Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: 0+qW8LVtRoEXu5/l67ghsUH9J6gv6CBY0VOVOJDX8jM=
Subject key identifier: 83:11:B1:ED:4B:8B:C8:66:C1:A9:B6:49:83:3C:2E:7E:29:79:F2:1E
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 1B147EDE15DC7E164E18B4CEAA72546281F3E315
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
Signing time: Fri 01 Nov 2024 04:02:59 +0000
ROA not before: Fri 01 Nov 2024 03:57:59 +0000
ROA not after: Fri 31 Oct 2025 04:02:59 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:14:7e:de:15:dc:7e:16:4e:18:b4:ce:aa:72:54:62:81:f3:e3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Nov 1 03:57:59 2024 GMT
Not After : Oct 31 04:02:59 2025 GMT
Subject: CN=8311B1ED4B8BC866C1A9B649833C2E7E2979F21E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:1b:be:22:ec:cc:9e:7f:ec:27:17:d3:ba:
0a:3d:91:ab:f2:9d:d4:21:74:74:0d:ff:25:ab:0e:
5c:ca:07:eb:22:7a:5d:ad:88:62:38:b1:0f:ee:ff:
bd:54:b3:a0:4a:69:88:6b:fe:0c:44:10:4f:5d:3b:
55:c5:24:5b:04:d6:16:51:8a:cd:32:a0:1e:e3:f4:
ab:78:86:fd:69:88:a3:cd:45:1a:c6:8c:36:64:30:
bd:07:d9:49:bd:a4:78:0a:5c:ed:77:b6:fd:aa:23:
12:0f:40:e3:83:49:b4:6d:fd:8d:d8:5c:85:69:4c:
9f:0c:99:42:2e:94:60:47:13:44:ab:c5:4e:70:2b:
bb:1a:4f:13:29:f8:fa:17:ef:f6:5f:28:cc:45:05:
6d:85:19:ae:73:3f:a7:6f:ca:0a:ed:fb:4c:7e:c6:
e1:37:4d:83:a5:f0:e6:a9:4b:59:12:37:16:1e:69:
66:a4:a8:bf:66:81:c4:83:61:67:c4:39:0f:04:ff:
75:1f:ab:09:1f:89:cc:35:e6:5b:96:32:41:57:17:
2b:1f:e5:7b:5c:ad:b4:11:c5:96:eb:da:59:b9:c1:
58:07:31:d1:1f:7b:1e:1a:8a:97:0b:2f:47:ac:22:
40:8a:4d:2c:7c:d2:79:04:ba:6e:3f:09:bc:87:de:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:B1:ED:4B:8B:C8:66:C1:A9:B6:49:83:3C:2E:7E:29:79:F2:1E
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba17::/48
Signature Algorithm: sha256WithRSAEncryption
5a:e6:d8:ab:35:2a:10:c1:b0:9b:de:96:ad:24:9e:b0:8e:cb:
df:ad:87:9b:08:8b:81:2a:3f:95:cc:a0:8c:22:2a:da:e3:aa:
bb:0e:7e:cd:09:b2:bd:d4:2a:6b:13:2b:26:b0:be:41:5e:d2:
20:9a:58:67:a1:cc:44:38:4d:cf:36:c6:68:b5:57:44:cc:d8:
32:61:33:a8:f1:07:20:a4:0c:ca:56:f1:d2:5a:58:50:fa:55:
27:98:ce:50:cf:10:61:27:c1:60:7a:9a:52:c5:40:7f:bb:17:
b3:76:a7:1f:54:5a:c0:54:fa:39:28:89:5c:f4:c6:20:fd:8b:
ae:ed:0f:08:2b:37:ec:4b:69:c2:e3:49:d7:7f:4c:82:e7:5f:
b7:2c:05:97:e8:a2:b1:b0:21:43:2c:ef:80:3b:ee:76:89:a8:
60:b2:48:5a:3e:8c:c0:05:df:aa:a1:42:0e:56:bf:ef:27:88:
f3:49:e1:45:f5:4f:05:77:3e:6e:27:7b:06:81:a8:f0:fc:e0:
a5:f5:b0:df:a8:7a:06:82:8f:3d:ff:2c:5c:c4:fe:45:ed:86:
eb:0d:ae:28:df:18:1e:17:05:ce:9c:14:a2:9c:04:ec:9f:65:
fd:7d:be:23:be:bb:e0:84:cd:04:d3:f8:3d:f2:c9:8c:24:40:
e7:f1:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:20:50 2025 by rpki-client