![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
File: 326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa (raw, json)
Hash identifier: DgZW8pL5yQ/+tnAFMIrusLiNazd1tO+Sk9B2W/gMggY=
Subject key identifier: 19:38:A5:46:60:49:3B:2B:5A:96:4B:EC:9B:AF:32:F4:CC:43:26:92
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 46DB0D30719E03324CCB344EDC90ED70196BB523
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
Signing time: Mon 29 Apr 2024 00:26:40 +0000
ROA not before: Mon 29 Apr 2024 00:21:40 +0000
ROA not after: Mon 28 Apr 2025 00:26:40 +0000
asID: 203979
IP address blocks: 2a06:9f81:30fd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:db:0d:30:71:9e:03:32:4c:cb:34:4e:dc:90:ed:70:19:6b:b5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:21:40 2024 GMT
Not After : Apr 28 00:26:40 2025 GMT
Subject: CN=1938A54660493B2B5A964BEC9BAF32F4CC432692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:5c:8b:ab:60:b9:43:cd:d8:69:4f:10:10:
15:c9:e2:d5:18:b0:fd:fb:57:65:fe:29:27:a5:f4:
36:ea:ad:55:5d:47:ec:1e:bb:a0:f8:d1:c2:81:d2:
51:5d:7e:15:39:6b:bd:d9:f5:e0:44:a2:2f:4f:43:
1c:e5:a4:60:a5:9b:5f:6c:11:77:01:a2:c6:f9:ec:
20:89:9a:b7:b2:44:86:90:3a:96:8a:83:42:aa:eb:
42:61:aa:af:53:39:d1:db:6b:3d:da:25:25:e5:3a:
79:3e:04:e2:aa:23:2a:35:3f:28:dd:c4:27:59:a2:
15:3e:82:e3:36:86:5a:85:fa:9d:fa:48:7b:02:cf:
d4:1d:ca:42:6d:10:98:de:89:be:ea:7d:a6:53:b4:
1e:0e:ff:7f:e6:5b:91:51:0d:9e:3b:bc:05:42:6b:
38:27:d8:2e:9c:1a:0f:ff:1d:41:93:ea:5e:42:88:
87:5d:22:57:94:6c:7e:01:f4:08:f7:79:16:0e:6f:
b9:b1:07:ba:aa:17:aa:22:46:2d:45:b2:a4:96:26:
25:e1:c8:0f:13:50:ad:72:6d:32:b3:8c:70:c8:17:
09:0c:2a:75:f4:1a:a8:bb:f6:51:21:c3:38:45:e6:
33:fc:55:fb:ab:bf:d5:61:e0:b4:0a:3a:bb:4c:ab:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:A5:46:60:49:3B:2B:5A:96:4B:EC:9B:AF:32:F4:CC:43:26:92
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30fd::/48
Signature Algorithm: sha256WithRSAEncryption
12:b4:72:a7:0b:1e:a3:64:32:5c:b7:8f:c2:19:52:f3:ab:fb:
4b:dc:86:15:11:88:45:ac:b7:0b:b9:b3:6b:cb:b2:54:71:6c:
3b:93:69:7f:d6:03:0c:aa:fe:3c:e4:a6:52:6b:e2:a2:6e:3f:
81:62:60:c3:46:61:e8:9d:ab:45:21:cd:b6:65:22:8e:ac:3e:
74:92:2b:97:5e:f4:5b:2f:3d:01:e2:dd:86:f7:f2:6e:d0:85:
c0:7e:cf:74:01:f7:68:88:19:52:57:d0:fb:e2:45:97:2c:13:
3f:bf:ad:84:f6:81:f9:cb:9e:2e:4d:67:82:b0:69:ef:82:e0:
0e:7a:6f:70:f4:a0:48:b5:72:f2:93:cd:71:4d:c9:42:a1:2f:
ca:8f:05:cc:fe:54:fd:5d:27:c3:b9:a8:48:7c:41:22:39:9f:
3d:80:8f:de:47:78:63:cc:8b:94:01:01:7c:06:3d:83:55:62:
6c:9f:38:98:cf:88:d4:d0:b7:f9:ef:ea:9c:06:eb:98:db:0a:
71:11:be:74:c9:76:c0:63:73:33:42:8f:b7:62:78:f3:39:b9:
eb:89:5f:82:a3:3c:28:eb:5f:d2:bb:e7:48:c8:33:aa:5c:91:
56:e9:91:d0:b7:1e:14:67:83:c6:9a:a0:c4:ac:2f:bf:6a:07:
0f:f9:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:54 2025 by rpki-client