Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3430203d3e20323034383537.roa
File: 326130613a363034303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier: /C+c29Wdsjcq1UlvTgAWjXYQ3hY/eojietNMNAbUnX4=
Subject key identifier: 8B:3F:48:F6:E1:CB:16:53:E6:0D:F7:0C:D9:A0:37:EA:2C:66:0C:86
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 046ECB3729595BDA0955D201CC751FB961C55052
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3430203d3e20323034383537.roa
Signing time: Fri 21 Apr 2023 03:29:21 +0000
ROA not before: Fri 21 Apr 2023 03:24:21 +0000
ROA not after: Fri 19 Apr 2024 03:29:21 +0000
asID: 204857
IP address blocks: 2a0a:6040::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6e:cb:37:29:59:5b:da:09:55:d2:01:cc:75:1f:b9:61:c5:50:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:21 2023 GMT
Not After : Apr 19 03:29:21 2024 GMT
Subject: CN=8B3F48F6E1CB1653E60DF70CD9A037EA2C660C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:7e:27:b9:ee:84:95:b2:ef:6d:cd:5f:b5:
0a:52:a9:df:c5:57:15:88:a3:30:cb:f1:e5:94:47:
ba:ce:8c:ef:c9:4d:ad:84:96:d3:2c:3b:be:b2:a0:
9d:0e:18:61:e1:6c:49:d1:53:7e:6f:4a:4a:3a:d3:
bc:4f:19:a9:ff:dc:e4:c1:c9:d0:f7:42:9e:a4:cc:
74:8c:13:a8:b6:cf:9f:74:42:4f:4c:06:cc:51:e4:
7e:25:01:0a:2a:f8:54:a9:49:21:dc:00:1b:65:ba:
47:c0:49:17:91:90:64:03:5f:cc:a8:c8:b0:da:20:
11:cd:d9:7c:71:f5:f7:af:c6:cc:aa:e5:cc:5c:5a:
9c:2f:8b:bc:54:b5:23:27:c3:8d:f1:46:9c:de:16:
37:a7:cb:bf:a8:b6:95:e5:2e:c0:8d:3e:7b:9a:28:
e0:36:24:8e:db:9b:a5:d5:c5:bd:c5:e9:8c:2b:22:
44:46:2c:80:6d:3e:e1:1c:61:00:d5:b3:24:c3:57:
6d:01:d8:36:9f:aa:e3:3c:81:4f:7e:b4:d0:e5:78:
89:4c:52:e6:c1:eb:39:33:ae:72:17:3e:ac:d4:91:
c4:30:eb:1d:71:e8:9c:c9:11:83:ff:7d:44:c7:d6:
b7:5d:4c:90:82:e1:26:03:3a:d4:69:8f:97:d2:cb:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:48:F6:E1:CB:16:53:E6:0D:F7:0C:D9:A0:37:EA:2C:66:0C:86
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3430203d3e20323034383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040::/40
Signature Algorithm: sha256WithRSAEncryption
2a:85:cd:a8:56:95:db:c0:cc:f2:3e:d1:13:54:e9:0d:f4:5e:
de:30:f0:74:b1:9a:04:0c:59:6b:3b:d6:bf:8c:df:85:c3:fb:
d8:3a:d6:6d:ff:0c:a9:ec:a9:36:44:8b:d1:59:4e:7e:58:3e:
a9:73:1a:30:62:91:e0:4e:f7:83:f7:5a:ed:75:70:1f:62:cc:
f7:15:56:27:df:50:24:27:c2:e6:53:95:58:73:f8:d8:77:1b:
a8:88:d1:69:9e:50:a5:8f:5b:f3:2a:d4:6a:f5:ad:ea:ac:04:
89:f4:5a:27:c8:04:7f:9e:56:5f:a2:57:78:5b:81:a4:4f:7f:
19:78:7d:7d:eb:70:52:91:46:c0:f2:30:3f:13:fe:01:77:26:
86:85:96:78:53:8b:ca:6a:c0:0d:ad:1e:71:37:9f:9c:f9:b1:
9c:8a:e7:b7:e5:76:de:b5:96:75:a9:b9:9e:f8:0d:5b:54:be:
cd:62:3a:84:69:fe:1e:d0:f8:a8:dc:51:07:54:e6:91:f7:79:
fc:a6:2a:73:8e:ee:b7:50:ec:1a:0b:a8:b9:04:9c:98:47:0e:
31:e2:77:2a:8d:ec:b2:8b:ad:ca:16:0e:d2:84:7d:ba:fa:8a:
73:12:87:a9:40:9b:58:38:ab:2d:43:f4:58:60:d4:70:4c:42:
f4:7c:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:06 2025 by rpki-client