Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: 3uJCOhEGeUoZLhGs3vIu0mthONv00zBut0cPIsl+AOM=
Subject key identifier: 29:32:E9:BA:7D:14:63:16:49:84:6D:BA:B7:FA:77:0F:8C:81:CC:1E
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 079EAFBED940F7CDBDAE24910850F0A0755DC7D3
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Mon 29 Apr 2024 00:21:46 +0000
ROA not before: Mon 29 Apr 2024 00:16:46 +0000
ROA not after: Mon 28 Apr 2025 00:21:46 +0000
asID: 151349
IP address blocks: 2a06:9f81:3011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9e:af:be:d9:40:f7:cd:bd:ae:24:91:08:50:f0:a0:75:5d:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:16:46 2024 GMT
Not After : Apr 28 00:21:46 2025 GMT
Subject: CN=2932E9BA7D14631649846DBAB7FA770F8C81CC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:6f:8f:69:26:44:f2:9b:55:ff:bf:ec:e2:
bb:4f:17:60:8f:59:68:79:38:3d:4a:c8:59:45:92:
ff:66:c7:d3:66:04:ec:3f:03:28:5f:89:f4:fa:8d:
7d:80:ec:83:00:1f:ab:8c:2f:9a:24:43:9f:4a:a4:
1b:47:15:43:f4:b7:ea:79:f7:b7:77:fa:f0:d7:cc:
82:5b:c0:d8:0c:c6:8f:b8:39:e7:d9:be:d3:66:e0:
a6:a6:db:54:32:16:25:dc:4b:c9:14:49:40:69:42:
28:2d:92:d1:e3:38:86:c8:80:a6:55:73:a0:61:5b:
26:94:8b:df:f7:fc:23:91:9a:8b:d0:b6:8b:39:96:
9b:f1:30:5e:87:c2:ca:a2:18:18:03:24:ad:63:e5:
5c:bb:cc:cd:e1:47:a5:2b:9c:25:92:b7:8a:8e:73:
79:10:d3:b8:94:69:a4:bf:18:a5:5b:3c:cc:07:8e:
f6:31:f6:f9:85:e4:3c:fa:c1:c6:d9:0d:ea:8d:e6:
4e:b2:35:ed:86:e4:c1:7e:fe:c9:94:8a:27:4e:df:
72:74:cb:b6:0d:0f:12:f7:1c:11:68:68:d3:6f:67:
1f:9e:88:79:53:ab:42:5a:4d:60:14:16:8f:ac:a3:
ca:9e:09:b3:ee:05:87:dd:38:92:ad:c0:a0:76:f6:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:E9:BA:7D:14:63:16:49:84:6D:BA:B7:FA:77:0F:8C:81:CC:1E
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3011::/48
Signature Algorithm: sha256WithRSAEncryption
5b:21:73:a7:5f:1b:61:3c:02:84:bc:41:90:d2:e6:cb:26:96:
27:54:62:38:56:09:26:84:ee:00:31:d7:fa:5e:34:e4:4b:bf:
ea:5a:47:49:32:64:64:5c:79:73:a7:50:0e:af:22:9e:c1:28:
34:5d:ec:6e:7b:60:1e:12:e0:89:0e:0e:cd:16:86:a4:70:75:
99:53:65:23:39:39:41:6d:c2:b5:60:d7:b8:de:7c:62:37:c3:
57:92:7e:cb:05:e7:83:e9:65:7f:26:cd:5a:23:39:7c:dc:19:
cb:0e:f9:46:5a:91:ba:00:2b:92:ed:23:8f:de:66:d0:0c:e7:
87:5e:e9:fd:bc:e8:5a:3b:e4:bb:d5:72:62:31:10:76:88:60:
92:c6:d3:6a:6c:5e:b5:04:16:1f:cc:57:f4:f5:17:2a:67:50:
8a:58:55:90:1c:71:1c:78:ff:a3:19:28:d9:1a:cc:dc:f7:12:
42:ed:7f:4c:d3:23:87:a9:9a:22:9e:de:11:11:73:3b:dc:f8:
fb:26:36:9e:b8:78:af:26:0b:b5:a3:72:a6:46:85:c0:4d:54:
da:7b:e4:e4:87:3d:ea:19:e8:03:df:f7:8a:b7:5d:5d:b9:a2:
0a:7e:a2:41:79:45:9c:f6:15:77:77:a1:15:41:a7:cf:a7:29:
9c:02:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:55 2025 by rpki-client