Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
File: 326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: dBVDPK92yyOpyFjlokg6Nqd4qpVw/csEdI1t9iiwC8s=
Subject key identifier: 10:D0:A6:FB:CF:C9:47:9E:91:01:BA:44:59:DE:33:E2:3A:C8:4C:9E
Certificate issuer: /CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Certificate serial: 01DBEEC4028190134E673E3E9D42C1402CFBF001
Authority key identifier: 8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
Signing time: Mon 16 Oct 2023 10:46:34 +0000
ROA not before: Mon 16 Oct 2023 10:41:34 +0000
ROA not after: Mon 14 Oct 2024 10:46:34 +0000
asID: 31898
IP address blocks: 2a0a:6040:a103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:db:ee:c4:02:81:90:13:4e:67:3e:3e:9d:42:c1:40:2c:fb:f0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Validity
Not Before: Oct 16 10:41:34 2023 GMT
Not After : Oct 14 10:46:34 2024 GMT
Subject: CN=10D0A6FBCFC9479E9101BA4459DE33E23AC84C9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:e5:17:00:9a:82:10:36:d0:7f:8c:74:c0:
52:98:ca:aa:d0:5d:7a:e8:8e:11:1b:45:60:b2:49:
c6:a0:c8:ea:74:3a:b2:91:3f:10:7b:43:65:3b:ba:
c2:0a:d7:9e:e9:06:8f:4c:84:05:e6:11:b9:0b:ea:
7c:ac:8e:bb:10:0a:66:fa:a3:99:c4:be:4b:fb:6b:
7b:75:1a:5a:4c:64:fb:8e:ef:06:0d:ab:ee:38:f8:
5c:71:7a:4c:68:e5:c1:ac:70:fa:8e:53:22:c0:de:
24:f0:ad:f4:cd:2f:2d:1d:27:63:f3:74:ab:e7:ad:
ac:d5:18:42:db:74:8e:4d:1a:80:e7:cb:31:6c:ef:
0c:e4:ee:c3:30:75:9c:1d:19:38:d2:2d:30:6d:ae:
27:24:69:23:3c:d7:70:e7:55:f3:22:a6:39:79:d2:
7f:53:25:b8:28:e4:30:e8:fe:be:76:4c:ad:21:36:
af:43:16:89:78:d3:a0:4b:c7:52:75:25:d7:0d:82:
44:e1:34:e5:c4:1f:89:6b:e7:39:30:f5:23:ef:e5:
eb:38:c9:7a:4a:87:43:da:dc:9a:38:81:33:b3:51:
fb:83:5b:c0:7f:d8:0d:91:e0:30:11:79:7d:0e:cd:
a6:1d:ed:47:e2:53:1a:d6:79:82:e7:e2:1b:f7:92:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:A6:FB:CF:C9:47:9E:91:01:BA:44:59:DE:33:E2:3A:C8:4C:9E
X509v3 Authority Key Identifier:
keyid:8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a103::/48
Signature Algorithm: sha256WithRSAEncryption
41:f4:58:bd:4c:7d:0b:d9:53:b3:9f:da:fc:14:28:65:67:d5:
3c:ac:ce:85:02:7a:d0:61:85:27:cd:6c:8a:6e:ee:ce:b5:d2:
3e:c0:be:87:88:5b:64:91:fa:b1:fe:b5:b8:08:ca:cf:03:0b:
ac:52:8c:06:f5:9e:05:62:98:ae:29:f9:69:78:87:b7:f1:7e:
43:1d:7b:2b:e5:f1:f7:1c:05:f7:a6:c0:07:3d:5b:be:79:c2:
0a:d2:59:9d:f1:ef:d7:f4:f6:9a:7d:4e:17:b3:4d:4b:fb:4b:
f6:6d:c9:ed:77:8e:3c:71:22:ba:38:de:77:40:4e:8a:65:97:
60:19:54:98:aa:60:17:b0:c1:c2:90:5f:3d:b9:96:1d:b9:18:
fd:39:fc:57:16:04:ae:b3:aa:54:46:2b:83:5d:d8:83:5c:61:
ae:1a:c9:44:c7:02:d4:7e:97:31:a2:7b:44:a6:58:85:9e:24:
ac:5a:22:39:53:48:5c:d6:cb:6b:77:6c:5a:89:22:c4:11:80:
6a:ab:fd:4d:b6:20:36:09:e5:34:79:0e:2c:b5:9b:b8:4b:0b:
52:c6:b5:2d:76:4b:cc:ec:1f:c5:e2:77:1d:49:bc:3f:d9:ed:
df:1a:97:ae:7d:80:fd:52:78:71:f1:1e:c9:17:38:42:68:d2:
e1:6f:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:25 2025 by rpki-client