Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa
File: 326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier: gx9rdk8OhsWyectPv4O4vZLVSoXTxzKtQ+3+dEdW2PE=
Subject key identifier: B1:29:07:82:DB:CC:9D:CC:BA:CE:D8:3E:E1:C6:70:F9:9A:4B:F0:15
Certificate issuer: /CN=C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1
Certificate serial: 4C326FC9A59D12B2522B63D0AA2922FD0164CCC7
Authority key identifier: C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa
Signing time: Sun 24 Sep 2023 10:01:14 +0000
ROA not before: Sun 24 Sep 2023 09:56:14 +0000
ROA not after: Sun 22 Sep 2024 10:01:14 +0000
asID: 47272
IP address blocks: 2a05:dfc1:9100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:32:6f:c9:a5:9d:12:b2:52:2b:63:d0:aa:29:22:fd:01:64:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1
Validity
Not Before: Sep 24 09:56:14 2023 GMT
Not After : Sep 22 10:01:14 2024 GMT
Subject: CN=B1290782DBCC9DCCBACED83EE1C670F99A4BF015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:fd:3b:b5:2d:22:35:31:31:b0:7f:67:6d:
54:84:d0:41:70:d5:57:00:2f:1b:a5:ed:6f:ef:bd:
2f:48:c9:dd:eb:19:11:6f:a8:2d:74:1c:10:0a:89:
96:3b:3b:fa:92:a6:c4:05:ab:38:e6:bc:7c:a0:9f:
9a:b9:5b:f9:d3:f1:eb:45:ef:0d:d5:0a:f3:11:d4:
1e:40:ce:54:cf:57:af:02:06:5a:96:77:62:6a:a0:
b5:6e:da:75:47:06:bd:e3:3a:40:26:18:ea:5e:1c:
58:87:0b:a4:4e:72:82:ce:f6:b4:4b:01:b4:eb:b8:
41:25:87:3c:72:7f:42:7f:f4:a3:7d:9d:42:94:fd:
7f:fb:70:33:02:6f:ae:59:7a:23:bf:fd:3e:b2:87:
46:18:d1:6a:16:ee:71:a7:3a:29:85:94:36:79:e9:
26:10:8a:04:b0:2a:6e:72:10:28:50:5f:33:47:34:
dd:6d:40:1f:25:22:f5:45:25:11:f3:99:fa:c4:ac:
2a:f5:8d:74:7a:2b:49:cb:f7:72:c4:91:e5:7a:5a:
3b:d9:4c:f0:09:55:e2:c1:31:ee:22:a5:dd:6b:bd:
ab:a4:c1:97:42:17:af:28:ab:c1:2c:31:61:18:99:
fa:23:47:31:6b:1f:0b:ab:55:0e:b8:bd:5a:86:0f:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:07:82:DB:CC:9D:CC:BA:CE:D8:3E:E1:C6:70:F9:9A:4B:F0:15
X509v3 Authority Key Identifier:
keyid:C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393130303a3a2f34302d3430203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9100::/40
Signature Algorithm: sha256WithRSAEncryption
46:e8:fd:0e:f1:2d:8c:b4:a5:08:c7:53:ef:66:85:fa:8f:29:
14:64:16:91:b1:b2:ae:d8:3d:8a:fa:04:45:7d:2c:ad:50:f2:
55:66:22:9b:5d:39:ba:c5:13:21:5b:ea:9a:b5:dc:8d:df:57:
db:5c:2c:5d:53:65:6c:c8:87:7f:7d:f2:ea:95:5c:ce:d5:88:
d8:62:ce:b0:61:86:80:9e:69:13:1c:8a:ed:54:76:c7:f0:a5:
06:7b:2d:50:4f:3e:00:27:af:f8:a1:1b:4f:51:e2:31:9c:78:
16:2d:ac:59:b6:3b:9b:5d:d9:e5:f2:3f:24:48:7a:46:22:2b:
b2:60:ff:8f:d6:80:a5:77:57:a9:33:cf:03:28:e8:ab:57:85:
54:ee:e4:63:8c:e5:7a:e1:c5:b7:17:44:67:86:4f:af:f3:3f:
0d:3f:a4:51:b4:d1:55:03:58:12:52:f5:25:27:4c:f9:c7:e1:
31:32:d5:99:24:03:2f:c9:d1:d0:a6:50:0d:46:85:27:c9:ef:
93:ed:ff:28:59:0c:33:b5:70:0d:c9:04:7f:15:f3:a8:99:c4:
f2:fe:d8:cb:2e:41:98:6e:82:9f:30:61:58:57:37:4d:04:12:
c1:68:df:74:4d:a7:67:41:df:88:ab:2b:a2:c6:4d:c7:b5:a1:
5d:61:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:47 2025 by rpki-client