ef:e0:88:3f:1e:6a:a2:23:c7:bd:4e:2e:2a:63:
20:1e:a3:3b:c0:8a:65:2b:9d:47:2b:89:3b:8c:2a:89:a1:d3:
90:60:6f:33:8d:f4:41:dd:25:0f:0e:43:1c:c8:c2:7f:bc:a4:
82:85:2a:c9:c5:b9:c0:21:6b:68:0d:ad:ef:8f:6e:5f:ab:ac:
66:77:83:9b:88:2b:56:59:5d:2b:9f:1e:43:64:1d:80:f6:5b:
5d:b6:42:0a:1a:ba:6e:7a:07:4e:ae:36:da:cd:c3:4d:52:64:
ba:ac:8c:11:41:3d:99:a7:20:36:65:76:15:be:f3:7b:5e:ea:
cb:ba:92:ee:1f:cb:e5:b5:77:6a:3a:ba:ac:1a:af:83:64:5f:
af:a5:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:09 2025 by rpki-client