Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20313939313834.roa
File: 323630323a663961663a3a2f34302d3438203d3e20313939313834.roa (raw, json)
Hash identifier: Joc5lv/EyShYI6H5oqtyo9xx4pFPgIAKpZvP4H1WpIM=
Subject key identifier: E6:88:93:20:2F:5E:70:CE:2E:3D:61:73:61:82:7B:29:9B:6D:AD:B3
Certificate issuer: /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial: 203ECDD5C05332EDE21457A4259542DDAECEBC3F
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20313939313834.roa
Signing time: Fri 06 Dec 2024 07:45:34 +0000
ROA not before: Fri 06 Dec 2024 07:40:34 +0000
ROA not after: Fri 05 Dec 2025 07:45:34 +0000
asID: 199184
IP address blocks: 2602:f9af::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3e:cd:d5:c0:53:32:ed:e2:14:57:a4:25:95:42:dd:ae:ce:bc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Validity
Not Before: Dec 6 07:40:34 2024 GMT
Not After : Dec 5 07:45:34 2025 GMT
Subject: CN=E68893202F5E70CE2E3D617361827B299B6DADB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:ae:98:7b:67:63:ed:8e:fe:04:34:07:51:
9c:fd:cd:77:20:9a:02:fe:16:81:52:41:1a:17:ec:
33:91:68:f1:d0:4d:12:0e:f2:2a:ca:ac:cb:a7:ac:
c0:06:58:aa:f7:66:21:75:85:d6:cb:f7:f8:58:d0:
aa:57:dd:c1:40:23:a3:6e:38:fc:db:ba:66:fa:85:
37:d0:2b:05:6a:71:14:9f:03:6d:6c:ad:d6:5a:0e:
d6:e9:c3:e2:b9:18:b2:91:95:f0:3d:6b:a3:7d:7e:
57:38:07:c7:27:61:a3:89:3a:42:65:f9:be:46:bb:
91:d1:0c:80:af:ab:76:e2:44:5a:01:df:fe:8d:12:
d9:92:40:a9:56:c1:d7:12:3e:30:48:7a:86:54:e8:
48:5f:54:f5:cf:81:2c:93:ff:84:84:50:85:d7:aa:
26:98:4a:b9:c4:d1:6f:1e:a7:af:35:f5:8e:06:01:
87:32:68:e4:dc:9d:f5:a5:d2:fd:d8:0e:2b:ed:7c:
24:e6:f5:3d:6f:c0:cf:1b:29:47:c6:82:85:88:0d:
b2:59:0d:e3:7f:64:b8:2e:8e:17:23:d0:a5:8f:9b:
f8:dc:4a:18:35:59:90:27:47:b2:b9:46:5c:3e:67:
0c:22:63:48:c3:fe:61:5e:32:31:f4:e9:56:f0:14:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:88:93:20:2F:5E:70:CE:2E:3D:61:73:61:82:7B:29:9B:6D:AD:B3
X509v3 Authority Key Identifier:
keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20313939313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9af::/40
Signature Algorithm: sha256WithRSAEncryption
25:cf:c3:a8:c1:82:a3:a3:e3:5b:46:f0:e6:e9:67:47:4b:cf:
57:6b:36:06:dc:cc:51:56:38:f4:3c:fd:9d:22:b3:69:a5:de:
6a:c4:45:65:eb:ec:af:c4:09:c7:c0:7a:97:6a:0b:b0:4d:1f:
da:2a:ff:34:23:de:bb:d6:0b:af:f7:95:9f:8b:87:61:b3:ac:
cf:27:49:70:e3:3f:da:b6:05:0b:52:83:68:e8:67:d0:7f:f3:
13:68:27:6e:72:73:38:1c:0d:3a:c4:2f:54:7e:b3:56:13:ae:
f9:53:b8:1c:cd:72:9b:14:0d:a2:2f:5e:0d:0a:70:2f:44:0e:
31:4a:bd:6b:90:d7:6d:8b:12:70:f4:a2:ff:7c:e3:05:b7:c6:
61:28:e1:79:c7:bd:8b:b2:bc:5f:47:21:4c:8a:08:e3:c5:3c:
22:8c:76:15:b8:54:6b:d3:81:df:f1:1d:5d:6c:65:66:16:9b:
9e:bc:a2:d1:a4:8f:55:a9:10:07:09:73:62:87:bd:0b:5d:97:
20:72:5e:c3:91:68:ef:23:6e:ea:bb:13:75:51:f8:48:0d:62:
5c:6a:85:73:3e:06:8f:37:9b:8b:62:ea:75:61:3c:6e:81:15:
52:88:4b:1d:95:8d:1e:d7:35:d3:64:70:4b:3a:23:d3:43:73:
45:b2:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:40 2025 by rpki-client