Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa
File: 326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa (raw, json)
Hash identifier: cnMYmblZ7aVKh9Wu7Tu523dZzDXUW4qvK4JoLNfoi4w=
Subject key identifier: F1:FB:FB:72:80:05:00:30:46:40:A0:2A:6E:05:F9:A2:41:48:73:31
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 2EBD9EC75F7C316D5F5B75B78BA14B7A7F569C94
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa
Signing time: Fri 21 Apr 2023 03:29:21 +0000
ROA not before: Fri 21 Apr 2023 03:24:21 +0000
ROA not after: Fri 19 Apr 2024 03:29:21 +0000
asID: 203867
IP address blocks: 2a0a:6040:60e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bd:9e:c7:5f:7c:31:6d:5f:5b:75:b7:8b:a1:4b:7a:7f:56:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:21 2023 GMT
Not After : Apr 19 03:29:21 2024 GMT
Subject: CN=F1FBFB72800500304640A02A6E05F9A241487331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:c5:87:13:d2:be:e5:20:d5:c0:28:8b:95:
76:59:52:b1:71:96:5a:bb:df:ae:dc:8b:d0:4d:71:
61:8d:b7:f6:a9:b3:aa:0c:55:9c:fe:4f:22:f5:2d:
b3:54:f2:0f:a2:9e:a6:58:74:bf:3c:ac:c2:69:3b:
9e:3d:bf:01:b8:92:15:58:51:53:df:64:d5:52:36:
b2:ac:07:78:62:7c:7d:cf:a4:cf:30:e1:71:2c:70:
2d:0d:7a:e4:85:c8:39:ee:ec:5a:87:20:e7:af:2b:
e6:67:fd:72:9f:a8:07:4d:d9:a7:13:25:66:c1:8f:
5b:49:50:9f:f5:e2:e1:ca:88:29:a5:22:35:e7:7a:
08:75:3a:2a:cd:4e:88:3c:7b:81:ed:31:b2:ae:cf:
26:7c:b2:4f:85:a3:07:9b:de:60:bf:b0:a9:ef:45:
7a:67:db:e9:93:1d:cc:fc:b1:53:db:50:74:37:71:
c6:f2:68:55:45:b2:28:11:21:59:34:bb:d0:dc:69:
2f:3a:86:b0:82:f1:82:7d:55:9a:45:39:a0:51:dc:
0a:8e:7b:96:c3:2d:7a:a5:24:cc:da:b3:1f:bc:95:
bd:5b:da:9a:67:a7:46:7c:ed:fb:6b:64:78:76:87:
41:26:7e:7e:43:f7:18:f7:fd:b9:f4:25:a9:21:f9:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FB:FB:72:80:05:00:30:46:40:A0:2A:6E:05:F9:A2:41:48:73:31
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:60e0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:7b:85:be:8f:2f:12:d7:0b:67:38:0a:59:bc:af:9b:a7:df:
5d:09:02:5f:4a:ea:92:76:07:be:05:80:f2:d1:b2:79:e5:92:
f9:06:62:36:7d:5d:f6:af:37:c5:30:e5:bf:c4:8b:d2:d1:c6:
38:85:a0:2e:a1:8e:74:67:89:7b:85:26:39:3e:6d:bd:dc:b6:
7e:d2:ce:58:12:f5:d7:01:ab:22:8d:01:0e:d8:cf:28:5e:1d:
ef:e1:63:69:4a:70:33:48:3a:27:28:71:9a:d8:20:3c:bd:37:
d8:dc:43:1d:10:72:bc:a3:f1:d5:1f:97:dc:36:b3:af:03:e3:
08:a9:40:45:38:18:bc:16:3d:f8:ae:86:ea:70:f9:a9:46:9e:
04:9f:b9:7f:8b:34:e3:b6:f3:e2:13:4f:a6:ab:34:65:56:d6:
20:fc:bd:26:9f:e4:3c:0c:cd:fb:db:b9:4d:4b:dd:cd:71:f4:
9c:a8:6e:f3:ad:44:97:f0:dd:05:6c:49:a7:c0:88:46:5c:9e:
ee:6e:c7:e2:28:8d:cf:54:03:0c:39:b8:8f:09:eb:95:61:af:
c6:eb:7f:1d:a6:d1:4e:cf:ce:1f:cd:f1:34:8c:95:99:ec:7b:
54:d4:c3:7e:d4:63:32:67:c0:7e:26:3f:01:df:82:47:a2:e2:
1f:9f:66:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:48 2025 by rpki-client