Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: J1TkDjQePI+42sJH3lt4mjbRxIvnqI9EUpa0RWMKmWM=
Subject key identifier: 4B:58:0E:E5:85:2D:63:A0:86:29:F0:92:5F:F8:3B:AD:E8:84:8F:27
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 4021F12EAA3BBD4F360563F9302D256E09C59834
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa
Signing time: Mon 29 Apr 2024 00:25:53 +0000
ROA not before: Mon 29 Apr 2024 00:20:53 +0000
ROA not after: Mon 28 Apr 2025 00:25:53 +0000
asID: 151349
IP address blocks: 2a06:9f81:30fe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:21:f1:2e:aa:3b:bd:4f:36:05:63:f9:30:2d:25:6e:09:c5:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 00:20:53 2024 GMT
Not After : Apr 28 00:25:53 2025 GMT
Subject: CN=4B580EE5852D63A08629F0925FF83BADE8848F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:c7:57:c0:95:6d:a8:d8:6d:eb:4c:f5:e7:
aa:27:fb:50:61:f1:d9:67:ef:f4:ca:bb:d4:5d:7c:
0d:22:0d:0e:39:cc:77:5f:29:7f:9c:a0:b3:3b:b0:
2c:5a:a8:f3:d0:98:6f:3f:e4:87:5e:7c:5f:0c:d5:
c3:f4:6f:0b:f8:9f:56:83:7c:ba:ff:f7:9f:08:8d:
7d:8e:be:77:7c:d6:75:14:fc:de:96:7c:08:fd:15:
61:1b:db:e7:17:5a:60:47:e6:5b:e6:cd:70:4e:7b:
7d:5c:f5:9c:d1:f9:86:58:3a:18:13:41:04:7e:f2:
a0:6b:01:08:de:1e:81:f0:cd:8b:cd:e0:aa:97:9e:
71:b9:8d:9f:a2:3d:99:a3:41:2a:2e:18:a8:41:fa:
0a:ea:e8:a4:73:9c:c6:91:8e:54:d9:cf:c2:f0:0b:
d3:68:63:34:12:b2:20:53:4a:17:54:f5:28:b2:d4:
04:35:90:31:39:16:22:39:91:30:65:ca:69:53:41:
f8:e7:94:d0:65:ce:f1:67:91:16:84:26:47:94:0b:
72:38:61:43:e9:5d:9f:dd:8d:3b:aa:dd:9c:fd:f7:
ee:39:5a:e7:d8:f2:ad:03:7d:e1:78:7f:28:5d:31:
3b:b9:1b:e5:c1:88:c1:c9:7e:86:1c:71:63:f1:71:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:0E:E5:85:2D:63:A0:86:29:F0:92:5F:F8:3B:AD:E8:84:8F:27
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30fe::/48
Signature Algorithm: sha256WithRSAEncryption
41:2e:e3:d5:3d:04:32:b4:2a:3a:a0:2d:10:7b:09:82:27:49:
44:36:0f:fe:50:2a:f2:58:be:da:fa:65:40:a2:9d:7f:19:4d:
e4:43:0b:e7:38:2c:f8:91:d1:93:9b:c9:35:39:9f:00:f9:42:
87:68:b3:0e:3f:9a:5b:a5:22:df:9c:db:fd:6a:0e:94:30:a5:
14:91:d4:a6:60:6f:3f:a3:0f:62:be:63:94:62:c0:c9:f4:2e:
49:83:54:e8:8d:d8:aa:8a:7a:9a:29:6c:86:4a:cb:6d:19:d8:
34:11:3a:4e:fd:68:6b:4e:dd:0b:22:6b:6d:d1:ef:8f:19:5e:
6f:2d:e4:42:7f:4b:f0:bb:28:19:98:8d:df:d2:3e:44:69:50:
f8:65:6d:5d:c2:15:d4:eb:3d:68:a4:66:bd:92:fa:de:8f:99:
75:f5:c9:5a:76:9e:67:c3:33:08:63:c2:8a:80:1b:f5:4f:5f:
e1:37:45:14:12:fd:f5:be:fc:c2:27:d0:24:4f:92:8a:b8:ab:
75:2c:b7:72:67:8f:d8:84:57:a7:25:48:19:8a:45:1c:69:45:
a3:51:02:fc:83:f4:3e:76:74:19:ba:19:6e:36:79:a5:20:9a:
67:6f:2e:64:72:4e:79:97:24:43:20:87:e9:f5:3a:b7:ee:c2:
a5:1e:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:20 2025 by rpki-client