Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: DF+lmI5wWmIcKXa4Wpjrou68b980Y4wo3Yx6cQxakvs=
Subject key identifier: F6:B0:65:5E:48:CF:83:3F:02:92:C0:67:60:7D:09:AF:39:5C:73:8C
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 4CE7226B4431765079267FE207626FAB86CFCCCA
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Mon 29 Apr 2024 00:21:01 +0000
ROA not before: Mon 29 Apr 2024 00:16:01 +0000
ROA not after: Mon 28 Apr 2025 00:21:01 +0000
asID: 151349
IP address blocks: 2a06:9f81:3001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e7:22:6b:44:31:76:50:79:26:7f:e2:07:62:6f:ab:86:cf:cc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:16:01 2024 GMT
Not After : Apr 28 00:21:01 2025 GMT
Subject: CN=F6B0655E48CF833F0292C067607D09AF395C738C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:0c:98:bf:49:e0:14:00:b8:43:4a:0e:77:
80:8d:1c:50:96:69:77:2d:1f:09:d0:32:e3:8f:f9:
a4:7e:ad:fe:84:2f:d7:fb:7c:94:d9:c5:e4:18:6a:
90:76:3d:1e:85:0c:dd:91:0a:f3:12:dd:a5:88:18:
69:2d:ea:9b:0e:bc:11:cb:d1:da:0b:3a:e5:18:9b:
87:7e:da:f7:45:b4:00:92:5e:ee:68:ba:18:1d:da:
e3:ff:eb:8a:9b:f3:5f:1f:bb:dc:3a:91:02:41:5b:
0f:b7:b2:47:3d:30:53:6c:e4:3f:63:d9:69:7c:ce:
3a:14:c1:a1:6d:98:58:9d:7d:f6:41:f7:7a:40:b7:
65:c6:26:a1:15:f1:31:92:bd:0e:5d:85:a2:a3:88:
45:40:0b:2a:08:ff:50:57:4d:5a:b6:d4:9a:a5:ad:
ce:44:6b:70:25:33:ee:d5:3f:04:b6:8a:78:ae:6d:
6c:19:ff:cf:57:74:d1:66:17:1c:ad:59:63:d2:df:
42:c3:ca:a4:71:3f:81:33:0a:4c:3a:80:26:4a:20:
36:28:1f:40:6e:45:57:03:a4:e4:bb:7d:d6:61:0f:
f6:06:5f:d4:dd:78:7d:c0:0d:bc:04:1d:d1:ea:6f:
db:a7:fd:f1:e3:de:94:20:89:df:1e:c6:18:6e:00:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:65:5E:48:CF:83:3F:02:92:C0:67:60:7D:09:AF:39:5C:73:8C
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3001::/48
Signature Algorithm: sha256WithRSAEncryption
33:32:db:73:b0:8d:5b:2e:c4:76:37:e3:b0:f2:3c:53:95:a6:
79:01:19:85:63:88:79:be:3e:1c:37:e1:31:47:aa:a3:5e:b7:
f5:d4:35:26:9c:2e:16:79:55:43:2c:d9:34:2d:b3:73:d6:e6:
86:2d:ed:5d:70:6c:08:5b:6e:1a:20:21:e3:93:59:4a:e8:3a:
1a:17:ce:d5:af:9d:52:9e:2e:5b:e8:fd:e9:5b:18:e4:fb:d8:
6e:1e:0c:46:e7:85:a6:39:b8:20:42:8c:f2:94:69:e3:44:69:
f8:79:1c:91:1e:fd:5c:5e:87:2f:cd:8f:ba:15:44:83:ca:6c:
61:d7:d4:1f:88:81:4a:2c:f6:55:18:4b:2b:5c:31:1c:8e:63:
cf:01:b5:de:44:fe:09:79:7e:d5:c3:29:57:c9:73:59:76:05:
a9:6a:68:ff:e7:f7:bf:d8:a0:26:ea:18:bd:f4:33:39:ee:2b:
50:28:b8:0e:5b:6e:e0:76:98:66:45:b4:ba:65:83:c6:14:f8:
e3:27:63:c8:b0:84:54:81:99:a0:17:e2:3c:c8:24:e9:85:42:
7f:1f:11:ed:a4:25:24:2c:53:8a:0b:2d:5e:d9:41:e2:ff:10:
33:0a:59:56:b6:1c:39:94:0b:b2:ed:4b:66:39:ba:de:69:11:
b7:f0:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 17:34:14 2024 by rpki-client on console-fra.rpki-client.org