Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa
File: 326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier: fgxIxZ1XNrN1aJeFz6mmodtExCtvPBV3wpHKFwKdrdg=
Subject key identifier: F2:4B:CD:FA:0D:83:1E:53:FA:CB:23:E9:21:82:F2:9B:AB:89:2E:38
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 68E950AA6DB8C7A6A9B6926FA39497041D153E26
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 50224
IP address blocks: 2a0a:6040:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e9:50:aa:6d:b8:c7:a6:a9:b6:92:6f:a3:94:97:04:1d:15:3e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=F24BCDFA0D831E53FACB23E92182F29BAB892E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:94:41:40:4b:35:de:6c:c0:c6:3a:15:50:
fc:ff:8c:32:9b:d1:c0:cb:8e:da:c6:e0:7e:79:e9:
c6:5c:9c:c0:be:2b:4d:31:bc:36:97:c8:c6:e2:18:
22:80:e7:07:cf:11:9d:3c:b1:77:14:16:07:fa:fc:
66:b4:34:e1:83:42:87:aa:5b:80:7a:d0:80:40:cb:
71:19:3c:7c:e6:1f:7c:7f:0d:86:79:14:dd:ee:b9:
41:84:c6:63:93:73:33:53:c4:a6:ea:a5:ed:5e:96:
0f:7a:a5:1e:71:0c:d5:56:bd:c1:d8:6f:73:66:cd:
52:37:ae:d2:41:69:3e:43:ff:c8:80:13:35:4a:9e:
77:a0:c0:40:7d:f8:41:29:db:b9:1b:f1:4a:cc:79:
15:c3:b0:a5:c9:3c:f8:46:4a:fd:fc:14:95:74:b2:
9c:66:d3:7e:f2:83:fc:95:4a:db:20:55:d3:1d:60:
0c:1e:99:70:1f:ea:ae:cb:7a:07:0b:91:4c:73:27:
6c:5b:48:1e:11:ba:1c:02:d8:0b:5e:85:92:05:ec:
74:c7:46:2a:78:0d:fd:53:9d:7f:1f:d8:94:72:08:
e0:a3:b1:7c:18:08:33:b5:1d:18:25:3f:cb:25:e5:
dc:39:ee:de:fc:e9:91:19:a9:65:67:bc:24:45:71:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:CD:FA:0D:83:1E:53:FA:CB:23:E9:21:82:F2:9B:AB:89:2E:38
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:1000::/40
Signature Algorithm: sha256WithRSAEncryption
10:71:5d:6c:0c:2e:c9:50:e2:29:8e:f6:be:46:1d:f1:94:76:
5c:5e:06:03:64:80:c5:40:9c:60:ad:cd:62:ea:91:99:7f:c5:
81:df:12:45:49:a1:f6:6a:1e:ae:be:83:f2:c3:8f:33:8a:2c:
7a:9f:e8:9d:a4:28:1a:05:d8:aa:98:15:7d:c5:58:77:db:0b:
4a:42:e0:84:40:94:b8:4c:76:e7:d4:49:c2:cf:84:b6:4e:3b:
1b:22:b9:ee:b7:68:09:16:c5:82:9f:67:be:a8:c8:38:68:0f:
4f:f3:1f:87:4c:6f:f9:4b:07:21:f1:1f:78:71:0a:b8:df:70:
d0:d1:42:cb:f7:ae:6e:4d:68:95:6e:fd:72:64:ab:56:0c:e6:
2f:9c:bf:70:ba:15:8b:0c:76:34:04:49:26:59:4a:d6:4c:38:
9c:cc:ed:ef:e6:58:23:f4:f4:4d:cb:13:0f:99:b6:e8:db:d8:
fb:da:b6:51:40:e5:23:bf:99:84:75:37:74:6d:25:13:f5:d9:
ee:62:98:a1:06:53:30:8b:d4:ac:04:32:0f:6f:2d:e1:9d:7a:
c0:7c:b2:dd:c9:35:29:d6:4e:20:d1:c2:99:d9:f2:d7:39:29:
ad:55:90:d0:65:f7:e3:25:cd:e1:df:5a:62:42:7f:8e:f4:0c:
5c:69:85:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:28:20 2025 by rpki-client