Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: jDEZSfNBAyZDUJi+YsXZDsowP0WMSMDJd/B7Bm0byo0=
Subject key identifier: 7B:B2:95:5C:DB:08:C0:DF:D0:CD:F4:02:9F:3D:F1:61:21:51:DF:65
Certificate issuer: /CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
Certificate serial: 2CEC1890D7FA1B17A019293F0268EE729BBB6D24
Authority key identifier: 1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
Signing time: Thu 19 Oct 2023 23:34:43 +0000
ROA not before: Thu 19 Oct 2023 23:29:43 +0000
ROA not after: Thu 17 Oct 2024 23:34:43 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8903::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ec:18:90:d7:fa:1b:17:a0:19:29:3f:02:68:ee:72:9b:bb:6d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
Validity
Not Before: Oct 19 23:29:43 2023 GMT
Not After : Oct 17 23:34:43 2024 GMT
Subject: CN=7BB2955CDB08C0DFD0CDF4029F3DF1612151DF65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:7e:94:7c:8c:2a:34:00:f7:87:8d:fd:ae:
60:ca:a9:a9:ca:79:cd:27:55:ab:06:43:2e:0c:e6:
d0:c6:cb:9b:d7:37:36:f9:c8:54:34:17:d0:e8:82:
5e:09:34:b0:b6:27:c3:34:35:a0:61:5a:a2:18:67:
9b:b6:7a:75:b7:65:c0:bb:29:16:f5:c3:2d:98:fe:
dc:a4:d8:18:86:0f:53:6f:76:83:f3:e0:51:e3:b4:
82:03:79:06:a3:d2:42:d0:4e:5f:77:d3:41:60:56:
8f:0c:56:b1:65:87:4e:ea:16:bf:29:9f:e2:67:46:
ce:af:d9:08:70:0e:ab:c3:2d:26:a1:b1:b9:84:64:
42:4c:11:e9:8b:7f:23:fb:ca:db:09:7f:6b:92:b4:
2d:5e:c8:4e:79:88:27:67:82:14:bc:33:72:e3:1a:
b4:d7:76:ff:29:b9:17:a9:9b:57:61:19:23:82:bd:
cd:e4:23:ce:64:c2:e6:49:50:b9:ae:ec:9b:42:42:
82:50:86:4a:72:f8:0d:99:8d:38:be:8d:69:5f:7b:
70:33:e6:43:f0:7a:8f:ea:fb:7a:7c:8a:5e:9f:0f:
c7:09:e1:e9:71:f1:14:91:f9:ae:fa:5f:6b:4b:5b:
3b:84:38:30:4f:ed:9e:8f:87:51:6a:a2:7c:3f:8b:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:95:5C:DB:08:C0:DF:D0:CD:F4:02:9F:3D:F1:61:21:51:DF:65
X509v3 Authority Key Identifier:
keyid:1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8903::/48
Signature Algorithm: sha256WithRSAEncryption
21:e6:85:ed:dc:24:b4:bf:72:57:e7:50:5f:c0:7c:f8:80:32:
bd:6c:50:58:e6:ca:9c:37:66:bd:d0:79:86:1d:e7:95:d0:65:
08:6e:ce:fb:1b:25:fa:fa:54:e5:31:49:cd:ec:8e:4f:19:96:
cf:84:29:8c:c5:1d:b6:16:5c:6a:42:7f:85:ac:c9:4e:cc:82:
d0:f8:f8:e6:a8:5c:e7:73:eb:cd:4b:0d:d4:03:b4:e9:78:a0:
e1:f4:b6:ee:24:39:62:92:53:59:01:e3:12:15:76:60:4b:4a:
1d:68:c8:8b:c1:25:b0:2d:bb:84:26:6e:26:57:77:0e:d7:0f:
1c:e7:c8:a1:1b:35:7a:3a:ed:4b:2f:36:0a:9f:56:5f:20:7f:
ce:fa:fc:60:84:6a:a5:01:b2:65:6a:a6:23:2b:aa:d3:b1:d0:
49:dd:02:25:f5:b1:e4:56:73:8a:69:48:37:20:78:b7:f3:52:
2c:8f:1c:cf:aa:b2:1d:37:c5:dd:94:00:92:78:7b:e8:60:39:
1d:1a:71:99:ec:2c:93:92:93:f1:98:5a:24:93:31:9c:7d:e2:
72:0d:02:2e:9b:e6:ce:c1:39:99:47:d5:0d:a3:70:34:4e:5c:
61:bb:cb:01:36:a2:4e:1f:30:12:8a:3b:13:8d:de:06:e5:d9:
df:04:28:62
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIULOwYkNf6GxegGSk/Amjucpu7bSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQyQ0RBMEZCMjYxNTFDOTMxQUY1NUI2QTgxMTA5QjUx
QTIzM0RGMTAeFw0yMzEwMTkyMzI5NDNaFw0yNDEwMTcyMzM0NDNaMDMxMTAvBgNV
BAMTKDdCQjI5NTVDREIwOEMwREZEMENERjQwMjlGM0RGMTYxMjE1MURGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRb36UfIwqNAD3h439rmDKqanK
ec0nVasGQy4M5tDGy5vXNzb5yFQ0F9Dogl4JNLC2J8M0NaBhWqIYZ5u2enW3ZcC7
KRb1wy2Y/tyk2BiGD1NvdoPz4FHjtIIDeQaj0kLQTl9300FgVo8MVrFlh07qFr8p
n+JnRs6v2QhwDqvDLSahsbmEZEJMEemLfyP7ytsJf2uStC1eyE55iCdnghS8M3Lj
GrTXdv8puRepm1dhGSOCvc3kI85kwuZJULmu7JtCQoJQhkpy+A2ZjTi+jWlfe3Az
5kPweo/q+3p8il6fD8cJ4elx8RSR+a76X2tLWzuEODBP7Z6Ph1Fqonw/izFFAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUe7KVXNsIwN/QzfQCnz3xYSFR32UwHwYDVR0j
BBgwFoAUHSzaD7JhUckxr1W2qBEJtRojPfEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjVhZjFlYzAtODNjMi00MDJhLThhYTItMGFhYWQwN2Zj
OWYwLzEvMUQyQ0RBMEZCMjYxNTFDOTMxQUY1NUI2QTgxMTA5QjUxQTIzM0RGMS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzFEMkNEQTBGQjI2MTUx
QzkzMUFGNTVCNkE4MTEwOUI1MUEyMzNERjEuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzY1YWYxZWMwLTgzYzItNDAyYS04YWEyLTBhYWFkMDdmYzlm
MC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzOTMwMzMzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM5MzkzNzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BiQMwDQYJKoZIhvcN
AQELBQADggEBACHmhe3cJLS/clfnUF/AfPiAMr1sUFjmypw3Zr3QeYYd55XQZQhu
zvsbJfr6VOUxSc3sjk8Zls+EKYzFHbYWXGpCf4WsyU7MgtD4+OaoXOdz681LDdQD
tOl4oOH0tu4kOWKSU1kB4xIVdmBLSh1oyIvBJbAtu4QmbiZXdw7XDxznyKEbNXo6
7UsvNgqfVl8gf876/GCEaqUBsmVqpiMrqtOx0EndAiX1seRWc4ppSDcgeLfzUiyP
HM+qsh03xd2UAJJ4e+hgOR0acZnsLJOSk/GYWiSTMZx94nINAi6b5s7BOZlH1Q2j
cDROXGG7ywE2ok4fMBKKOxON3gbl2d8EKGI=
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:36:18 2025 by rpki-client