Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: OUhhUL9VybYAR1xm+Ds81oHSIwC+8bDrO4JLKl4ev8s=
Subject key identifier: 94:2A:7B:B1:16:D8:71:07:10:1E:A7:E5:12:52:1D:21:0D:3D:6C:4E
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 37D08DFDFBA7353553AA0BBA8317B476A85A2963
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
Signing time: Mon 29 Apr 2024 00:20:45 +0000
ROA not before: Mon 29 Apr 2024 00:15:45 +0000
ROA not after: Mon 28 Apr 2025 00:20:45 +0000
asID: 151349
IP address blocks: 2a06:9f81:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d0:8d:fd:fb:a7:35:35:53:aa:0b:ba:83:17:b4:76:a8:5a:29:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:15:45 2024 GMT
Not After : Apr 28 00:20:45 2025 GMT
Subject: CN=942A7BB116D87107101EA7E512521D210D3D6C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:ef:85:1d:3c:49:c3:65:49:76:f4:32:e0:
ee:ee:48:5c:ee:df:fa:d4:67:59:c1:ce:44:14:d1:
b8:5b:82:3c:72:ee:0f:1e:59:93:03:5e:87:cd:20:
13:d6:bb:0c:58:da:ab:09:33:c7:80:80:85:cb:91:
cd:70:cd:00:1f:c3:f2:01:bf:22:ff:aa:8e:d4:9b:
3f:86:dd:e9:86:ca:8e:12:c7:9d:f0:2e:46:d3:85:
77:56:7f:1a:46:07:20:a1:cd:02:0f:1c:19:ee:66:
80:71:9b:78:10:ea:31:ff:1a:f6:0a:5b:2f:42:ca:
70:99:cb:fe:1f:ee:16:77:22:95:14:5c:74:af:8c:
59:23:7b:39:4d:15:01:12:e5:62:11:d3:08:06:13:
1e:53:09:0b:27:7d:2c:aa:87:72:58:33:61:f8:bd:
d3:98:91:26:ca:af:b1:fc:47:40:a5:fe:0a:7d:61:
b7:2f:7c:a9:d4:da:57:e4:41:39:b0:fa:54:65:83:
a5:2e:0b:e9:a6:c7:03:83:ba:23:a7:de:f8:d2:3f:
c4:7b:47:65:da:99:f9:be:54:a9:80:d6:bb:ad:03:
12:ec:9e:38:44:53:c7:22:79:97:09:30:fc:ac:49:
0b:ac:1e:ab:32:32:e2:10:c7:a1:95:08:14:46:25:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:7B:B1:16:D8:71:07:10:1E:A7:E5:12:52:1D:21:0D:3D:6C:4E
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3000::/48
Signature Algorithm: sha256WithRSAEncryption
90:5e:9a:2d:26:06:b3:41:5b:02:7f:a3:19:ef:c5:de:f9:cc:
d2:a8:44:b9:b4:f6:cb:16:2b:e6:b2:66:98:42:6f:73:48:1b:
b8:54:ae:fc:86:23:c7:36:f5:da:3f:25:f5:a7:5f:5c:0c:3a:
04:4d:52:36:15:a4:10:c4:43:0b:77:8c:8c:98:5f:91:e7:6a:
fb:33:36:50:5e:d4:5a:6a:c0:d1:66:6d:44:34:8d:73:b6:8d:
99:68:2e:a5:83:64:ab:65:33:68:8d:b2:ea:1b:c1:03:18:97:
05:c6:f4:16:93:d9:67:d7:b5:82:b9:51:f7:c9:a8:63:55:21:
10:e8:b9:40:c7:17:59:b7:6f:7b:1e:12:a9:49:a5:88:1c:bc:
e6:a8:a7:8f:9b:4c:05:4c:71:d6:a3:3c:3a:a1:86:32:9f:a8:
51:98:b1:34:55:f7:25:45:23:16:df:fa:c3:d6:f6:1c:be:be:
52:74:25:51:9d:f4:f5:df:a6:23:9d:5d:85:75:30:8d:80:7b:
20:00:86:4b:d8:b4:f1:d0:a1:1d:c3:18:1f:4a:bb:75:15:25:
8e:b9:b9:bf:63:0b:5f:83:0f:a7:1b:a6:6d:95:85:32:58:65:
61:cd:d0:71:77:c9:b4:2c:a0:0f:14:2b:e8:fe:2e:24:76:14:
ec:6a:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:29:29 2024 by rpki-client on console-ams.rpki-client.org