Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
File: 326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier: 7N77kO9WjgyGt9aTpvsnvbbBIGQfvl/J89m4JIxRdPE=
Subject key identifier: CE:32:AF:34:5D:0C:86:A5:9B:8C:40:39:48:D3:F6:D0:82:BD:DD:28
Certificate issuer: /CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Certificate serial: C809C72001976B509C4E5E0C4049BBC0A96639
Authority key identifier: 8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
Signing time: Mon 16 Oct 2023 10:45:49 +0000
ROA not before: Mon 16 Oct 2023 10:40:49 +0000
ROA not after: Mon 14 Oct 2024 10:45:49 +0000
asID: 203843
IP address blocks: 2a0a:6040:a104::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c8:09:c7:20:01:97:6b:50:9c:4e:5e:0c:40:49:bb:c0:a9:66:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Validity
Not Before: Oct 16 10:40:49 2023 GMT
Not After : Oct 14 10:45:49 2024 GMT
Subject: CN=CE32AF345D0C86A59B8C403948D3F6D082BDDD28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:b8:d5:6e:87:8d:0b:af:5b:59:98:49:c9:
54:0c:70:d0:0c:ad:a6:77:ff:32:c0:56:a3:94:76:
c3:3e:bc:90:32:f1:1e:8f:b6:38:c8:a3:ed:fd:3f:
07:14:ce:10:28:55:13:c9:95:28:9f:87:0b:be:54:
c4:c5:6d:16:ad:19:b7:8c:36:eb:6d:d1:75:4f:ee:
40:43:ca:1a:49:d7:4f:2b:f9:f3:fe:41:08:8c:48:
f7:56:95:46:12:47:9c:27:ad:ae:92:0e:91:b1:38:
43:bf:cf:6e:78:3a:9a:2d:82:57:8c:8a:71:80:f0:
b2:8e:d8:28:83:5b:cf:b8:85:8d:e5:17:9f:56:40:
db:98:65:0d:a0:c8:84:3d:8b:02:89:fa:3e:d4:66:
94:25:70:60:98:b2:3c:9b:5c:31:58:fc:e2:98:c5:
69:b1:c5:41:63:3a:d8:69:ff:7c:a2:bb:8c:b3:83:
8b:f1:2d:d5:f9:63:d1:3d:30:63:6a:34:0e:25:b4:
85:de:60:a5:47:b3:50:34:a0:2e:15:ee:2b:f3:0d:
ca:22:82:dc:49:9f:dd:8f:9f:53:d7:a4:27:2d:69:
2e:16:01:39:94:f0:ba:0a:fd:9e:fd:53:8b:7d:9a:
f5:8e:7f:4f:be:43:d4:11:23:16:ae:33:f2:d7:1f:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:AF:34:5D:0C:86:A5:9B:8C:40:39:48:D3:F6:D0:82:BD:DD:28
X509v3 Authority Key Identifier:
keyid:8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a104::/48
Signature Algorithm: sha256WithRSAEncryption
b9:02:34:03:80:6e:f7:31:41:d5:b8:b8:b5:7a:3b:d9:f4:41:
c5:78:aa:d3:5d:fd:1b:19:5f:d7:d8:91:e4:e6:64:48:ef:a4:
4c:75:b2:66:f3:93:6f:59:fc:c5:df:42:c7:4b:db:ad:88:9d:
c9:2d:25:03:7f:0b:c9:42:42:d5:96:0d:f7:90:0b:80:cd:c1:
cd:c3:0f:27:f3:2f:cd:e1:a9:42:62:fa:98:b6:54:1f:bd:97:
1a:84:82:11:e8:97:b8:36:07:82:96:4a:f5:2a:81:99:1d:8d:
82:65:ee:5a:15:4f:a4:5e:5d:6e:c2:52:4d:5a:13:8a:5b:a8:
38:dc:6b:2a:a1:67:44:69:3c:31:c9:82:13:92:d9:cb:1e:ee:
4f:66:59:99:60:d1:be:63:ec:77:e9:b9:1f:28:6a:ea:28:7e:
18:44:c6:34:bb:98:f5:19:29:8e:68:7d:fd:1e:5c:dd:3b:6d:
ab:4d:5a:f9:ba:20:cb:17:62:f9:b8:b9:af:91:05:6d:ff:97:
96:ed:07:6f:28:3a:4f:64:82:6e:31:36:ac:2b:ee:6d:8e:7e:
56:17:c3:42:80:69:8e:b3:88:de:e5:a9:9f:c5:e0:8c:2f:a3:
b8:b2:11:0e:57:c9:18:d6:54:8f:44:0b:f9:53:15:36:f1:cb:
84:45:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org