Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa
File: 326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier: siFflNuLBcUVT2ew55GY4asQcEPlp1UAXXEo+quCh4Y=
Subject key identifier: 5C:53:3E:C5:26:D8:F9:5B:39:62:0C:12:2F:70:75:D6:32:05:B5:7F
Certificate issuer: /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial: 5889E55EA4C5D91E80E7CCC32470DCE18728A078
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa
Signing time: Thu 25 Jul 2024 13:18:26 +0000
ROA not before: Thu 25 Jul 2024 13:13:26 +0000
ROA not after: Thu 24 Jul 2025 13:18:26 +0000
asID: 8075
IP address blocks: 2a0a:6040:a107::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:89:e5:5e:a4:c5:d9:1e:80:e7:cc:c3:24:70:dc:e1:87:28:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
Validity
Not Before: Jul 25 13:13:26 2024 GMT
Not After : Jul 24 13:18:26 2025 GMT
Subject: CN=5C533EC526D8F95B39620C122F7075D63205B57F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:a2:01:34:06:3c:21:13:6f:3e:72:f3:25:
81:1c:84:7b:33:d7:70:d7:51:a5:06:34:96:d2:5b:
f8:17:9f:57:ee:13:d2:d1:f6:95:2a:14:df:4d:db:
32:b6:a1:be:b2:c8:4e:55:2b:82:6d:ba:52:58:d0:
8a:dc:4b:ac:6b:a3:e8:2b:e4:48:9c:33:a2:11:b5:
3d:8a:15:66:e3:d6:e8:f8:06:6b:68:1f:7f:9d:f5:
16:c0:82:bd:32:5a:65:9a:0c:17:a5:1a:de:47:2b:
60:e4:18:62:4a:dc:43:89:5e:8a:8c:12:59:9d:e0:
2e:de:8c:04:5b:ad:2d:31:21:e5:8e:81:08:cd:3d:
26:52:25:41:5b:d8:1d:4a:29:99:a1:f2:ac:3c:10:
f3:11:0b:01:a1:3f:c7:d4:a6:ba:5c:27:67:15:40:
1b:a0:fd:ae:6f:fd:53:05:bd:88:a8:c7:74:70:71:
3f:34:ff:ce:bc:d9:07:de:17:c2:d1:db:7a:b7:33:
5d:dd:9a:6c:10:7d:d4:35:f4:6a:c2:1d:a9:97:c4:
a9:b7:c8:e6:3c:d7:94:52:2e:50:db:2d:15:5f:08:
7b:22:88:87:13:bf:0e:e9:b6:ac:94:03:ae:00:02:
a9:9e:c0:21:42:98:62:00:e8:b3:ff:62:48:2c:27:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:3E:C5:26:D8:F9:5B:39:62:0C:12:2F:70:75:D6:32:05:B5:7F
X509v3 Authority Key Identifier:
keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a107::/48
Signature Algorithm: sha256WithRSAEncryption
97:d4:ba:a5:6b:4d:49:27:86:7f:c3:70:ea:3b:ca:94:4d:8e:
65:bb:f3:08:b1:8e:d5:94:9d:92:3d:66:1d:52:9e:40:f4:ad:
ca:ed:25:25:26:b5:60:ec:f9:25:fb:cc:16:a2:99:3d:a1:c9:
95:05:fe:f9:5e:6d:c5:35:57:1f:b3:d0:f3:62:39:4b:50:5b:
ee:07:19:89:50:07:b6:22:80:fc:5f:c8:6e:20:cf:b4:00:74:
00:1b:dc:ee:fc:1f:22:ef:f5:8b:10:15:9d:29:7f:6e:89:4b:
fb:32:8d:6a:40:61:38:05:44:ea:26:7e:47:13:66:b2:2b:c1:
62:6a:66:82:15:a6:b5:c0:ff:c9:9f:a4:38:1d:7a:3e:e0:8e:
64:6c:b7:b2:a5:9e:1e:d1:ca:a9:be:47:5c:c5:ca:ec:0b:8b:
e2:5b:db:67:68:a4:41:2a:30:54:aa:bf:61:61:30:0a:14:8c:
0d:0d:68:8f:d2:d3:df:b5:39:cb:2c:5c:5d:59:d6:94:c3:ae:
cd:d0:5a:1a:a2:b0:c3:b6:ab:62:d9:51:73:47:ba:76:d9:62:
70:38:a0:a9:68:2e:10:e4:5e:d1:31:37:5e:a2:76:61:8b:68:
60:31:31:26:90:b8:3e:95:d8:2e:5f:af:7a:82:d3:77:9e:07:
24:66:fa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:46 2025 by rpki-client