Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa
File: 32332e3134302e3234382e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier: p4UnlXGjwkRJoZ0ag8cXUnafD+UUpCZ29s6vOk23MiY=
Subject key identifier: F6:04:50:9B:24:C9:8A:52:98:E8:68:B7:95:3B:31:4D:E1:AB:6A:D7
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 415EC16C6DFCCF4832998353334FAF0AF47AFA92
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa
Signing time: Wed 16 Oct 2024 12:45:22 +0000
ROA not before: Wed 16 Oct 2024 12:40:22 +0000
ROA not after: Wed 15 Oct 2025 12:45:22 +0000
asID: 924
IP address blocks: 23.140.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5e:c1:6c:6d:fc:cf:48:32:99:83:53:33:4f:af:0a:f4:7a:fa:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: Oct 16 12:40:22 2024 GMT
Not After : Oct 15 12:45:22 2025 GMT
Subject: CN=F604509B24C98A5298E868B7953B314DE1AB6AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:44:75:b7:90:4e:b5:6c:52:59:0e:10:db:
89:ad:78:1f:56:29:a4:7e:9f:93:da:7e:9c:b7:a1:
9e:94:92:ad:ca:6c:ed:6a:6f:20:8c:ab:05:a5:f5:
f5:24:36:48:34:c3:c6:0d:23:86:af:0d:cb:a9:76:
e1:9f:bc:e9:7f:3c:70:e4:14:87:52:2c:4b:a8:71:
e4:56:87:88:3f:fd:66:6e:76:e1:89:77:51:4e:6c:
d8:c0:bd:0c:49:97:45:98:59:a2:23:f0:a2:46:d4:
ed:50:07:3f:f6:14:17:52:09:d9:b5:aa:83:4f:ea:
60:2e:e0:2d:79:8f:7c:8f:63:6a:e2:67:e6:56:d8:
14:ca:89:d9:9e:1d:95:32:b3:d8:54:ec:aa:99:e1:
7a:14:54:af:a4:71:e3:c0:0f:a1:20:3b:62:82:c9:
30:4d:4d:e7:ef:89:07:a1:05:71:23:13:b1:10:1b:
e9:3b:0c:74:51:65:33:12:1b:97:c9:33:e2:e0:56:
4e:b0:a0:65:54:b1:39:bd:e4:a7:c6:8c:ad:30:ad:
61:35:be:6b:4d:e2:1d:1d:65:85:46:d1:e4:32:46:
6b:52:cc:17:45:76:65:7e:3a:25:9b:81:67:8e:03:
d3:ef:6c:5c:ab:29:93:18:9c:31:ea:5c:ab:77:9c:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:04:50:9B:24:C9:8A:52:98:E8:68:B7:95:3B:31:4D:E1:AB:6A:D7
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.140.248.0/24
Signature Algorithm: sha256WithRSAEncryption
81:12:c7:0a:85:df:a5:91:56:bc:f5:bf:27:0b:19:a9:7a:82:
87:a2:49:7b:47:8b:05:44:ff:05:a5:1b:9e:16:a4:13:d4:0d:
c4:2d:ad:2e:67:5d:7b:fd:25:b1:0c:fb:72:b0:67:f9:92:0a:
ca:0f:4d:ca:99:e4:cf:10:df:f4:33:1e:05:b9:45:7d:20:39:
e1:37:39:a0:aa:c2:06:ce:85:c4:7f:2c:63:33:36:66:4a:7d:
49:82:1c:c5:3a:b4:fe:a9:4c:d0:f4:a3:28:94:5d:42:81:f0:
bf:da:e3:d2:35:4e:3d:37:30:89:5b:16:0f:20:1b:a6:dc:39:
5a:5e:ab:9e:1a:a7:27:b3:67:7b:f6:a2:86:47:0d:8d:2c:cc:
f3:dd:56:e3:6b:96:dd:d0:58:6c:e1:3d:48:71:ca:35:c0:fc:
c4:28:34:82:08:13:b3:3c:a9:03:59:1e:d9:65:c2:9e:4a:56:
69:ec:b1:c8:3d:63:b0:67:24:12:e8:d5:55:ab:27:25:2e:6b:
24:d2:c9:67:06:a5:f3:8d:1a:0e:44:05:29:8b:37:3d:42:ba:
f1:99:7e:dc:d0:a9:67:8d:28:07:9d:6d:f3:f9:86:60:6a:95:
af:ef:82:79:17:c3:d6:13:7b:6b:da:6c:c2:c1:65:13:31:38:
9a:41:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:33 2025 by rpki-client