Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa
File: 326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa (raw, json)
Hash identifier: KNGSB+cQzjns5f9eTaOdtd1wrmRLgRW49MUBloto0aU=
Subject key identifier: A8:7D:5A:0B:8A:AA:91:F7:A2:24:6F:D0:58:3E:F3:2E:0B:BD:DA:63
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 60B7B7EAC9EDB776053761CA35CE682FBB0FB17D
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa
Signing time: Tue 24 Dec 2024 21:19:56 +0000
ROA not before: Tue 24 Dec 2024 21:14:56 +0000
ROA not after: Tue 23 Dec 2025 21:19:56 +0000
asID: 215665
IP address blocks: 2a05:dfc1:916c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b7:b7:ea:c9:ed:b7:76:05:37:61:ca:35:ce:68:2f:bb:0f:b1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Dec 24 21:14:56 2024 GMT
Not After : Dec 23 21:19:56 2025 GMT
Subject: CN=A87D5A0B8AAA91F7A2246FD0583EF32E0BBDDA63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:00:9f:bd:8e:77:5c:f1:f9:aa:fd:51:45:dd:
10:2e:9d:64:37:f8:a9:b2:3b:14:2a:13:5c:ed:b2:
71:6b:c6:0c:42:8a:58:90:b1:b8:20:76:58:6e:77:
7b:07:86:82:7f:89:d7:74:1b:2a:df:6b:08:a5:7b:
ff:13:91:4c:ad:fc:30:07:b0:36:2b:2d:b7:99:70:
c8:eb:cc:ef:fd:20:c7:a5:b7:5c:33:70:42:ae:38:
37:b5:ef:5d:4f:ff:d8:23:c9:5c:d0:3f:b3:e6:1c:
ee:34:0c:fa:f2:df:f3:40:99:a4:f7:af:8b:ee:19:
34:33:b7:aa:89:cf:54:17:88:00:2e:a1:d4:2d:c6:
b9:46:1f:06:b0:f9:8a:e0:9d:93:cb:58:9b:b2:e1:
1f:f7:01:e3:84:23:17:32:21:65:67:cc:bb:12:63:
d5:07:e4:98:af:37:b9:bc:e1:e8:53:ca:bb:4d:1e:
e9:02:24:f5:6b:69:4a:3e:f9:a0:79:31:dd:43:0a:
1f:7e:e8:a0:a9:e4:83:50:cd:d5:19:36:67:46:1c:
17:99:a9:09:8b:96:1d:a7:48:be:d6:8e:c1:01:e9:
b9:35:b8:ac:72:7b:3e:c2:87:a1:ec:2b:5c:6f:c5:
f7:a8:fb:a9:3d:b0:bf:50:d4:de:d6:d8:fc:8b:4b:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:5A:0B:8A:AA:91:F7:A2:24:6F:D0:58:3E:F3:2E:0B:BD:DA:63
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:916c::/48
Signature Algorithm: sha256WithRSAEncryption
77:bb:13:e0:77:d9:ea:e0:47:f5:04:af:ad:85:2b:67:3c:26:
5e:cf:2d:16:ec:34:d0:bc:19:26:49:7b:1d:5d:43:7c:22:52:
c6:92:01:55:a4:48:e8:96:64:b9:ba:9d:93:03:a0:fb:fc:3c:
4c:79:70:d4:3f:50:16:fe:74:5c:2a:c0:59:46:fa:74:bb:74:
f3:39:5a:79:d7:69:de:d5:9e:62:4c:e5:ac:95:20:2c:b5:2a:
56:e5:c9:98:da:74:75:53:1b:41:6f:51:3d:8e:b8:e5:dd:47:
c0:b0:c4:4d:25:0e:45:2e:8d:fe:41:c1:9a:db:08:85:db:33:
65:68:b9:44:37:67:8d:c7:c8:28:e6:17:14:fb:0a:e4:9f:ce:
f1:c9:15:6f:a5:b8:25:18:4c:92:f4:b7:8f:27:33:1e:71:64:
b9:60:f0:9a:16:4a:6a:ce:8c:81:aa:25:33:1b:35:78:56:fe:
ef:3d:e2:4d:15:e5:10:41:00:77:f2:27:d8:c3:dc:1c:ea:8a:
36:ac:3e:22:46:64:3a:f2:4c:0d:20:9f:f4:c2:b0:ff:c0:f4:
fe:13:f0:42:5a:f2:3c:6c:d1:a7:de:2e:1d:be:eb:d8:5c:c3:
4d:da:a0:d8:5b:7a:32:76:7a:55:df:bb:8a:30:08:fa:13:67:
ee:f9:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:25:03 2025 by rpki-client