Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/323630323a666166643a6630313a3a2f34382d3438203d3e20323034383537.roa
File: 323630323a666166643a6630313a3a2f34382d3438203d3e20323034383537.roa (raw, json)
Hash identifier: 0vpMc5vKW8WuAkEKzjHJE+nUQB/BX9q3DQNtrqB1Mdw=
Subject key identifier: BC:E0:31:05:7F:02:3F:8B:50:A8:20:8F:B6:BD:2D:6A:3C:BA:83:BD
Certificate issuer: /CN=714ABB77D5246E14D8E5D98A14657391026964C0
Certificate serial: 40244FD595B116CE2B81308AA331E2F57297480F
Authority key identifier: 71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/714ABB77D5246E14D8E5D98A14657391026964C0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/323630323a666166643a6630313a3a2f34382d3438203d3e20323034383537.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 204857
IP address blocks: 2602:fafd:f01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:24:4f:d5:95:b1:16:ce:2b:81:30:8a:a3:31:e2:f5:72:97:48:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=714ABB77D5246E14D8E5D98A14657391026964C0
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=BCE031057F023F8B50A8208FB6BD2D6A3CBA83BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:55:7e:cd:55:03:73:2b:10:94:e0:79:70:
f8:22:20:dd:00:0b:8f:48:bd:66:56:f9:04:a6:8b:
77:48:93:aa:d4:f4:87:8e:41:12:e3:07:dc:87:41:
5f:89:b1:65:d0:22:c7:d8:6e:cc:0b:1c:e2:9a:4e:
c6:1d:87:de:c3:40:79:5c:c8:33:a9:a6:99:7e:87:
ee:67:24:88:a1:d8:24:aa:ba:dc:16:64:31:36:c0:
94:50:a4:63:5e:b7:1f:f7:3d:37:7a:b0:15:43:3d:
eb:20:a0:5d:db:3c:cb:94:7a:08:f6:5f:ef:0c:ad:
bc:d2:41:32:58:47:fd:1b:01:b6:e4:39:59:49:71:
a7:6a:45:85:cb:79:10:9f:26:11:15:46:6e:51:dd:
d8:e3:42:a0:bd:21:3c:ef:f5:c2:e8:df:1e:09:f8:
a9:c9:14:9c:b1:ea:fa:39:13:43:70:56:93:6c:b4:
02:ce:3b:f0:83:dd:1a:5e:65:d5:e0:72:21:7a:88:
2d:c1:1e:07:d0:d9:a9:a2:ee:95:98:13:27:8c:45:
d2:e7:98:59:c7:c6:0f:07:e9:9a:78:f5:f3:d8:d3:
ad:6c:cf:bd:88:58:1b:97:7e:96:d4:80:a4:c7:59:
7b:90:45:f2:1f:9c:a5:86:26:24:bf:f6:3f:be:38:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:31:05:7F:02:3F:8B:50:A8:20:8F:B6:BD:2D:6A:3C:BA:83:BD
X509v3 Authority Key Identifier:
keyid:71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/714ABB77D5246E14D8E5D98A14657391026964C0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/323630323a666166643a6630313a3a2f34382d3438203d3e20323034383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:f01::/48
Signature Algorithm: sha256WithRSAEncryption
0b:12:76:8b:8a:c3:ad:96:17:68:c3:1e:a9:a6:5b:51:67:8b:
0b:47:bb:df:44:93:22:b3:d2:0c:56:66:ed:00:8a:b2:8f:d6:
b2:fa:e8:18:b6:c2:0c:49:3e:cd:a8:5c:79:a1:4f:08:95:a7:
2b:f0:7a:8c:c7:2f:5e:90:51:5b:64:89:65:97:d5:bb:46:cc:
c3:fd:f6:4e:bb:4a:90:f6:05:21:a9:32:84:ce:43:12:ca:af:
c8:2b:a2:e1:31:b4:dd:37:92:2d:58:bc:a3:4d:58:c6:58:05:
9a:79:3a:7c:58:15:03:ad:cd:31:51:8d:43:71:ac:73:e5:a5:
6d:19:b1:2b:9f:9d:81:29:eb:07:c3:e0:bc:84:32:2c:5b:37:
fd:f6:be:ac:e6:e9:b9:5d:a2:05:09:34:2f:b5:e1:ce:d3:42:
22:99:c4:67:27:0d:b0:63:5e:26:8e:2d:94:bc:79:93:ac:95:
b7:f6:b2:f8:c3:41:11:b0:53:fb:43:a2:89:5a:a2:d6:e2:31:
7f:0d:f6:73:78:4e:fa:73:a2:a4:64:5f:9a:c6:71:61:30:79:
9a:b1:6d:e9:9b:cc:ee:4b:6e:a5:e9:85:57:e0:8e:ba:2a:cb:
a8:34:1e:90:d5:df:37:c8:07:61:4f:c2:5a:75:94:7b:b3:86:
4f:63:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org