Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
File: 323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier: UIzeB8DXpGYn9og429jHrjalreyUOqR1ijGsjv1qakE=
Subject key identifier: BB:57:C4:60:40:8A:43:A5:7A:A7:AF:AA:0A:F5:24:D3:1C:A7:65:6C
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 0771ED09EAD4A4B3F63336FC9EB64F42EC732D62
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
Signing time: Wed 27 Nov 2024 06:45:32 +0000
ROA not before: Wed 27 Nov 2024 06:40:32 +0000
ROA not after: Wed 26 Nov 2025 06:45:32 +0000
asID: 23470
IP address blocks: 2602:fafd:902::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:71:ed:09:ea:d4:a4:b3:f6:33:36:fc:9e:b6:4f:42:ec:73:2d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: Nov 27 06:40:32 2024 GMT
Not After : Nov 26 06:45:32 2025 GMT
Subject: CN=BB57C460408A43A57AA7AFAA0AF524D31CA7656C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:cb:e1:19:d3:52:32:bf:de:c0:09:bc:6c:
76:97:38:ee:83:f5:68:14:97:ed:f1:36:e3:7a:7a:
aa:bd:73:24:14:ee:11:af:f1:2d:6f:5c:06:04:ca:
56:28:7a:2e:42:f7:a9:59:c4:96:4b:7d:51:25:38:
48:a7:a0:5a:82:0f:53:39:25:65:1b:ee:fb:15:e0:
03:8b:71:33:fb:29:89:f8:99:c2:77:2f:ee:5e:c3:
59:f1:c2:02:09:48:e0:4b:a7:a3:a4:dd:b4:a5:bc:
97:4e:81:c1:40:9b:96:cb:80:f9:44:f1:77:05:eb:
ef:b1:82:5b:87:a7:33:c1:c6:52:b2:b0:78:45:e5:
09:87:dd:e0:d2:06:39:9d:6a:82:3c:00:0b:dd:ac:
d7:78:4a:2d:56:01:71:8d:cc:64:75:e4:9c:49:38:
70:e6:5c:b4:6c:51:f3:51:ef:d0:af:7e:0b:54:6a:
c8:e5:7c:3b:f9:4f:d3:32:e7:d5:b9:21:dc:9b:ee:
c7:11:6e:40:0b:f4:a7:f1:db:22:eb:35:7e:23:e4:
68:db:00:e1:c4:93:f0:f8:b1:f7:da:81:f1:11:9f:
e0:b1:fb:ac:75:eb:38:cf:ef:9f:43:ce:e9:ba:aa:
39:01:aa:be:1d:55:19:f8:23:66:e4:88:c3:20:cc:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:C4:60:40:8A:43:A5:7A:A7:AF:AA:0A:F5:24:D3:1C:A7:65:6C
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:902::/48
Signature Algorithm: sha256WithRSAEncryption
83:a1:78:af:8e:96:ce:14:e6:e8:87:8d:b1:95:34:4b:2c:b9:
50:56:df:ba:6e:c6:70:92:60:c7:92:4d:3f:d9:7a:54:70:03:
8b:f2:02:f0:f6:83:db:be:8f:f8:0f:c1:49:82:ca:dd:33:df:
06:a4:ed:8a:fd:23:04:ed:49:fc:d5:38:05:a1:c9:58:9f:56:
59:99:84:6d:43:16:7c:eb:bd:b6:9e:90:46:4b:af:87:6c:b2:
9f:b2:16:fc:84:36:fe:83:1c:ef:2f:e8:50:45:22:72:70:0f:
13:9e:78:08:e3:ec:38:ba:96:4b:7e:9b:c9:81:9b:52:86:8c:
52:5a:45:6d:36:4f:47:0f:15:ab:32:d5:33:17:b7:76:3c:ac:
54:13:7c:3b:bf:e9:fb:42:54:48:99:07:37:aa:ac:d3:2a:97:
86:72:4b:fc:47:dc:ad:eb:57:07:3e:37:53:63:f7:8d:fa:7a:
e2:35:a5:e3:16:66:fc:b1:fe:82:98:3d:a9:da:c4:cb:26:11:
16:56:6f:7b:58:01:30:ac:44:90:98:4a:9b:e5:6d:27:c4:30:
ba:b4:20:90:76:50:8e:e6:26:4a:0a:1a:8b:7e:45:e2:12:da:
ae:ac:a3:8e:86:c7:d8:6d:da:db:6c:54:6c:bb:16:1c:d3:10:
d9:05:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:35:42 2025 by rpki-client