Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
File: 326130613a363034303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier: bjS6urRsw65uOP0E7N9KHSKrpfiYf/NpxAhkh5JJh9I=
Subject key identifier: 2C:87:7A:CB:D8:52:C6:96:97:FD:41:F3:0B:FA:A6:86:6A:AB:D2:E4
Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7
Certificate serial: 2903C0A65CF782E1BC821304EB73E8692BA8801A
Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 50224
IP address blocks: 2a0a:6040::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:03:c0:a6:5c:f7:82:e1:bc:82:13:04:eb:73:e8:69:2b:a8:80:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=2C877ACBD852C69697FD41F30BFAA6866AABD2E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:00:6f:5c:2f:67:e3:57:5d:91:32:76:40:
04:5e:f4:ac:51:b6:b3:dc:57:c2:1e:11:4b:40:12:
34:70:df:90:be:32:f8:4b:40:88:4c:20:3d:54:63:
b3:b2:bb:1a:12:3f:81:e4:ea:1c:de:dd:e6:06:ec:
49:c2:fe:ba:e8:da:e4:d7:6c:56:a4:24:b3:9f:51:
71:91:52:e0:5d:c8:dd:dc:77:fb:41:a7:fe:0e:e4:
a6:f2:f0:7f:cd:e5:8c:2a:b3:92:38:5c:c8:66:8f:
55:3c:f2:62:e3:67:6a:fb:b0:dc:4b:b8:4c:dc:a9:
eb:58:72:b1:74:84:83:3d:95:8c:de:99:23:91:08:
dc:17:b3:47:29:57:86:f6:c0:00:ab:7f:6b:ca:91:
2a:57:ea:d6:c9:2b:bb:81:fa:34:50:b6:38:d0:8e:
40:11:ef:77:06:31:63:a8:bb:5f:d1:cd:e3:96:f2:
9b:12:bb:84:69:4f:d6:7a:20:37:c5:fd:2a:5d:07:
cc:2d:32:92:9c:22:ac:ae:3b:b4:4e:f8:df:b7:43:
98:45:9c:c8:c6:5a:90:d3:f9:fb:14:fd:77:ec:40:
0d:a6:3b:df:e4:d2:48:80:f9:e4:26:79:eb:e0:89:
06:07:24:02:c3:bc:9f:24:ee:e4:dc:e3:27:1c:72:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:7A:CB:D8:52:C6:96:97:FD:41:F3:0B:FA:A6:86:6A:AB:D2:E4
X509v3 Authority Key Identifier:
keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040::/40
Signature Algorithm: sha256WithRSAEncryption
99:de:f0:00:4a:f4:91:92:0c:71:26:db:1e:46:45:3c:2c:60:
97:1e:75:06:69:95:0d:6f:97:92:18:12:a2:6b:59:e2:e1:ac:
5d:91:5d:b2:2b:d8:83:10:6a:6f:b9:32:07:79:80:f7:a5:36:
2a:ff:2d:f4:d4:3a:30:07:db:7a:c0:38:9a:4e:72:60:08:b8:
95:d7:41:0d:94:af:43:ee:2b:ae:89:5f:74:ba:59:d1:24:e2:
34:85:b5:4f:47:19:d0:1c:51:ea:50:f0:6c:d1:0a:23:09:0d:
6d:0e:e2:19:d6:92:be:0d:69:42:b6:96:00:3a:40:89:06:df:
f9:3f:ac:e4:55:df:62:f8:18:5c:02:cc:de:ca:69:80:ef:1b:
69:db:eb:d8:d0:d3:07:9f:4e:b8:8a:f7:77:64:66:a6:39:3e:
9d:ed:25:31:1d:d3:fc:6b:9b:24:65:7d:34:e7:b0:54:3f:19:
e3:a3:f3:e0:d5:da:1f:9d:20:65:96:36:37:2d:87:7f:93:9f:
c1:b5:7e:45:21:80:f1:d2:09:49:9c:b2:98:b6:53:7c:9e:b5:
2a:23:7a:4c:f7:a3:44:bc:e5:f7:d3:c4:3d:80:2c:7c:51:09:
78:dd:d5:18:e8:00:39:fa:6d:aa:58:34:0c:e8:81:54:67:af:
04:df:d2:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKQPAplz3guG8ghME63PoaSuogBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhD
NTg0RjlGNzAeFw0yMzA0MjEwMzI0MjBaFw0yNDA0MTkwMzI5MjBaMDMxMTAvBgNV
BAMTKDJDODc3QUNCRDg1MkM2OTY5N0ZENDFGMzBCRkFBNjg2NkFBQkQyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyABvXC9n41ddkTJ2QARe9KxR
trPcV8IeEUtAEjRw35C+MvhLQIhMID1UY7OyuxoSP4Hk6hze3eYG7EnC/rro2uTX
bFakJLOfUXGRUuBdyN3cd/tBp/4O5Kby8H/N5Ywqs5I4XMhmj1U88mLjZ2r7sNxL
uEzcqetYcrF0hIM9lYzemSORCNwXs0cpV4b2wACrf2vKkSpX6tbJK7uB+jRQtjjQ
jkAR73cGMWOou1/RzeOW8psSu4RpT9Z6IDfF/SpdB8wtMpKcIqyuO7RO+N+3Q5hF
nMjGWpDT+fsU/XfsQA2mO9/k0kiA+eQmeevgiQYHJALDvJ8k7uTc4ycccoSRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULId6y9hSxpaX/UHzC/qmhmqr0uQwHwYDVR0j
BBgwFoAUghYgWF0UWh7RCbdanMkVCMWE+fcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdm
YTQ0LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgyMTYyMDU4NUQxNDVB
MUVEMTA5Qjc1QTlDQzkxNTA4QzU4NEY5RjcuY2VyMIGrBggrBgEFBQcBCwSBnjCB
mzCBmAYIKwYBBQUHMAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzQwZDZjNmY1LWFhMzItNDlkNy1hYmZhLWU2MDg0YmM3ZmE0
NC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM1
MzAzMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAADANBgkqhkiG9w0BAQsFAAOCAQEAmd7w
AEr0kZIMcSbbHkZFPCxglx51BmmVDW+XkhgSomtZ4uGsXZFdsivYgxBqb7kyB3mA
96U2Kv8t9NQ6MAfbesA4mk5yYAi4lddBDZSvQ+4rrolfdLpZ0STiNIW1T0cZ0BxR
6lDwbNEKIwkNbQ7iGdaSvg1pQraWADpAiQbf+T+s5FXfYvgYXALM3sppgO8badvr
2NDTB59OuIr3d2Rmpjk+ne0lMR3T/GubJGV9NOewVD8Z46Pz4NXaH50gZZY2Ny2H
f5OfwbV+RSGA8dIJSZyymLZTfJ61KiN6TPejRLzl99PEPYAsfFEJeN3VGOgAOfpt
qlg0DOiBVGevBN/S8A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:15 2025 by rpki-client