Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: MGdlk5+TUnj5C79rnEEKnIx6cWVkK1Xd9nVtCZSrExA=
Subject key identifier: 99:26:CC:82:68:2C:61:4F:FF:A5:47:D2:FD:A9:4C:9F:AA:AC:BD:92
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 1169E64E250026B23EA730174B876908ED76DA49
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
Signing time: Fri 21 Mar 2025 00:10:08 +0000
ROA not before: Fri 21 Mar 2025 00:05:08 +0000
ROA not after: Fri 20 Mar 2026 00:10:08 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba55::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:69:e6:4e:25:00:26:b2:3e:a7:30:17:4b:87:69:08:ed:76:da:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Mar 21 00:05:08 2025 GMT
Not After : Mar 20 00:10:08 2026 GMT
Subject: CN=9926CC82682C614FFFA547D2FDA94C9FAAACBD92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:9b:9b:67:90:39:88:56:09:c7:7a:5c:a1:
9a:72:d0:75:ad:ac:3a:a2:8e:7b:5d:1a:85:90:4f:
e1:e6:f4:de:d6:3c:79:1e:48:51:9d:01:ab:5a:c6:
c0:82:9c:6e:48:92:d0:7d:a3:04:38:63:61:11:ab:
61:db:de:f0:d6:45:b9:14:22:05:ac:ca:6f:a6:81:
7c:e1:99:63:53:94:f5:33:1f:f2:db:6f:ac:60:65:
76:87:64:c7:44:16:44:d7:3d:ea:ef:62:56:58:25:
54:77:9a:44:d4:43:8c:d3:4a:6b:e5:5c:e1:b3:5b:
d2:5c:a9:ed:6f:0f:14:bd:98:3f:80:c0:c4:f5:bf:
15:00:83:b9:68:9e:28:e7:49:7a:70:7e:d8:2a:e5:
6a:4a:10:a6:f6:28:55:d1:23:6d:77:ef:d5:6b:e0:
fa:0a:75:26:e5:22:b6:15:53:97:f9:28:a0:b5:26:
da:ee:14:fd:ad:84:3a:b4:cc:8e:ff:95:87:ce:4a:
8c:24:e4:54:43:1f:6a:de:c8:46:c4:8b:0a:7d:75:
d1:e6:24:b1:14:73:bc:b6:fa:1e:58:73:44:b5:8a:
af:ec:db:49:80:2b:e7:d7:15:19:f6:a2:92:09:19:
4e:aa:8d:a5:c7:1c:78:c4:08:10:94:f7:35:b0:35:
68:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:CC:82:68:2C:61:4F:FF:A5:47:D2:FD:A9:4C:9F:AA:AC:BD:92
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba55::/48
Signature Algorithm: sha256WithRSAEncryption
94:45:55:0f:95:25:1a:a8:41:50:05:92:18:e2:20:48:d4:b3:
a2:f4:ad:23:f0:50:3d:07:0d:c8:37:c5:b8:e2:19:df:19:09:
df:3b:1e:49:a7:e0:85:39:b4:ae:cb:75:ad:4c:f7:ea:e6:80:
58:86:40:c3:86:da:cd:5b:98:ed:97:0a:92:1c:cf:e7:e5:65:
2a:0b:30:18:d3:ba:10:37:cb:a1:33:39:54:ee:57:05:0f:0d:
c5:6f:72:ad:90:cb:23:9f:52:e8:41:f1:87:82:4b:73:d0:e3:
bf:b4:7d:19:ac:02:6d:64:01:db:28:7d:26:99:29:cc:fa:1f:
00:d8:b6:bc:db:f5:37:37:48:ed:7f:48:bc:c7:b1:4e:88:af:
eb:05:92:71:ac:c1:26:8d:a4:4c:1e:5a:cc:a6:85:93:2a:25:
15:17:8d:f7:a3:13:41:27:a1:a3:60:a2:dd:e8:58:3c:dc:15:
05:81:d8:18:86:8c:34:10:b3:41:47:18:47:70:ba:90:fb:be:
0a:af:24:3a:94:4a:9d:c2:07:0b:80:b6:a3:e3:de:96:ef:db:
69:07:11:68:e7:22:d3:40:9e:ee:22:77:15:65:a5:a6:80:e0:
c6:54:9d:b2:ba:2c:e9:4e:f0:36:bc:02:78:89:fa:a6:8f:d9:
b9:95:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:50:17 2025 by rpki-client