Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: h8n4c/yMut+DwIceP5DlxAkZ1ZyaB0hDcKPZIDgCNzI=
Subject key identifier: 84:AB:13:DA:F7:19:CB:D8:5D:10:79:3D:A8:26:96:58:29:FD:6B:99
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 653FD2F485BE8FAD0407948CC349F4F2EAA83A1D
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa
Signing time: Tue 04 Jun 2024 08:06:25 +0000
ROA not before: Tue 04 Jun 2024 08:01:25 +0000
ROA not after: Tue 03 Jun 2025 08:06:25 +0000
asID: 58339
IP address blocks: 2a05:dfc1:8ef0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3f:d2:f4:85:be:8f:ad:04:07:94:8c:c3:49:f4:f2:ea:a8:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: Jun 4 08:01:25 2024 GMT
Not After : Jun 3 08:06:25 2025 GMT
Subject: CN=84AB13DAF719CBD85D10793DA826965829FD6B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:5b:34:b6:72:31:6e:50:b6:d7:f5:5f:59:
53:4e:f2:77:79:02:cc:e7:84:34:73:43:dc:3c:28:
fe:8d:cd:d3:31:11:c6:17:02:51:9a:2f:a1:a9:e9:
f0:ca:24:46:29:fe:0e:90:72:0e:74:0a:4b:4f:78:
ab:24:d3:6c:c1:f0:56:45:4b:0c:5e:2f:d7:29:d6:
dd:4e:48:b3:df:0e:04:37:3d:1c:66:ef:3e:7b:93:
a1:65:1c:9f:37:e4:91:36:5a:dd:6f:c6:f9:dd:82:
52:ad:f8:e8:5d:5c:92:4e:25:cd:7e:a4:f4:b3:08:
51:98:56:6b:e7:e3:1b:3a:d0:78:1b:2f:9d:8a:86:
62:58:c6:ba:f2:6b:0a:01:95:29:90:6c:a1:88:84:
9b:10:38:d4:f3:10:3d:f1:63:69:b4:22:90:27:d7:
f4:8a:79:b2:16:70:3f:c6:73:30:dc:44:ce:e8:06:
80:21:be:a8:4a:dc:ad:dc:53:28:f7:79:b1:f2:4d:
73:7a:f0:cf:4e:33:a2:ec:05:d4:b9:58:a3:57:26:
02:bb:d7:ce:e2:f0:65:19:99:fc:62:99:4c:0d:84:
94:99:41:27:82:17:bd:ff:98:30:27:4e:a2:cd:32:
2d:78:0a:f4:c5:dc:e4:14:71:65:98:66:97:58:54:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AB:13:DA:F7:19:CB:D8:5D:10:79:3D:A8:26:96:58:29:FD:6B:99
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8ef0::/44
Signature Algorithm: sha256WithRSAEncryption
8d:b3:53:8b:a1:67:ab:28:2c:41:e8:a8:fb:e7:8f:8d:84:9b:
31:30:5d:d6:73:bb:30:16:c0:d9:9c:80:21:2f:a1:23:a2:a3:
c5:35:3b:08:39:5d:9e:db:4d:a3:64:cb:3b:77:96:5b:df:83:
0b:53:0f:7b:9a:f3:63:50:3a:fc:b1:a7:e7:63:b7:4c:0e:8a:
f4:78:78:9d:8d:27:a4:d9:e0:6f:c8:cd:5c:d1:e1:99:f7:08:
1a:c0:9a:00:85:b1:43:a6:c2:6f:d9:1e:d5:e8:a2:62:49:f9:
d9:c7:73:d6:67:06:4e:b3:09:c1:42:cb:7e:a4:0c:15:64:52:
eb:0b:87:8b:09:e8:88:a8:7f:97:32:ca:19:39:8d:24:9c:bf:
3c:66:55:30:b0:a1:f7:7f:77:4d:90:d9:f4:2c:80:c1:37:6f:
9b:0c:1e:c8:cf:21:ac:13:19:97:00:81:00:f9:f1:17:7f:89:
b8:68:cf:d0:03:17:50:41:70:a8:22:55:e3:d5:51:62:0e:33:
09:58:bb:cd:b8:c8:74:95:21:b5:f7:0b:8f:2e:ed:35:d4:db:
69:18:32:a2:5a:20:67:b9:78:4b:ea:58:0c:62:79:c1:d3:bb:
a4:58:3c:43:39:8a:c8:29:5c:90:4c:0e:47:79:38:cc:65:5d:
b9:c4:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:22 2025 by rpki-client