Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
File: 326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: RmwCLPQD0FOxU230GA+d/4JJxiL3BJHnv8rUKeKCiSk=
Subject key identifier: 4D:EC:A8:15:2E:C7:77:CC:92:62:EC:FC:04:0D:20:4C:5D:7C:D3:3E
Certificate issuer: /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial: 5F41067A0BB80E8DECA2D7CBF741617F93273C14
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
Signing time: Sun 06 Oct 2024 04:55:36 +0000
ROA not before: Sun 06 Oct 2024 04:50:36 +0000
ROA not after: Sun 05 Oct 2025 04:55:36 +0000
asID: 31898
IP address blocks: 2a0a:6040:a103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:41:06:7a:0b:b8:0e:8d:ec:a2:d7:cb:f7:41:61:7f:93:27:3c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
Validity
Not Before: Oct 6 04:50:36 2024 GMT
Not After : Oct 5 04:55:36 2025 GMT
Subject: CN=4DECA8152EC777CC9262ECFC040D204C5D7CD33E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:4d:5d:4f:aa:20:0f:bf:80:66:a6:3c:fd:
0c:99:3b:52:03:7f:56:a0:1c:67:c1:a4:b8:8d:ff:
5a:d1:63:14:4c:30:c6:12:1d:dd:6d:13:12:36:46:
6f:33:50:f2:1a:5d:ad:44:a0:a7:99:18:c8:01:dd:
ab:8d:10:3b:64:20:16:24:f1:2d:fd:a4:8b:27:f9:
78:f1:6d:3c:ed:1c:7e:50:ff:a7:ad:9e:97:f4:07:
a3:88:f2:7e:4d:64:a7:d2:67:92:c1:0a:88:39:87:
11:d3:8a:a7:0e:76:53:44:e1:4f:2d:b4:e8:f3:b8:
db:b5:d2:aa:35:52:4a:a5:53:ee:33:d0:91:e6:23:
37:99:f8:c3:6b:ca:c5:9d:5f:b9:85:2c:a1:94:0b:
05:74:a8:26:3b:2b:d5:72:33:0d:06:42:21:9f:78:
22:c2:7d:70:5d:b1:a6:54:2f:af:7b:78:f9:88:6b:
2e:da:d0:88:7f:74:3f:33:93:6e:0f:54:6a:c2:8a:
f9:64:0c:f6:76:a4:ce:72:22:15:47:c9:b1:2c:48:
68:57:cd:cd:30:3e:6d:48:ab:1e:e8:f7:e2:72:6d:
ed:2b:87:14:63:b8:1d:c4:14:49:f8:15:b6:6d:3f:
2a:e5:e3:63:e2:5c:9e:86:af:0a:a5:15:3d:93:b0:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:A8:15:2E:C7:77:CC:92:62:EC:FC:04:0D:20:4C:5D:7C:D3:3E
X509v3 Authority Key Identifier:
keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a103::/48
Signature Algorithm: sha256WithRSAEncryption
c4:94:66:ff:6b:15:8f:3d:28:65:a7:8b:31:3e:17:30:b8:b5:
85:65:b3:e5:81:31:e6:de:29:a7:01:94:2f:5a:bc:d7:ea:b0:
42:b0:45:4a:e0:f7:2c:f0:53:4e:91:87:1b:ba:a8:14:1f:14:
33:eb:5e:82:48:84:a3:a9:70:d9:c5:31:f1:f8:90:eb:18:f1:
de:b3:db:42:be:a0:a8:b0:e4:f0:fa:3d:93:20:68:fa:e7:36:
3f:b1:c3:90:08:79:0c:99:71:18:1f:7a:36:0a:78:2d:02:c1:
f9:2c:6f:cc:7f:3e:53:9f:11:77:2c:8c:02:49:cf:8c:2e:ef:
12:44:82:10:92:6f:34:61:07:dc:d2:e9:1c:31:6a:49:f0:bc:
05:22:ec:fa:43:ef:c0:d0:64:85:d5:13:dd:c5:73:5f:40:9f:
46:32:9e:72:5d:f3:75:37:be:b2:7d:b0:f6:53:89:32:32:61:
f5:fc:e8:28:9d:9f:7f:4b:6c:e0:9d:28:a6:2b:aa:e2:a1:8f:
47:30:5d:d1:2b:59:42:b7:67:ec:75:44:ba:d6:4f:4a:78:44:
0b:e7:b6:82:55:97:49:fa:c6:e6:da:7c:52:d8:8b:bd:66:ce:
23:f3:56:59:ea:7b:93:9d:6c:c0:4d:f8:8a:f1:da:4e:5c:63:
ea:46:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:13 2025 by rpki-client