Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: w5xBpt7iRPP/8ql9yPDNcVge/CvA+AWEyluIYfmoncA=
Subject key identifier: 87:98:2B:23:EF:22:D0:17:4B:16:73:D8:01:6E:46:96:FB:7A:93:0E
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 6619E46D69DAD152CA4EC9F36CDCCDD85EAE36F1
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa
Signing time: Mon 29 Apr 2024 00:21:32 +0000
ROA not before: Mon 29 Apr 2024 00:16:32 +0000
ROA not after: Mon 28 Apr 2025 00:21:32 +0000
asID: 151349
IP address blocks: 2a06:9f81:3004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:19:e4:6d:69:da:d1:52:ca:4e:c9:f3:6c:dc:cd:d8:5e:ae:36:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:16:32 2024 GMT
Not After : Apr 28 00:21:32 2025 GMT
Subject: CN=87982B23EF22D0174B1673D8016E4696FB7A930E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:66:3c:c7:32:50:3b:91:76:09:01:fe:ab:
7d:a5:e7:71:c5:82:67:c6:22:21:71:9d:5b:d9:41:
ec:6e:91:c6:7a:c6:5b:2c:52:54:94:0e:fc:e8:89:
02:95:0d:c0:fd:ac:de:05:88:08:62:d9:f0:86:0a:
72:f9:bc:54:a0:b3:98:c4:ea:0a:1d:35:49:2a:45:
5c:22:3e:bb:62:31:a8:63:ad:7c:97:68:80:ac:6f:
94:01:95:cc:64:a3:4c:24:53:2e:ae:a7:56:ee:90:
b2:ad:0a:73:b2:3a:8d:b9:de:92:00:36:3a:a3:ca:
2f:0d:66:40:4c:04:3b:27:42:9f:6c:54:fe:97:9b:
76:f7:9f:ac:59:fd:78:24:5a:23:b5:ce:bb:f1:1e:
22:e9:8d:63:3c:52:1d:d6:70:14:f1:de:01:cb:60:
b4:fb:fd:8a:47:03:d2:29:26:cc:19:38:64:6b:08:
71:25:e6:a5:97:2c:e1:b6:5c:4d:19:10:17:be:e0:
80:05:7a:d7:0b:56:95:ea:10:d4:44:14:c0:ec:33:
bb:c0:43:89:fe:0e:4e:f7:3f:cb:30:77:33:36:16:
ce:d0:a3:8d:1d:c2:88:b1:62:9b:70:c8:dc:80:66:
dd:f0:2a:38:93:05:b4:ad:fb:99:08:6e:b4:e0:e0:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:2B:23:EF:22:D0:17:4B:16:73:D8:01:6E:46:96:FB:7A:93:0E
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333030343a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3004::/48
Signature Algorithm: sha256WithRSAEncryption
1b:89:62:1b:5d:94:e1:fc:ef:9b:69:e6:0e:b3:6d:7f:ad:ca:
c4:c6:14:30:de:19:7e:e4:2a:c3:93:aa:e5:c1:b7:d1:b1:70:
93:d1:d2:5b:16:9e:18:76:fd:1d:59:7b:cd:f4:53:4c:09:38:
10:f6:53:cb:07:c1:b4:1a:f3:c1:33:5b:f5:a6:62:68:6f:f9:
32:ef:a4:f8:b4:ec:ec:86:a7:ef:e6:02:33:66:dd:2d:96:10:
d2:00:25:34:24:4e:f8:68:7f:0a:13:f6:25:12:64:c5:de:c1:
06:14:9e:00:22:66:40:74:89:f2:2e:b5:2e:d1:3f:14:94:c2:
77:53:14:0f:d0:e4:bb:4a:c0:75:f8:81:4f:15:e9:20:71:2b:
bd:0a:35:4b:be:26:91:f6:84:5e:ea:12:cf:1a:b4:a0:53:3f:
cf:1d:ac:ce:4e:70:7c:b6:0f:36:91:ff:d3:c1:e6:f6:68:4f:
62:c6:28:ea:dd:51:3f:e8:4b:85:0f:3b:b4:7c:8a:02:66:fa:
90:99:50:57:0e:98:e9:b8:75:ed:83:f2:29:5b:45:f2:2a:1e:
18:69:08:0d:13:60:a5:1e:34:34:47:7a:85:dc:a1:1f:48:8c:
cb:38:bd:6c:5a:80:34:13:5d:22:bc:bd:eb:87:fd:c9:c6:a1:
c6:95:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:08 2025 by rpki-client