Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: 829mL7zNg8OV+ipGxn6TrNnQeEgDdq40dqK/Wq9q1GA=
Subject key identifier: 19:15:BA:5A:8B:FA:06:C6:16:8D:0C:E1:33:92:27:D4:5E:C4:2B:CC
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 2DDCF97184D172C805990075EC528DBD213DC56C
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
Signing time: Mon 29 Apr 2024 00:21:11 +0000
ROA not before: Mon 29 Apr 2024 00:16:11 +0000
ROA not after: Mon 28 Apr 2025 00:21:11 +0000
asID: 151349
IP address blocks: 2a06:9f81:3002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:dc:f9:71:84:d1:72:c8:05:99:00:75:ec:52:8d:bd:21:3d:c5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:16:11 2024 GMT
Not After : Apr 28 00:21:11 2025 GMT
Subject: CN=1915BA5A8BFA06C6168D0CE1339227D45EC42BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:90:9c:97:30:94:dd:af:b3:4b:c9:0e:f5:
3e:5d:cf:2e:a8:78:d0:2e:fc:d3:e5:2f:be:d1:3c:
1a:63:28:c6:f2:60:85:1c:c8:2a:b6:aa:fd:52:6f:
cb:b6:a8:d2:da:25:b8:d1:1a:87:69:3f:25:e9:09:
cc:eb:af:29:be:56:92:67:cf:a0:35:fc:8d:54:5f:
ad:17:9a:31:68:aa:14:09:9f:95:a0:ec:e1:09:d3:
f9:e7:96:03:b8:59:81:b2:13:76:70:f3:70:bc:39:
57:14:cd:a3:68:b3:db:b5:8d:da:da:0b:3b:fc:c5:
80:be:9f:ca:87:86:bb:89:da:e6:79:98:c5:e9:a7:
6c:a4:b9:c3:20:3c:b7:08:d7:25:58:e0:3e:f0:98:
4d:71:dd:43:57:a7:b1:8c:cc:46:f0:95:b9:94:14:
98:61:88:a9:d2:94:77:44:1f:12:34:e8:ca:40:1c:
13:7a:1a:d7:88:3d:f1:28:c6:e8:3a:ff:02:d9:a2:
3d:2d:0e:d0:06:e1:3d:85:bf:f9:70:88:c1:37:d2:
a0:02:d6:28:bd:82:ea:db:57:e1:48:b9:9e:95:18:
b2:6a:7f:e3:ce:d5:12:0f:a9:b8:9d:65:39:64:c7:
d2:58:56:26:8d:55:ee:f8:42:88:b9:c3:86:1e:5a:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:BA:5A:8B:FA:06:C6:16:8D:0C:E1:33:92:27:D4:5E:C4:2B:CC
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3002::/48
Signature Algorithm: sha256WithRSAEncryption
63:84:af:bd:13:8d:b3:11:11:f5:1f:ff:ba:d0:c4:99:e7:87:
ab:03:4d:d1:b9:63:d3:dd:5e:95:31:54:7e:0e:29:68:6e:b9:
e7:f6:48:42:1a:2e:a2:03:ef:47:c8:54:5c:cf:c3:28:bc:74:
40:64:8d:db:dc:e5:ac:66:a1:c1:cf:51:d4:fa:eb:ab:5d:4d:
0a:05:f6:13:3c:0f:23:a8:73:af:96:cb:aa:89:4a:33:01:d2:
c6:5a:18:2f:e4:f0:a8:4c:ad:09:a3:2a:55:e4:2c:c2:bd:c4:
bd:1f:de:9e:5f:c2:07:04:c8:13:94:ce:4c:d1:30:36:9c:25:
9e:50:80:1e:61:79:fc:27:21:c7:c5:20:79:71:46:7e:52:87:
18:05:57:f2:74:4e:68:9b:ee:aa:8d:8e:73:2b:64:db:75:48:
fb:18:88:df:03:85:d4:25:6d:13:db:0c:47:a4:a0:9e:0d:7e:
e9:f0:d9:7e:91:bc:4e:a6:5b:dc:a9:be:6c:85:f6:57:c2:b2:
3d:15:06:7a:b1:b2:cb:58:a4:f1:fc:1c:03:bf:b9:46:e5:ac:
ab:79:f8:70:e0:1b:48:2d:94:14:a6:fb:51:fc:1f:89:11:cd:
be:16:24:6f:b2:9b:82:36:65:56:29:8e:db:d9:19:1f:4b:b1:
9a:1d:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:27 2025 by rpki-client