Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/323630323a666166643a6630313a3a2f34382d3438203d3e203530323234.roa
File: 323630323a666166643a6630313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier: Fa129p51wDBrWHUjq0HCFF+cLzjS+HjcGt8SQokQX8o=
Subject key identifier: 54:A5:4C:E2:08:6B:B7:DF:69:09:56:8F:18:90:C7:3D:59:86:5E:E3
Certificate issuer: /CN=714ABB77D5246E14D8E5D98A14657391026964C0
Certificate serial: 7D9232ACD363D0E88F5F95EFD3C6A36E2BA618C7
Authority key identifier: 71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/714ABB77D5246E14D8E5D98A14657391026964C0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/323630323a666166643a6630313a3a2f34382d3438203d3e203530323234.roa
Signing time: Fri 21 Apr 2023 03:29:20 +0000
ROA not before: Fri 21 Apr 2023 03:24:20 +0000
ROA not after: Fri 19 Apr 2024 03:29:20 +0000
asID: 50224
IP address blocks: 2602:fafd:f01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:92:32:ac:d3:63:d0:e8:8f:5f:95:ef:d3:c6:a3:6e:2b:a6:18:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=714ABB77D5246E14D8E5D98A14657391026964C0
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=54A54CE2086BB7DF6909568F1890C73D59865EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:6c:d8:04:b4:32:54:49:5f:36:09:fb:0a:
14:fc:75:14:8b:97:b5:7e:4a:d5:9a:20:12:1b:b3:
d4:1f:d7:de:f1:75:1a:ba:b9:cb:c7:30:95:bd:78:
d6:37:cd:5e:2c:cd:a8:0a:90:da:e7:01:b8:5a:7b:
0a:6c:c2:e9:fa:3c:5c:d3:6d:56:58:a7:45:89:17:
c5:5c:8c:af:07:3f:a5:27:10:92:63:8e:8d:f2:f0:
32:ee:db:b0:84:75:53:24:9c:73:27:66:f5:bf:2f:
db:bb:e8:87:72:70:99:bb:6c:10:68:4a:98:47:f0:
53:12:03:dd:b1:15:08:fd:dc:0f:8e:99:13:bd:69:
8c:19:51:b5:8b:26:b9:ed:89:df:d7:e5:f9:00:77:
3f:8f:68:26:9c:55:39:28:a7:69:eb:3a:88:6c:3f:
6c:ac:f2:d5:74:8f:8b:f9:db:3f:2d:76:a4:15:6d:
4a:78:32:f3:fe:8a:c8:8f:93:92:12:97:cb:d7:29:
aa:02:bb:f8:b9:6b:d8:79:6d:34:68:2e:ee:2f:ea:
3d:c6:3d:52:ee:9e:0a:9d:ce:24:34:91:aa:a7:90:
df:dd:6a:30:80:ee:91:05:89:73:f3:a8:11:2e:5f:
81:31:63:71:a4:8a:37:75:b7:ce:0c:96:2d:09:4f:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:4C:E2:08:6B:B7:DF:69:09:56:8F:18:90:C7:3D:59:86:5E:E3
X509v3 Authority Key Identifier:
keyid:71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/714ABB77D5246E14D8E5D98A14657391026964C0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/323630323a666166643a6630313a3a2f34382d3438203d3e203530323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:f01::/48
Signature Algorithm: sha256WithRSAEncryption
5c:89:24:58:9d:8d:66:51:2d:b3:54:3c:bd:f2:9b:70:24:c7:
48:0e:bb:ba:7a:2a:68:61:ad:b7:7d:7b:72:e1:c1:d2:b0:63:
33:3d:4a:53:25:ae:58:20:24:12:53:89:47:c5:41:b8:f5:1b:
84:23:93:df:3d:29:06:cb:10:33:53:f7:0b:f8:37:92:65:5b:
97:5b:7f:d9:9d:90:19:29:8c:67:a7:9b:06:cb:08:b8:8c:29:
5f:f6:8c:9d:c6:a9:de:64:b8:75:e4:df:de:59:97:28:dc:36:
2d:a0:f3:ed:1e:d8:4c:8a:7e:c7:23:3d:30:e8:2d:be:1c:6a:
dd:4e:4e:14:75:90:e1:e4:80:c2:76:a9:73:db:b1:06:00:2f:
c1:78:a3:21:fd:9b:b7:0a:33:59:6f:6b:e7:51:b4:8c:2a:ad:
43:5f:d8:db:5c:7d:a7:5b:14:1b:ef:e2:8d:96:a5:3a:19:55:
34:ab:cc:db:8d:f7:49:9c:b3:7c:48:f6:0e:de:f1:3c:92:88:
66:0a:21:86:d2:5c:fa:71:1b:8c:83:97:27:5d:b7:22:0d:29:
24:da:d2:e6:54:50:f4:90:ff:be:ce:7c:e9:4c:bc:c7:11:0d:
23:e9:ce:27:cc:e8:4c:cc:38:e7:11:08:f5:4a:63:cb:cb:d3:
47:d9:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org