Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: VqpOH3JB7kumbyw4OPBmixjJvwk4WT0FskamZu4ZUto=
Subject key identifier: 62:65:8B:8A:82:21:74:11:00:55:AB:B6:EB:30:F2:F5:C8:14:BC:F1
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 7A7E2610C2FF0144201A54E3B2493E21A83988BC
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
Signing time: Fri 31 May 2024 14:42:02 +0000
ROA not before: Fri 31 May 2024 14:37:02 +0000
ROA not after: Fri 30 May 2025 14:42:02 +0000
asID: 151349
IP address blocks: 2a06:9f81:3003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:7e:26:10:c2:ff:01:44:20:1a:54:e3:b2:49:3e:21:a8:39:88:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: May 31 14:37:02 2024 GMT
Not After : May 30 14:42:02 2025 GMT
Subject: CN=62658B8A822174110055ABB6EB30F2F5C814BCF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:98:2f:10:bb:dc:f9:6b:00:8e:bf:6b:a7:
7c:f6:d6:ae:31:28:41:d2:3c:f4:85:94:d8:dd:7f:
5f:40:89:13:79:dd:b1:9f:93:6d:12:42:39:f7:43:
c7:e4:0b:74:fb:7f:b3:51:de:d9:12:74:ac:92:c6:
e7:7b:80:b9:a2:be:11:88:7c:19:b8:f2:a6:ad:ea:
f4:7a:68:20:34:dc:a5:fe:40:2d:bc:1d:c0:0e:be:
1d:84:73:a1:04:16:84:e9:44:b2:73:af:75:2c:6d:
a7:44:f0:3e:e5:27:ad:d8:86:40:b8:f0:96:0b:75:
e3:7c:0f:1f:cc:16:98:53:dd:5a:e1:4a:c1:c1:05:
1c:10:7f:78:3f:e4:f3:8b:41:3f:eb:8e:22:0e:6a:
6e:34:bd:d2:32:21:7a:3c:af:e8:82:3f:05:eb:7c:
3c:1a:61:af:d6:d9:b1:ff:94:df:95:57:a3:cb:fe:
73:38:d1:20:26:ca:02:69:02:72:4e:3f:c9:99:72:
44:9a:e0:ef:cd:cd:c5:7f:0e:63:d8:5a:d6:f6:2e:
8d:8b:39:5b:e4:0f:d7:38:8c:26:7c:4d:59:b4:8e:
bc:fa:80:d7:45:77:73:12:76:88:32:e5:e0:ae:69:
e1:a1:e8:2c:d0:b8:20:a1:fe:7c:3f:c8:3c:b1:6a:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:8B:8A:82:21:74:11:00:55:AB:B6:EB:30:F2:F5:C8:14:BC:F1
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3003::/48
Signature Algorithm: sha256WithRSAEncryption
94:84:76:b6:da:c1:29:67:f2:7e:c0:2d:71:86:e1:32:da:33:
d6:ea:c4:1d:f6:70:7a:05:92:c3:5e:74:18:5a:40:07:63:c4:
90:3d:f6:7a:94:13:b9:c6:38:6b:e1:f7:c0:36:ec:fd:e9:43:
21:be:da:43:fd:99:d8:57:7e:62:5b:cb:d5:e9:6e:82:3b:b0:
13:92:53:52:77:60:bb:e2:74:e5:b8:90:be:7e:13:68:8a:d5:
1f:d4:f9:e2:11:47:29:fd:7d:41:75:66:b5:af:8d:1d:30:10:
6b:56:64:8c:75:60:1a:ce:bb:ce:f9:6e:25:78:28:b4:0e:a4:
5f:c4:12:8d:ac:92:46:43:82:cc:64:dc:3c:3d:c2:2d:02:76:
3b:87:31:38:09:47:c2:0a:2a:a4:84:be:60:5e:c5:16:92:7e:
69:72:d0:35:b6:1e:c5:95:e9:e7:a6:7f:53:88:99:da:c7:1d:
8b:3c:24:62:3f:87:ce:80:18:0d:74:8a:eb:71:3f:56:e7:94:
48:e8:94:2c:3b:93:d0:c7:af:86:26:7b:63:0d:83:b5:8d:30:
bf:ee:ee:17:fd:42:8c:d9:29:ea:af:85:f4:f6:4f:ac:97:0a:
cc:8a:46:27:b1:49:e0:5a:be:e0:ac:58:62:cb:f7:b3:5f:84:
db:09:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:20:55 2025 by rpki-client