Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa
File: 326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier: gTEOzKzjbC9BGZANwAWs4WxpMHAlOSFuXc09BNInggk=
Subject key identifier: 85:97:FD:34:85:81:69:67:20:2B:08:BB:CE:70:1F:00:E5:A2:AE:B1
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 794F08E38E48F05DF16537978132E2F7AC0BCD4C
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa
Signing time: Fri 21 Apr 2023 03:29:21 +0000
ROA not before: Fri 21 Apr 2023 03:24:21 +0000
ROA not after: Fri 19 Apr 2024 03:29:21 +0000
asID: 50224
IP address blocks: 2a0a:6040:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4f:08:e3:8e:48:f0:5d:f1:65:37:97:81:32:e2:f7:ac:0b:cd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:21 2023 GMT
Not After : Apr 19 03:29:21 2024 GMT
Subject: CN=8597FD3485816967202B08BBCE701F00E5A2AEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:9f:1a:74:67:fc:be:43:e1:c6:34:90:62:
5e:72:ab:a2:ce:e0:a4:d9:74:98:27:3d:d3:cb:7f:
be:3d:ed:0c:61:8b:7d:b4:75:f9:df:aa:c8:97:53:
83:90:78:0e:78:ab:1d:06:f5:af:1a:b6:a9:a7:1e:
44:f0:8b:0a:83:02:4e:0e:1c:93:af:77:93:b0:6f:
76:61:7f:bc:95:46:d0:bc:a1:c4:2e:a9:c8:9f:06:
ca:bf:ce:17:9f:6a:80:c5:65:ab:cd:e7:3b:24:6f:
b9:2f:6a:33:d1:81:ce:48:17:74:49:d7:60:31:a8:
24:1c:32:55:f2:7b:34:93:45:f8:92:5e:bb:9b:3e:
03:16:18:20:ef:f3:9f:3c:ec:b3:ba:27:ff:e1:fe:
8b:f2:2d:71:29:80:a2:90:8d:50:03:b1:98:ac:d2:
1e:ae:58:e2:ad:39:1a:34:18:5e:4b:e8:82:d9:61:
0c:d9:d0:67:7f:4f:51:83:e5:e3:fd:d4:da:c5:46:
77:23:97:3b:d1:88:21:e1:e3:bc:bf:5e:10:bc:47:
c5:7d:34:8a:bd:65:c4:d8:bf:58:2b:d2:51:56:bb:
ea:35:e3:1a:38:1e:1b:df:3d:86:89:d2:f9:0a:2c:
0c:3c:00:69:73:d3:29:9e:0f:ee:4b:98:28:ae:3a:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:FD:34:85:81:69:67:20:2B:08:BB:CE:70:1F:00:E5:A2:AE:B1
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:6000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:6b:42:fb:ac:05:7d:1b:13:1e:46:20:c9:bb:71:22:b2:3d:
98:6f:3b:39:84:10:f2:0a:30:50:b3:fb:0e:70:67:34:78:77:
35:b0:01:ab:6b:65:5e:27:a1:e0:13:b0:58:03:06:e6:c1:55:
2e:52:23:c3:bb:28:be:99:4f:9d:60:48:8e:30:5c:e1:42:24:
f5:6d:a5:ba:49:19:47:1a:c4:33:96:84:3f:7e:03:7f:89:57:
17:6e:73:5a:40:0a:6d:54:ec:4a:57:03:a0:a6:f5:4f:be:3d:
c1:a7:20:e1:89:31:68:f1:f7:b8:ce:78:53:b2:67:01:07:ba:
7d:4e:7e:53:96:31:69:cd:c3:54:f4:a6:82:59:e2:18:b5:6d:
2e:6d:93:9c:61:2e:d9:39:a6:f2:6e:e6:b5:fe:88:8a:6c:de:
c7:fe:21:c8:7b:49:39:53:77:34:be:4c:d3:67:ba:a6:e4:4f:
5e:ce:98:26:f4:d9:7a:56:d8:18:e2:5c:06:38:ef:76:6d:27:
82:bb:27:e2:d4:d8:29:41:07:c6:4f:9b:4a:a6:91:c7:42:38:
05:da:c3:79:e0:dd:fc:0a:ed:ac:0d:6f:21:c5:8b:73:5e:5a:
c6:fb:1d:cd:b5:dc:27:29:74:04:a7:a6:cf:4d:d5:f9:8e:95:
14:c2:3f:43
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUeU8I445I8F3xZTeXgTLi96wLzUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhD
NTg0RjlGNzAeFw0yMzA0MjEwMzI0MjFaFw0yNDA0MTkwMzI5MjFaMDMxMTAvBgNV
BAMTKDg1OTdGRDM0ODU4MTY5NjcyMDJCMDhCQkNFNzAxRjAwRTVBMkFFQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsmp8adGf8vkPhxjSQYl5yq6LO
4KTZdJgnPdPLf7497Qxhi320dfnfqsiXU4OQeA54qx0G9a8atqmnHkTwiwqDAk4O
HJOvd5Owb3Zhf7yVRtC8ocQuqcifBsq/zhefaoDFZavN5zskb7kvajPRgc5IF3RJ
12AxqCQcMlXyezSTRfiSXrubPgMWGCDv85887LO6J//h/ovyLXEpgKKQjVADsZis
0h6uWOKtORo0GF5L6ILZYQzZ0Gd/T1GD5eP91NrFRncjlzvRiCHh47y/XhC8R8V9
NIq9ZcTYv1gr0lFWu+o14xo4HhvfPYaJ0vkKLAw8AGlz0ymeD+5LmCiuOj0LAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUhZf9NIWBaWcgKwi7znAfAOWirrEwHwYDVR0j
BBgwFoAUghYgWF0UWh7RCbdanMkVCMWE+fcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdm
YTQ0LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgyMTYyMDU4NUQxNDVB
MUVEMTA5Qjc1QTlDQzkxNTA4QzU4NEY5RjcuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzQwZDZjNmY1LWFhMzItNDlkNy1hYmZhLWU2MDg0YmM3ZmE0
NC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzYzMDMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzNTMwMzIzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQGAwDQYJKoZIhvcNAQEL
BQADggEBAEtrQvusBX0bEx5GIMm7cSKyPZhvOzmEEPIKMFCz+w5wZzR4dzWwAatr
ZV4noeATsFgDBubBVS5SI8O7KL6ZT51gSI4wXOFCJPVtpbpJGUcaxDOWhD9+A3+J
Vxduc1pACm1U7EpXA6Cm9U++PcGnIOGJMWjx97jOeFOyZwEHun1OflOWMWnNw1T0
poJZ4hi1bS5tk5xhLtk5pvJu5rX+iIps3sf+Ich7STlTdzS+TNNnuqbkT17OmCb0
2XpW2BjiXAY473ZtJ4K7J+LU2ClBB8ZPm0qmkcdCOAXaw3ng3fwK7awNbyHFi3Ne
Wsb7Hc213CcpdASnps9N1fmOlRTCP0M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:49 2025 by rpki-client