Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa
File: 326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier: e1/OQjq6aFtzTX/maNnrghhVwC2qjo0no/IvQWqURr8=
Subject key identifier: 9A:27:D9:55:42:99:DE:11:CE:AB:C5:66:0B:A9:27:EF:B4:D9:C9:CC
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 0C759A303D1E8EEDE9CFA22BB60F5B7659FB4CB1
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 48581
IP address blocks: 2a0a:6040:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:75:9a:30:3d:1e:8e:ed:e9:cf:a2:2b:b6:0f:5b:76:59:fb:4c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=9A27D9554299DE11CEABC5660BA927EFB4D9C9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:b4:fd:e7:36:7c:dd:4d:5f:9b:16:20:f8:
a5:35:f0:7f:e7:dd:2d:32:33:19:39:5c:de:ea:8f:
32:3a:7c:91:6b:ab:cc:0e:45:95:41:3b:e3:1a:53:
24:57:d4:83:5b:d6:13:ae:87:7e:c7:7c:38:27:e3:
0f:71:aa:17:8c:59:32:61:98:76:33:6a:c0:bc:82:
0a:bb:74:c3:fb:75:51:5a:21:6d:d4:86:51:95:6e:
6b:f8:f6:4c:85:0e:d6:af:5d:7a:66:14:c1:7e:1b:
dd:7d:9e:2c:cb:ea:b2:2d:5a:7f:a2:7d:68:04:41:
03:2e:a2:2b:a4:56:3b:9e:73:80:67:f8:c8:6c:35:
ff:4c:7d:81:5b:2a:45:f3:a4:1c:27:3d:0b:d3:4a:
f0:89:c2:ff:f3:7b:be:07:63:b2:c3:79:fe:9e:b6:
e1:81:de:8c:ac:c0:c0:b2:27:2d:d4:cc:45:c5:c6:
3c:18:a3:77:a5:3f:16:c2:f4:36:03:e9:aa:1f:e2:
ae:a2:3a:5a:40:1f:4f:7a:98:5a:2a:75:fa:88:e7:
0b:81:7b:55:0a:38:0f:75:78:bb:27:d9:94:d1:2a:
d6:9c:a1:af:d1:b4:59:64:9c:9e:ec:13:25:39:fe:
b4:a5:08:6d:1f:2c:b9:0a:51:e9:b3:e4:79:1f:bc:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:D9:55:42:99:DE:11:CE:AB:C5:66:0B:A9:27:EF:B4:D9:C9:CC
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:6000::/40
Signature Algorithm: sha256WithRSAEncryption
9a:46:b3:9d:aa:e5:12:a5:01:1d:08:30:56:ce:b2:a4:95:15:
36:da:c4:1c:9a:71:5c:4c:aa:c8:6b:b5:1b:4f:65:d7:99:16:
21:9e:ea:79:1c:a1:34:ba:84:37:50:f8:3c:df:18:4f:dc:93:
3b:a5:21:49:71:43:89:e7:ac:77:59:39:65:c8:17:8d:d0:5a:
ed:89:0a:2b:0c:ef:83:e6:6a:9b:de:6a:d5:4f:af:21:e0:19:
cf:21:db:98:e7:f4:1b:d5:8f:6f:48:a4:a9:64:92:37:67:fc:
32:a2:bb:59:54:77:6e:ae:ed:25:4b:eb:37:9e:72:ec:00:35:
19:9a:a6:d0:40:09:3e:6a:30:28:10:17:7c:8b:a2:c0:ac:10:
b1:1b:a2:b6:90:e8:7e:21:a5:7f:75:9b:ea:de:dd:68:48:ac:
70:f7:b5:92:15:27:ec:d1:71:2a:8e:7d:66:56:ac:e1:89:3b:
5d:05:ff:07:23:c4:9b:76:b0:c1:9b:b0:7c:00:0d:ce:20:a6:
6c:ab:13:c3:d8:97:5f:62:18:13:f4:15:fa:09:ff:c8:06:97:
59:2b:cc:85:f4:21:5d:e6:de:c7:48:76:4e:59:f1:35:2b:eb:
84:c6:e5:5a:f1:36:b8:4c:53:a6:25:fe:ab:53:41:72:36:4a:
19:ff:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:15 2025 by rpki-client