Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa
File: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (raw, json)
Hash identifier: E/OJJsH8vRLWk7ObLOrajKk/aVne0/9cuXNyPD2i5xg=
Subject key identifier: A1:C2:7E:E5:20:41:60:A1:AD:DE:FE:12:B2:E1:60:77:B3:28:33:A5
Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial: 36214939A73AA96F1C17CB6D211DD1C2A6C71765
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa
Signing time: Fri 07 Feb 2025 19:39:29 +0000
ROA not before: Fri 07 Feb 2025 19:34:29 +0000
ROA not after: Fri 06 Feb 2026 19:39:29 +0000
asID: 216455
IP address blocks: 2a05:dfc1:8500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:21:49:39:a7:3a:a9:6f:1c:17:cb:6d:21:1d:d1:c2:a6:c7:17:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Validity
Not Before: Feb 7 19:34:29 2025 GMT
Not After : Feb 6 19:39:29 2026 GMT
Subject: CN=A1C27EE5204160A1ADDEFE12B2E16077B32833A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:d6:5a:15:80:15:fb:5d:0e:7d:c6:2a:ee:
42:ee:d7:6c:ad:4c:aa:13:8a:b6:06:8a:63:0b:43:
71:0c:7e:4e:1b:11:72:68:1f:f3:69:cb:fa:a7:42:
00:2a:3c:45:6f:88:c7:18:25:ff:bc:74:8b:6b:2d:
04:82:5c:5e:8c:30:1e:06:77:f6:6d:56:13:08:72:
a6:ab:ab:48:d9:f2:22:98:9d:f6:6f:54:d2:5c:2e:
16:3d:4a:49:d8:26:f5:e6:76:c5:db:3d:a2:d6:ce:
1b:5a:fb:dd:b0:16:93:b5:ec:d5:6f:78:94:9d:13:
90:76:40:c4:85:43:21:f9:46:a8:a4:5a:ee:5b:fc:
4c:bf:7e:54:00:40:9d:fc:94:89:32:e4:80:dd:31:
ee:58:15:83:b4:96:3b:bf:63:87:69:93:be:b8:8a:
de:87:23:0e:92:dc:99:dd:d1:89:8b:fe:45:e2:29:
d0:4f:ab:69:c4:53:05:74:ee:be:96:7e:e7:3b:dc:
b0:fd:49:03:65:6d:7d:71:da:63:e3:b3:f7:a3:1f:
4b:87:6e:63:47:73:e4:04:ef:1a:7b:15:d5:34:94:
41:11:30:4c:aa:e3:40:7d:ae:91:f8:45:9e:fd:4f:
92:63:35:2f:b9:47:a1:18:1e:12:8f:46:2d:51:15:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:7E:E5:20:41:60:A1:AD:DE:FE:12:B2:E1:60:77:B3:28:33:A5
X509v3 Authority Key Identifier:
keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8500::/40
Signature Algorithm: sha256WithRSAEncryption
39:d9:11:14:37:ff:20:d9:17:85:24:f4:aa:39:7f:db:c6:82:
4e:f9:60:46:ad:a8:3d:16:88:a2:00:10:ab:7e:7a:c9:fc:aa:
27:6f:d4:a1:ca:b7:fe:af:0b:e6:d0:8a:87:44:42:c0:ae:c9:
2c:9a:61:32:3c:56:f8:5b:7d:81:7f:c5:76:4a:3d:f7:e4:91:
c0:97:de:28:f4:3f:c4:49:cb:4c:ad:1d:74:23:a6:3b:b2:c3:
43:08:af:43:28:98:5c:88:8b:bb:d2:c1:b7:75:9d:54:31:fa:
fa:90:84:b9:b4:1c:ab:f6:3a:c0:02:fa:38:58:bc:88:b2:75:
d8:8e:7e:57:5c:be:d3:17:01:05:1b:55:ea:05:4e:84:9e:ed:
b6:0f:ca:3c:af:71:d2:98:1c:eb:34:48:b9:97:30:02:c7:87:
89:82:99:76:ad:c0:f5:8c:bb:aa:8d:12:c1:e4:2f:dd:a6:6c:
95:24:fa:a7:35:53:5c:64:64:78:d1:e1:38:f3:f6:ad:7d:fd:
73:76:2e:fa:f0:79:3e:a9:95:54:51:f9:5b:9d:40:cc:03:e7:
13:6e:71:61:6f:b8:3f:ca:4e:17:6e:2c:9d:38:ea:a7:b6:cf:
32:ba:09:c5:b8:fe:53:fd:bb:7e:cd:5e:be:74:e8:43:17:c3:
9c:90:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:03 2025 by rpki-client