Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130303a3a2f34382d3438203d3e20323030323130.roa
File: 326130613a363034303a316130303a3a2f34382d3438203d3e20323030323130.roa (raw, json)
Hash identifier: cON7nEkfgDWxuKlwJc/99PkNZbp0+iUIDDZMlyhtxDI=
Subject key identifier: 27:E8:A1:9F:85:AC:FC:11:43:18:F7:D8:10:36:84:FE:41:4F:B7:71
Certificate issuer: /CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
Certificate serial: 2BCB611C206FA045424FD92A0AA73DD97208ACDE
Authority key identifier: EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130303a3a2f34382d3438203d3e20323030323130.roa
Signing time: Mon 23 Jan 2023 02:11:53 +0000
ROA not before: Mon 23 Jan 2023 02:06:53 +0000
ROA not after: Mon 22 Jan 2024 02:11:53 +0000
asID: 200210
IP address blocks: 2a0a:6040:1a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cb:61:1c:20:6f:a0:45:42:4f:d9:2a:0a:a7:3d:d9:72:08:ac:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
Validity
Not Before: Jan 23 02:06:53 2023 GMT
Not After : Jan 22 02:11:53 2024 GMT
Subject: CN=27E8A19F85ACFC114318F7D8103684FE414FB771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:89:28:c7:f7:6f:f2:88:51:58:cf:5a:0f:
18:0f:04:f5:25:e4:50:ae:02:b8:1a:d7:96:99:21:
1d:9c:ec:f7:6f:b1:4f:dc:03:05:24:45:4a:eb:92:
1b:50:ca:10:c1:f9:95:67:cf:ec:ea:4d:13:1a:34:
f4:95:e9:b4:ea:5c:23:2f:8d:90:fd:fb:6b:d4:9d:
d0:82:dd:8d:80:50:00:3d:36:9e:2f:7a:8e:31:4f:
96:1d:4e:74:c2:27:27:d6:fc:60:6c:5e:4d:da:c0:
56:0e:74:67:b0:de:2b:d5:8b:2b:ef:10:88:97:fc:
55:a3:1b:d5:f0:d9:f0:0b:9b:b5:ec:09:5a:06:0a:
fb:35:68:c9:ad:81:c4:95:bf:2a:d2:19:c4:50:13:
2a:cd:b0:31:be:34:f0:64:98:88:65:e3:cd:b4:b0:
9a:fe:fc:4a:b6:a0:2e:ac:eb:dd:19:7c:dc:cf:3e:
b2:53:b4:08:d6:1a:78:69:27:c6:bc:40:01:45:db:
c1:13:da:48:42:3f:60:03:eb:d3:6a:c8:f7:11:5e:
ae:81:20:5b:71:80:bb:ec:ad:3b:8f:1e:d2:9f:18:
f6:bf:34:f4:4e:12:98:62:ad:00:97:e4:51:ba:c5:
09:89:71:9f:ad:ae:80:51:61:3f:52:3c:66:ab:6c:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:A1:9F:85:AC:FC:11:43:18:F7:D8:10:36:84:FE:41:4F:B7:71
X509v3 Authority Key Identifier:
keyid:EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130303a3a2f34382d3438203d3e20323030323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:1a00::/48
Signature Algorithm: sha256WithRSAEncryption
68:1c:b1:53:3f:1a:c7:34:28:b2:e8:43:fc:13:34:54:46:fe:
94:83:a6:9d:54:db:39:12:2c:ba:70:70:15:53:0b:b9:4e:1f:
69:88:6b:b3:4a:fe:4f:3c:c6:51:69:3f:5f:84:fc:68:90:08:
d6:26:77:32:c8:4f:bf:39:23:ae:73:48:31:bd:a0:43:87:56:
91:e3:0f:99:8a:e8:fe:da:45:99:5d:ba:3a:1a:73:ac:c9:f7:
52:5f:2a:d8:12:18:39:e1:1a:61:28:07:aa:eb:96:8d:12:70:
7e:3b:9b:05:b4:41:77:31:82:5a:56:37:d1:0b:01:a4:9f:a6:
d1:e2:c4:c0:0c:6c:bf:66:74:64:55:b7:4e:34:ac:d3:df:36:
5b:2e:7a:ad:29:10:8d:58:d2:0c:64:bb:bd:83:fb:49:22:38:
79:80:9d:c7:5d:c2:e3:d7:4c:fe:5a:69:f2:fe:43:27:02:b5:
47:39:05:64:28:84:13:1f:5a:0c:80:a4:73:d7:f1:0a:6c:b5:
fb:5c:42:7a:2f:2c:09:d9:38:d3:b5:d9:0d:77:ce:35:14:4d:
30:83:09:55:be:75:32:cc:41:a8:ef:6b:d2:4f:42:82:00:8b:
9b:01:b0:fa:a4:b9:79:43:d5:06:28:13:e5:25:2b:40:bd:11:
3b:9b:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:38 2025 by rpki-client