Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
File: 326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier: 8btgsl0uKVjULpPy75NMLgHV26SruEwcD7oN7YfjM1Q=
Subject key identifier: 60:F0:14:DB:D1:93:E2:FD:3D:E3:32:86:8A:9C:3B:D5:27:EC:8F:A6
Certificate issuer: /CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Certificate serial: 0C37E489E72C65F0E403FB28B88E1B8ABF223312
Authority key identifier: 8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
Signing time: Mon 16 Oct 2023 10:45:50 +0000
ROA not before: Mon 16 Oct 2023 10:40:50 +0000
ROA not after: Mon 14 Oct 2024 10:45:50 +0000
asID: 203843
IP address blocks: 2a0a:6040:a106::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:37:e4:89:e7:2c:65:f0:e4:03:fb:28:b8:8e:1b:8a:bf:22:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Validity
Not Before: Oct 16 10:40:50 2023 GMT
Not After : Oct 14 10:45:50 2024 GMT
Subject: CN=60F014DBD193E2FD3DE332868A9C3BD527EC8FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:cc:c5:a1:15:05:70:ca:e1:66:67:23:df:
0c:d6:6e:e1:e1:e7:a6:e8:f7:bd:bb:04:24:c3:c0:
f4:79:cc:1a:b4:9a:10:c5:6e:f8:44:29:d9:f2:ea:
bd:8d:7a:4d:31:4a:55:6c:4b:01:6f:32:71:68:c5:
da:e3:7a:52:df:fd:6c:95:d3:99:ce:92:61:be:d2:
1b:d7:ed:ef:9c:30:5d:89:a5:17:94:c8:c9:04:10:
61:8b:d6:6b:83:49:3b:b4:dc:6a:d7:a3:4d:5a:1f:
52:64:56:c0:2f:49:9a:0d:c7:54:ca:60:76:45:0d:
bf:fc:88:6a:a7:4d:07:e8:8c:0e:9e:b5:d0:08:4d:
21:28:61:9b:94:b7:de:c5:bf:fd:2b:35:12:0b:34:
54:1c:a4:46:50:f7:9a:d6:a7:e0:a0:0f:3c:99:fd:
21:d0:d8:31:18:21:6e:d9:73:99:9d:e7:a6:d8:ad:
e8:d3:1b:53:6f:e4:57:49:52:a6:6a:ce:fa:1b:65:
54:d6:1e:33:1b:9e:39:49:d0:1a:b4:f7:42:05:0e:
1e:60:05:a0:a5:be:99:d4:0e:ed:4e:d9:6e:97:65:
8c:7d:63:83:90:03:a7:00:82:84:de:37:53:50:09:
07:73:3b:39:5a:fa:be:ad:a1:06:04:9d:dc:68:e9:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:14:DB:D1:93:E2:FD:3D:E3:32:86:8A:9C:3B:D5:27:EC:8F:A6
X509v3 Authority Key Identifier:
keyid:8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a106::/48
Signature Algorithm: sha256WithRSAEncryption
73:76:a8:75:f4:3e:eb:72:72:8b:92:e0:c8:48:c6:ff:d7:9f:
b9:11:cb:fc:1f:4a:42:f5:58:a8:d2:95:34:79:a5:4c:fe:8b:
ad:6b:1a:3c:6f:a2:15:d5:5d:c8:0c:08:1a:ad:55:bc:cd:59:
6e:04:9b:59:07:9b:83:f7:56:58:d5:66:7b:7f:d4:9a:50:83:
60:01:ce:8d:4c:18:e5:a9:87:65:d3:bd:80:a1:2e:b7:56:26:
14:8b:06:58:39:55:7a:1d:b0:0a:67:7c:ab:dc:cd:84:f8:c8:
7a:22:dc:80:74:8c:f1:eb:57:c4:0c:2b:a9:c8:5d:8f:d5:ed:
24:42:23:1d:c7:4c:e8:56:9f:ec:43:11:18:4c:b2:ed:c9:f7:
d6:90:fb:85:9c:7e:ea:01:04:16:d6:c3:0e:5e:12:a9:3e:40:
18:36:ed:f8:fd:31:91:49:ef:87:f9:ee:1b:48:92:77:d3:23:
3c:1b:32:cb:e9:b0:5d:88:4e:39:dc:2b:f6:b0:a5:3b:9b:35:
ef:a4:d0:99:d0:35:1d:47:cf:b7:b2:30:a1:6e:49:f5:ad:d9:
37:c0:20:8b:c5:3a:ce:e3:66:53:5b:30:9e:31:51:f9:b7:4f:
eb:c9:3b:aa:ad:7f:3c:d4:5d:4a:de:ac:e5:41:72:ea:b1:bf:
83:6b:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:24 2025 by rpki-client