Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa
File: 326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier: pBD1RODip2MAI10JTtypUYfjzrWtEfdsCrGSkmhSRME=
Subject key identifier: 95:86:54:06:D7:88:67:64:C8:46:C3:A3:D0:E4:50:B2:B1:2F:A7:85
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 284CD2EE5BC14BE1626759558F33EB64A933CFF7
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 204857
IP address blocks: 2a0a:6040:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4c:d2:ee:5b:c1:4b:e1:62:67:59:55:8f:33:eb:64:a9:33:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=95865406D7886764C846C3A3D0E450B2B12FA785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:ca:93:9f:0c:a1:b5:7c:b6:26:fe:18:fe:
f5:a6:f5:18:2d:a6:26:b1:a6:b5:6c:62:a7:53:eb:
60:19:fc:58:82:dd:eb:7c:cc:05:3a:a2:98:0a:42:
0c:1f:8e:32:a9:27:6c:a0:11:dd:6f:4b:0b:4e:4d:
86:17:cc:17:dc:bb:e5:a4:52:54:d9:ae:00:ec:87:
4b:c2:2c:af:6e:a4:ed:47:9e:3a:dc:15:68:24:f1:
bf:bc:ad:63:29:5f:96:f0:74:df:df:4c:27:71:14:
04:6a:1d:f1:51:58:40:61:bc:df:b8:f5:50:6d:63:
88:5b:bc:60:dd:a8:3d:ef:55:fd:27:90:7e:a9:fa:
2d:16:a0:a0:ff:63:86:fc:fc:8a:de:79:19:92:66:
4d:1b:1c:4c:26:f1:b0:ff:f3:6a:cd:5a:db:49:1e:
4a:9f:b7:6e:02:4d:5b:4d:3d:9e:e4:a1:77:71:69:
7f:02:59:41:f5:e6:17:5c:a7:40:fe:af:4e:b9:93:
63:e6:d9:27:7c:e4:8d:a2:4c:9f:fa:9b:4c:f7:68:
c4:13:dd:b4:2d:05:c0:e3:06:b1:39:27:f2:29:00:
51:c0:cb:f8:f9:5f:ae:ed:eb:28:dc:e9:21:a3:11:
7c:a1:b7:3e:43:c2:cf:5d:83:e4:17:fd:a6:45:67:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:54:06:D7:88:67:64:C8:46:C3:A3:D0:E4:50:B2:B1:2F:A7:85
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:6000::/40
Signature Algorithm: sha256WithRSAEncryption
17:e9:a8:27:3b:2d:b2:75:2b:02:62:f8:e7:9a:56:08:b4:d2:
6e:63:db:af:e9:5d:a4:f9:98:82:36:46:a8:83:1f:f8:b9:a0:
0f:c3:19:03:ee:63:2a:9b:f6:a3:dc:53:4a:eb:b1:1a:a0:bf:
cc:e2:fd:49:ed:18:37:7d:b8:63:55:5c:93:68:c9:96:b5:6e:
12:24:f1:bd:fe:9b:cb:19:94:1e:7c:79:e1:04:78:ae:48:5c:
b0:23:20:54:88:1a:b6:3f:c2:17:9b:f9:30:14:90:d8:e4:14:
13:20:a8:c9:de:08:aa:0a:91:db:4c:8a:1f:04:3e:1b:6f:f6:
49:4d:00:b1:18:67:ca:00:65:c8:52:f3:a4:a7:97:59:27:1b:
ba:16:58:97:9c:b9:1a:68:2c:b8:be:37:78:e1:a9:53:8c:84:
8b:bd:74:63:88:07:ed:3f:ad:4a:20:1e:33:85:f5:21:cb:8c:
0f:58:db:71:3c:ad:2e:6a:14:2b:b3:1c:4a:4a:c9:5d:2c:3e:
94:93:24:be:5d:58:8e:b0:27:f3:6c:94:55:5b:8e:c0:02:8c:
25:03:8b:29:9f:52:70:74:48:50:24:ca:0a:5c:9d:05:2d:57:
86:56:dc:79:78:55:a0:5c:03:36:41:7b:dc:20:5b:2c:8c:b8:
e4:31:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:21 2025 by rpki-client