Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa
File: 326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier: kH1HbBWnIp0kP2MUGnIvIQqABD3xNrCtteMHYgwsMEg=
Subject key identifier: B2:77:36:CD:97:94:03:AD:2F:B0:AE:C9:70:7E:3A:AD:F2:03:96:7F
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 7F6145A659679E5A1F9A979A6935E65396D8ED91
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 203635
IP address blocks: 2a0a:6040:60fd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:61:45:a6:59:67:9e:5a:1f:9a:97:9a:69:35:e6:53:96:d8:ed:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=B27736CD979403AD2FB0AEC9707E3AADF203967F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:15:67:1b:82:38:9f:6a:cd:fe:81:dd:91:
51:d4:de:67:16:28:f8:51:07:cd:c2:57:e8:a4:b0:
b6:9a:60:93:05:1e:ad:2a:5a:47:22:c4:a3:09:f9:
35:58:d1:76:52:04:09:a2:37:25:72:95:40:c6:03:
7b:62:10:5e:46:67:5f:6a:ae:ff:11:9b:70:5a:10:
f5:bc:31:6b:0c:3b:2a:5c:90:ae:ec:c6:60:01:02:
7a:d5:f7:c9:2c:32:8f:a9:ea:12:6b:89:07:0a:d3:
17:97:b9:85:84:6c:28:c9:f3:e4:8d:21:c7:22:4c:
1a:f4:39:07:f2:27:39:8c:49:25:74:74:02:c9:0a:
a8:e2:b7:cc:41:9e:29:09:0a:ff:c7:6e:eb:66:df:
d6:ba:3e:4a:bd:af:26:db:c6:53:1b:d3:5b:40:d2:
91:0f:09:6f:14:0e:ea:8e:b0:d5:a7:39:06:02:8d:
6c:64:31:b1:35:c9:0d:9f:4d:e0:e5:f0:81:20:83:
c9:e5:77:34:6e:2b:77:c0:cf:28:5d:40:07:20:17:
c7:7f:2d:0d:51:6d:a3:12:f8:bb:e5:99:5a:76:5b:
32:87:02:f2:99:c0:00:ca:c9:07:f6:60:f5:47:0a:
4a:e0:08:49:9b:40:98:9e:33:75:e4:2c:c5:5e:48:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:36:CD:97:94:03:AD:2F:B0:AE:C9:70:7E:3A:AD:F2:03:96:7F
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:60fd::/48
Signature Algorithm: sha256WithRSAEncryption
56:99:a3:6d:af:71:75:f9:af:78:84:69:eb:15:65:5f:c2:bc:
0b:62:0b:47:42:5f:51:d0:ee:21:1d:49:b1:51:3f:a3:3d:dd:
9a:61:4f:3a:45:e5:e7:6e:80:b3:61:4a:82:9f:47:f9:c4:0d:
1f:f9:5b:71:86:6f:7e:a0:6d:5e:c6:5d:d4:fd:15:f3:42:a7:
04:16:fe:65:bd:c4:81:41:20:af:a3:bf:3a:be:63:3e:dc:35:
45:7d:9e:95:76:8b:e1:7e:2e:26:45:79:f8:06:fb:25:ed:93:
49:81:d8:23:f7:94:3f:83:cd:b1:46:cc:51:ce:eb:9f:0f:e6:
93:1c:76:2f:fa:d9:2a:3e:bb:26:49:5c:d2:65:a0:64:c6:a0:
ce:8a:14:95:78:b2:88:07:46:56:cc:f0:94:92:97:40:d6:98:
bb:01:d9:e9:d3:6b:10:00:8e:52:33:90:b2:d8:8c:10:e3:62:
bf:27:9c:60:54:96:a4:b8:fa:a3:c5:6a:2c:24:fe:92:dc:31:
7f:ee:e7:da:e8:fc:75:20:a7:61:6a:6b:95:e2:bb:cd:53:14:
8c:78:74:b7:a2:ec:e1:60:2b:67:80:2e:24:90:88:a7:08:e1:
6f:48:62:cd:89:4f:66:ba:5d:c8:7f:28:dc:e6:10:a7:b6:2c:
a1:32:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:00 2025 by rpki-client