Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214674.roa
File: AS214674.roa (raw, json)
Hash identifier: +QOvMRZaPQSwio//RM9wPJk9DMspIIILmr58RSfPpls=
Subject key identifier: AB:1C:A7:E8:45:40:F4:B2:1F:73:81:E8:82:15:95:59:E4:BB:15:9C
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 75BBA2C39E326FF0247A0198B86D84E8477233EC
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214674.roa
Signing time: Wed 11 Sep 2024 09:10:54 +0000
ROA not before: Wed 11 Sep 2024 09:05:54 +0000
ROA not after: Wed 10 Sep 2025 09:10:54 +0000
asID: 214674
IP address blocks: 2a06:9f81:5100::/40 maxlen: 48
2a06:9f81:5400::/40 maxlen: 48
2a06:9f81:6100::/40 maxlen: 48
2a06:9f81:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:bb:a2:c3:9e:32:6f:f0:24:7a:01:98:b8:6d:84:e8:47:72:33:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Sep 11 09:05:54 2024 GMT
Not After : Sep 10 09:10:54 2025 GMT
Subject: CN=AB1CA7E84540F4B21F7381E882159559E4BB159C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:f2:51:14:0d:19:61:86:f3:b1:fd:12:c2:
c6:cb:66:d9:ac:d4:1c:31:c4:fd:18:71:f5:57:be:
bc:f9:12:f2:83:0f:37:02:3b:31:d7:8c:cc:82:14:
1f:f1:04:7c:e8:ea:a3:91:b0:93:31:dd:af:ac:ad:
e1:96:b3:16:7a:31:92:a5:82:61:ca:c5:c9:5a:6b:
b6:c7:ae:b3:4d:c5:2d:98:6a:47:47:6b:05:8c:24:
8d:f4:00:4b:21:1c:9c:09:49:b1:f8:09:5b:11:8e:
ef:de:e2:42:7f:0a:ba:ed:98:ab:d3:e5:02:4d:2b:
45:d7:31:f4:74:71:24:ba:a9:20:56:4f:4f:8b:66:
10:bb:a1:2f:25:2b:ea:6c:d3:bb:bb:9e:c4:25:aa:
53:75:57:3a:80:10:b7:7a:08:87:44:ef:33:72:49:
a0:59:cd:7d:6d:3b:65:42:0b:ef:02:0f:4d:6f:c9:
8e:45:26:93:40:c8:3f:27:31:66:e2:86:69:56:ce:
49:3d:64:33:28:9f:35:ac:42:92:99:9f:56:ba:35:
57:2b:4c:97:4b:53:04:2a:37:4e:ec:ec:6f:e1:b0:
d8:5c:4d:1f:0f:e6:c8:6a:7a:30:ac:ea:ff:22:29:
d0:c3:93:3b:62:e4:b4:b5:cc:c4:b9:cc:6a:4f:cb:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1C:A7:E8:45:40:F4:B2:1F:73:81:E8:82:15:95:59:E4:BB:15:9C
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:5100::/40
2a06:9f81:5400::/40
2a06:9f81:6100::/40
2a06:9f81:6400::/40
Signature Algorithm: sha256WithRSAEncryption
58:78:45:cb:07:d2:c3:0f:8f:8a:82:14:80:53:eb:da:50:8d:
08:71:2c:e3:5f:7b:be:e4:b8:aa:ea:cc:46:f4:a0:84:4d:90:
f4:e6:7f:61:e1:9a:87:64:d8:6f:07:61:94:1c:b5:61:e8:74:
e1:19:4f:31:d7:d7:4c:53:67:26:5b:cc:68:02:ca:8a:4f:76:
75:ff:8f:d5:74:f6:03:a8:69:46:1a:38:6a:3e:8e:81:41:5b:
d5:e4:29:d9:47:24:88:14:56:53:9a:ea:4e:4c:9d:45:a2:50:
58:41:72:0d:4b:9c:08:0a:b0:9f:d4:f5:97:22:db:67:c7:73:
8d:57:d7:85:39:e4:e8:95:68:7f:b0:d8:c0:1c:0a:05:b5:4c:
71:f0:a0:a8:18:b3:92:04:5e:97:62:f7:d4:4c:19:17:24:59:
7b:b4:35:c4:65:73:14:7b:dd:fa:91:e9:ba:54:af:6c:bd:83:
51:c4:7a:40:4b:29:d5:1e:8a:12:0c:ae:74:6b:43:6d:e3:29:
fa:32:c7:3d:e8:3a:ec:b2:e7:bd:ef:11:ad:77:ce:e3:8b:58:
c7:48:2c:49:5e:79:33:d5:66:02:65:0e:80:37:9a:c3:4d:99:
d3:b6:68:26:19:76:b7:96:ec:87:2e:23:7b:98:25:ea:12:a8:
2e:d5:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:02:08 2025 by rpki-client