Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa
File: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (raw, json)
Hash identifier: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=
Subject key identifier: 64:0A:27:B1:09:DA:9E:33:69:6B:F3:33:06:81:FC:4F:86:C0:FD:E4
Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial: 63FF0117EA16516C8DFF95218498BEDA908BCF58
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa
Signing time: Mon 23 Dec 2024 14:58:15 +0000
ROA not before: Mon 23 Dec 2024 14:53:15 +0000
ROA not after: Mon 22 Dec 2025 14:58:15 +0000
asID: 47496
IP address blocks: 2a05:dfc1:c410::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ff:01:17:ea:16:51:6c:8d:ff:95:21:84:98:be:da:90:8b:cf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Validity
Not Before: Dec 23 14:53:15 2024 GMT
Not After : Dec 22 14:58:15 2025 GMT
Subject: CN=640A27B109DA9E33696BF3330681FC4F86C0FDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cf:34:9d:ab:af:65:d2:a1:fc:a0:67:00:f0:
c3:45:ca:e5:96:dd:38:4c:65:6c:a7:a1:e2:c6:e2:
b9:7b:6f:bb:d7:88:5b:ca:fe:7d:3e:b9:9a:f6:3e:
eb:64:47:ef:71:91:c0:de:d8:d1:b8:9f:16:ea:b7:
65:2d:a6:1c:82:a6:2d:84:ea:60:48:38:fb:06:ca:
3a:b4:d7:d4:80:47:2e:00:5c:74:84:dd:50:5a:29:
4f:e5:55:2a:b8:03:ad:62:6c:0a:d1:3b:3d:3a:b2:
db:c6:db:4a:22:2d:ef:9f:6c:21:de:ed:09:bd:81:
d9:cf:bb:34:3e:bd:95:18:3b:4f:a8:90:97:30:cb:
0c:9a:d7:00:06:ec:db:8f:c0:38:45:9e:79:08:cd:
ee:79:48:90:69:f7:32:c0:97:40:82:63:db:7a:58:
ec:4e:e2:cf:a9:79:d0:27:13:07:91:91:ad:5f:69:
63:43:f1:b0:b1:e5:bc:ec:f1:ba:b2:2d:45:6a:87:
8e:39:1e:1d:a2:de:11:30:12:4d:e1:dd:09:df:8c:
7b:f9:22:12:28:5c:27:cd:9b:cc:c5:77:6e:72:bb:
30:d3:aa:f7:e3:9f:37:ec:55:66:a4:9f:cd:38:0f:
1d:96:4b:64:5d:8b:b2:80:86:90:4d:25:41:f8:ea:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0A:27:B1:09:DA:9E:33:69:6B:F3:33:06:81:FC:4F:86:C0:FD:E4
X509v3 Authority Key Identifier:
keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c410::/44
Signature Algorithm: sha256WithRSAEncryption
c0:73:7e:83:bd:ee:78:e4:17:79:78:79:03:43:35:07:4c:0a:
43:cc:d6:ae:6a:0e:c9:4b:db:a8:79:24:57:fc:65:e1:8f:b4:
de:3a:0c:55:8c:fc:e5:dc:d4:71:74:83:95:d4:68:8f:d3:b0:
20:cf:fb:bd:4a:70:be:54:29:4f:16:02:18:8b:7b:e4:0c:2b:
b3:00:9a:ca:fd:8c:0a:f8:65:9d:cb:2e:77:86:5e:11:01:a5:
dd:eb:ee:e6:c3:eb:d6:f6:a4:ad:4b:c9:b2:2f:8a:73:22:cb:
2d:9d:f7:d8:3f:64:ab:29:f3:09:ec:1b:23:0e:77:db:d9:02:
7f:15:54:70:b6:e0:43:d5:7c:c3:2e:c6:e1:6c:cc:23:c6:1c:
91:a6:40:15:38:1d:c6:2d:9a:85:88:38:92:26:85:b8:91:4c:
1e:8b:f9:6e:3d:66:33:c2:65:5d:7f:5c:5b:dd:11:81:7a:74:
f6:ec:06:4e:ed:f0:0f:e5:b2:a8:10:cf:19:51:61:52:13:b1:
77:53:2d:bb:f9:c8:38:b8:ce:44:75:1a:e9:92:2f:e2:37:16:
7f:22:71:9b:0f:62:6c:01:3b:cf:7c:d9:64:df:56:f6:e8:e1:
7e:59:ed:af:e1:4d:a6:36:02:2b:c5:b0:67:12:a7:41:43:7a:
19:07:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:17 2025 by rpki-client