Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: 55XoROYLqfXPsu2wc+5hUiP1grUorMG/PcWnSK3uMHM=
Subject key identifier: 12:72:ED:9C:3B:F4:FF:37:7C:4C:7D:E3:5D:30:66:B7:1A:FF:A8:77
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 7B516AFE1D315058E0D3D1CA79007621625E76E3
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
Signing time: Mon 29 Apr 2024 00:25:31 +0000
ROA not before: Mon 29 Apr 2024 00:20:31 +0000
ROA not after: Mon 28 Apr 2025 00:25:31 +0000
asID: 151349
IP address blocks: 2a06:9f81:3031::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:51:6a:fe:1d:31:50:58:e0:d3:d1:ca:79:00:76:21:62:5e:76:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:20:31 2024 GMT
Not After : Apr 28 00:25:31 2025 GMT
Subject: CN=1272ED9C3BF4FF377C4C7DE35D3066B71AFFA877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:e4:17:e2:c8:09:e5:4d:29:d2:8c:42:f9:
9f:c8:cc:a4:17:f8:a9:85:a2:dc:cf:b9:21:b1:5f:
1b:a4:a8:b3:44:26:9e:4a:e1:ae:d4:ae:1e:c9:41:
05:80:bb:25:ba:dc:81:53:b4:91:41:c6:f7:1c:2b:
9f:cb:65:33:a2:b9:cd:6e:da:e7:fc:3b:ab:3d:30:
62:1c:13:05:ad:c5:49:0b:37:8a:00:85:eb:f9:9e:
17:44:5b:3f:3e:a9:01:e3:04:4c:52:f4:bc:f2:38:
6e:1e:09:cf:93:25:44:76:64:54:06:34:ed:04:e8:
cd:05:2b:cd:eb:e9:b7:f0:ca:a1:dc:54:02:29:44:
78:43:34:95:9b:4a:a5:74:34:89:80:64:a1:93:4a:
54:de:dd:5b:01:e2:39:e6:e7:01:c8:72:d8:40:98:
e8:04:aa:20:4b:5d:82:41:b6:01:fd:74:bb:85:b4:
78:3c:56:95:0f:03:73:5a:af:8d:ee:25:63:d3:d1:
63:36:f4:76:ba:91:15:ee:03:04:16:2e:a0:09:f8:
fa:22:75:f4:1f:a8:7e:4f:d4:79:56:fe:95:e1:90:
41:73:18:19:c7:fe:72:34:ae:df:ba:19:ff:01:1b:
0c:e4:12:5f:c8:9f:af:32:e7:da:02:75:e4:56:47:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:72:ED:9C:3B:F4:FF:37:7C:4C:7D:E3:5D:30:66:B7:1A:FF:A8:77
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3031::/48
Signature Algorithm: sha256WithRSAEncryption
97:53:8e:89:c7:79:05:62:68:8c:23:05:71:d0:d1:97:69:14:
02:b7:a6:d9:32:39:3d:f0:4a:b9:05:35:12:a6:44:a8:5b:83:
4c:f8:d6:1e:f9:bd:6f:f9:ac:35:58:be:70:7f:cb:b7:f5:9d:
9d:7b:49:93:da:64:15:06:06:7d:38:26:2f:c5:dd:61:78:aa:
71:dc:53:42:90:3f:e4:8f:07:1d:ab:9b:72:0b:b0:da:fe:d9:
df:76:a1:22:68:e8:72:2e:4e:31:05:5d:82:99:56:ac:76:49:
8a:62:40:ec:98:5d:64:b6:ab:b1:05:b9:3a:33:3f:a0:d8:86:
66:25:d6:3e:e6:df:b3:85:b3:f0:59:43:c2:7b:b9:7c:30:e7:
2d:8b:bc:19:76:b0:8e:d6:5f:1d:f8:fd:32:87:7d:01:e7:5b:
1b:7c:5d:35:68:64:43:78:db:d2:39:a7:5b:b5:ae:24:56:5d:
11:20:82:ea:9e:7e:44:84:2e:02:03:af:b5:8c:d8:66:7b:77:
78:93:b8:d4:12:99:78:a7:3d:cd:46:e5:f5:92:b7:e1:10:b3:
8d:72:07:2e:8a:e4:d9:57:1f:91:a5:86:8a:4c:6a:fd:ce:ea:
c8:b8:0a:a0:ec:bb:3f:da:c7:03:fb:66:15:11:50:1c:2b:71:
fb:dd:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 17:34:14 2024 by rpki-client on console-fra.rpki-client.org