Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
File: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier: T+UH26QLW0J9fvaMsqSHI81YN8u6D4igl4Tf3/9pyH8=
Subject key identifier: 0F:53:76:93:B6:BA:C6:85:5A:63:7B:77:B2:88:4F:BD:1C:CD:91:53
Certificate issuer: /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial: 412657609DBAD36C6698DFC7757679EA28A63FB6
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
Signing time: Mon 29 Apr 2024 03:15:55 +0000
ROA not before: Mon 29 Apr 2024 03:10:55 +0000
ROA not after: Mon 28 Apr 2025 03:15:55 +0000
asID: 215087
IP address blocks: 2a06:9f81:30fe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:26:57:60:9d:ba:d3:6c:66:98:df:c7:75:76:79:ea:28:a6:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Validity
Not Before: Apr 29 03:10:55 2024 GMT
Not After : Apr 28 03:15:55 2025 GMT
Subject: CN=0F537693B6BAC6855A637B77B2884FBD1CCD9153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:6f:bc:86:03:44:ed:84:a7:03:db:11:7b:
06:32:8d:3b:8d:91:53:72:ec:32:46:e0:ef:76:5e:
28:f2:65:61:59:69:15:c3:f7:7e:3a:c7:b2:80:81:
ed:56:b3:e0:9b:92:2c:8b:f5:85:0d:cf:c9:d4:69:
42:cc:93:fe:84:06:4b:06:80:9a:a0:be:7b:89:35:
dd:46:e8:a8:07:9d:83:3d:65:55:33:5d:5a:00:80:
16:6f:77:b9:03:ac:a0:42:48:3d:85:b6:32:de:d7:
80:1f:d7:a8:79:81:41:d2:25:2d:2f:f3:4e:e9:cd:
f6:6a:de:5b:8d:68:e0:69:a2:a6:80:aa:55:0d:d4:
f9:af:f4:9f:b5:c6:e2:e6:dd:99:22:0b:69:8d:28:
90:1f:da:e4:43:f1:74:4c:2f:58:c5:f2:d5:b3:dc:
ed:d3:3a:16:f9:51:fb:85:3b:e5:8e:2d:d6:d4:6d:
fa:77:b5:29:02:8e:96:d4:b8:27:db:2f:1f:e0:c8:
b9:23:04:73:78:d4:7d:f8:1d:9c:0e:64:0b:17:52:
34:b2:4a:81:96:74:8d:67:31:cc:56:32:46:32:f0:
c7:68:31:81:31:7a:64:a0:9a:ff:f1:78:09:87:58:
6a:a2:0e:7f:22:7a:9b:9a:c4:74:3e:8f:a8:f4:c4:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:76:93:B6:BA:C6:85:5A:63:7B:77:B2:88:4F:BD:1C:CD:91:53
X509v3 Authority Key Identifier:
keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30fe::/48
Signature Algorithm: sha256WithRSAEncryption
16:74:18:72:dd:2d:fe:73:59:f4:d0:bb:a2:a9:75:29:46:16:
5d:22:ab:54:53:75:2c:06:57:00:a4:f2:b6:d1:86:5d:e3:82:
15:94:a5:d8:45:d9:53:6a:be:79:97:fb:30:86:4b:d1:3b:86:
b5:bc:1f:8e:8c:64:8e:ea:1d:e1:ee:0a:b8:22:20:78:a9:a7:
bf:02:2f:30:7c:45:39:cb:c2:ae:3b:2d:8c:3c:79:53:49:da:
b3:0c:83:10:ca:b3:a5:65:91:70:d7:a1:8c:16:21:79:73:5e:
c0:ad:32:ad:e8:1c:20:6d:bb:16:ab:69:50:49:c1:be:ef:02:
0d:e2:44:cd:f9:fa:20:cd:68:73:b9:5c:08:45:76:15:ea:8f:
40:95:af:a1:62:77:77:c2:9c:fb:02:e6:de:89:b6:d4:9c:c4:
b1:9c:aa:d6:4a:13:e4:2e:12:35:a3:44:54:15:ac:e9:d0:ee:
59:e4:aa:ab:ee:12:6d:bf:30:47:76:62:24:31:d6:52:9f:0f:
a2:f8:53:0e:34:a2:33:56:87:da:cd:45:4f:ad:4d:49:e0:84:
ea:47:38:c8:20:e7:40:d8:9e:d4:1d:33:e8:13:a4:d1:d7:ea:
79:d9:f0:4f:6d:b6:e7:1a:5c:e2:9a:98:84:3f:3f:93:d0:29:
56:b3:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:50 2025 by rpki-client