Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: 7HbuxD5mU/INEhxMMm9bzXeRfA4zUrHIZhoMBw5o4bA=
Subject key identifier: BE:4E:E8:85:C3:85:76:3D:87:66:72:C9:D5:DB:1E:E0:81:B1:90:9F
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 3CFE69A55717A7E0D9AEE43BB2C290706EA92765
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa
Signing time: Fri 21 Mar 2025 00:10:09 +0000
ROA not before: Fri 21 Mar 2025 00:05:09 +0000
ROA not after: Fri 20 Mar 2026 00:10:09 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba1e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fe:69:a5:57:17:a7:e0:d9:ae:e4:3b:b2:c2:90:70:6e:a9:27:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Mar 21 00:05:09 2025 GMT
Not After : Mar 20 00:10:09 2026 GMT
Subject: CN=BE4EE885C385763D876672C9D5DB1EE081B1909F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:de:fa:22:1e:27:97:a9:f3:17:81:65:ee:
b1:60:08:b2:f0:77:fd:17:82:18:f8:54:b3:83:a4:
96:8a:87:43:9a:e0:f4:b6:14:0b:db:9e:f1:58:9a:
bc:50:ca:8b:19:2c:25:24:e8:08:12:75:06:53:8f:
98:f4:72:82:12:47:28:d2:36:61:53:c1:c8:77:9f:
d5:5e:14:6b:61:b6:0b:24:ea:3e:90:d5:eb:fa:74:
a9:b1:7d:dc:2c:37:ec:30:0e:e6:19:52:ef:c2:fc:
2d:ab:f9:ec:25:dc:60:da:6d:f3:b3:93:59:2c:7f:
12:37:da:c6:11:42:b5:21:38:1f:85:23:76:31:38:
63:4c:91:01:bc:ad:0f:8f:a5:84:67:bc:da:dc:8f:
68:f4:e2:5c:34:2e:c6:58:bb:fd:b9:bd:aa:cc:1b:
22:30:9b:db:b9:71:31:ad:7b:2d:66:9a:ea:27:93:
d6:c2:80:5f:83:01:b4:62:f0:40:c4:5f:ce:5a:bc:
0a:dc:44:bc:ea:43:47:6f:81:f9:3e:89:87:98:a3:
70:97:99:d2:4d:5f:c7:7a:99:d6:99:97:78:e2:29:
69:23:d1:2d:b5:f5:5c:ce:4e:f0:15:23:48:b0:59:
f6:c6:f2:3f:17:ff:3c:13:90:f4:d2:2c:b8:7e:3a:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4E:E8:85:C3:85:76:3D:87:66:72:C9:D5:DB:1E:E0:81:B1:90:9F
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba1e::/48
Signature Algorithm: sha256WithRSAEncryption
9e:3e:b3:ef:d5:b6:50:35:c0:f2:d4:b8:e8:3b:24:dc:19:33:
4d:6e:88:3f:6d:53:ae:d5:b8:c7:b2:56:1f:be:2e:a1:71:14:
27:1f:ae:33:09:33:2f:76:81:54:c3:16:39:8a:6c:80:8e:6d:
c4:00:ee:92:34:82:55:01:ac:ff:0a:9f:57:e9:77:3e:6b:9f:
bb:2a:54:c4:31:cc:e0:85:02:36:77:93:65:a3:03:84:4c:15:
69:6d:b5:ed:2b:5e:e5:34:5e:dc:27:e4:df:ac:e9:ef:7c:a2:
7a:22:3d:26:ff:df:77:b0:c9:d6:b9:46:78:2a:16:f8:40:e8:
df:ba:19:2b:60:4a:41:92:a8:04:af:e5:4d:27:41:82:d7:d5:
c1:a6:11:ee:0b:06:7e:2c:50:b8:91:c4:92:33:8f:43:cc:73:
2a:d9:56:67:5d:83:51:6c:0c:2c:a7:61:62:b5:31:6b:5d:ce:
a1:48:40:dc:c1:a0:77:b9:5a:61:4a:e5:a4:54:27:be:3c:1a:
e9:c6:10:ce:8b:b1:56:57:1b:3d:cc:48:ea:11:7f:ff:bf:74:
a4:e8:e5:a6:48:8e:0f:68:77:5a:2b:b8:c6:dc:e7:8b:99:eb:
46:54:2b:ca:54:35:06:66:ee:cb:df:dc:14:fb:45:96:6f:ac:
ed:37:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:12 2025 by rpki-client