Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa
File: 323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa (raw, json)
Hash identifier: cNj8SPQ19hwDo6QA4Xm4sFmmt4XwUvEboZYAsafMM2A=
Subject key identifier: 10:2D:37:2D:78:B6:F4:49:AF:90:0A:4F:2E:03:61:C0:AD:3D:DC:0E
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 093DF16E9B67BF2612F8BED3B934F4C385B9D1A8
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa
Signing time: Wed 16 Oct 2024 12:45:22 +0000
ROA not before: Wed 16 Oct 2024 12:40:22 +0000
ROA not after: Wed 15 Oct 2025 12:45:22 +0000
asID: 201398
IP address blocks: 2602:fafd:f05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3d:f1:6e:9b:67:bf:26:12:f8:be:d3:b9:34:f4:c3:85:b9:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: Oct 16 12:40:22 2024 GMT
Not After : Oct 15 12:45:22 2025 GMT
Subject: CN=102D372D78B6F449AF900A4F2E0361C0AD3DDC0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:3e:aa:2f:e3:fc:01:bc:59:a6:f7:e5:de:
92:31:8b:60:7f:b7:05:61:ba:ef:0b:8a:ae:1b:94:
a4:de:81:f8:c2:cd:62:db:49:ad:87:a0:c4:85:9d:
a4:47:0f:01:44:1c:1e:74:70:0c:d6:a2:10:94:11:
3f:15:75:3d:3d:1a:94:39:c2:af:09:b4:f9:bb:ee:
9c:05:87:f3:cb:d9:1f:08:b9:7b:e6:32:c1:44:86:
6a:75:fd:01:ea:4c:04:64:43:d8:a1:1d:cb:1c:c5:
0b:08:70:34:5b:12:34:d9:5a:5c:b0:75:ba:9f:cb:
e3:0f:34:71:d7:30:ab:2a:1d:4d:79:24:82:59:2a:
95:d3:98:61:e1:77:2c:32:7f:12:0b:e9:d7:d0:49:
e1:49:49:7a:9a:a7:96:da:e5:55:12:01:a6:d3:85:
3c:c5:b1:61:31:70:9b:5b:d2:b2:30:6a:09:4d:85:
83:b2:b3:96:55:4a:fb:20:23:e1:ac:f9:39:e2:b6:
24:d4:27:7c:bb:d4:d1:87:9e:8a:28:cb:27:60:1f:
fe:65:9b:e3:15:36:bc:dd:a3:b4:91:b3:26:33:27:
0d:da:a0:8d:48:a3:fb:a2:4b:12:12:2b:6e:c4:18:
d3:c1:dc:5d:33:ad:ec:16:95:51:96:30:f3:8f:74:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2D:37:2D:78:B6:F4:49:AF:90:0A:4F:2E:03:61:C0:AD:3D:DC:0E
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:f05::/48
Signature Algorithm: sha256WithRSAEncryption
54:dd:bb:dd:71:34:cc:b7:88:e0:f4:5a:c0:50:ab:f8:66:44:
b6:c0:8d:05:9d:dc:d2:b1:0d:0b:1e:cc:88:ad:c0:bd:7f:9c:
0a:2a:33:85:96:8d:cb:a6:cd:07:34:48:de:cc:e6:b5:a9:50:
56:f1:e8:06:8b:a5:df:a2:9b:6c:7a:36:d3:40:71:8e:59:f7:
77:50:f8:98:b5:dc:57:da:29:60:9c:ad:ee:13:ac:60:9c:0f:
67:21:6d:f1:b0:56:f8:03:93:47:42:89:51:b7:a9:8f:48:51:
75:fd:d0:c2:b9:23:87:98:80:c2:2c:44:00:f4:47:b4:df:21:
bf:35:57:89:9f:6d:ab:b8:32:01:e7:da:ab:af:e2:41:ce:97:
2d:a2:24:04:21:be:80:3e:83:1d:bf:f5:de:a4:b2:dd:37:ba:
5b:42:df:a5:cc:8d:c1:dd:ec:de:bc:3b:68:c0:cc:c7:f6:79:
b0:27:12:94:f8:9e:26:78:40:df:4f:cd:75:12:41:13:57:09:
13:f3:04:9f:d8:a6:51:e0:f0:6d:3d:e8:81:a5:15:ce:4e:0b:
ba:7e:84:f8:e0:cc:b9:4c:0c:c3:f7:bb:c6:d7:0e:e1:fa:ff:
91:fe:c0:6a:a0:16:f9:a6:b5:08:f1:49:e3:4c:05:dd:a7:f0:
07:90:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:50 2025 by rpki-client