Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa
File: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (raw, json)
Hash identifier: YFt3q+ZWZI/hR1iZR4grOc5hq2/gQVBvkRMee2ZUZhs=
Subject key identifier: 6E:0D:B9:61:AB:F0:44:7E:4B:C3:59:24:FC:AD:3E:74:02:AB:1E:35
Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial: 2B84F88B5437569E5E2B94F6482ACC025355D9FF
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa
Signing time: Thu 21 Mar 2024 20:58:01 +0000
ROA not before: Thu 21 Mar 2024 20:53:01 +0000
ROA not after: Thu 20 Mar 2025 20:58:01 +0000
asID: 216455
IP address blocks: 2a05:dfc1:9600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:84:f8:8b:54:37:56:9e:5e:2b:94:f6:48:2a:cc:02:53:55:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Validity
Not Before: Mar 21 20:53:01 2024 GMT
Not After : Mar 20 20:58:01 2025 GMT
Subject: CN=6E0DB961ABF0447E4BC35924FCAD3E7402AB1E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:32:d7:92:15:8f:5d:dc:e3:17:7d:c8:4a:
9d:dd:0f:4e:72:25:f2:c7:94:7d:fd:1f:cd:7f:2c:
d0:c2:b6:e8:39:06:cf:8e:fc:03:6d:4a:68:5c:cb:
4e:8d:fe:22:22:ce:eb:12:06:2b:cd:d3:9b:14:2e:
52:f1:3b:e1:d5:b5:d9:90:e9:01:e4:fd:2a:f6:26:
67:de:fe:2d:d2:b3:56:ae:9f:8d:c0:74:4e:3b:d7:
04:31:92:f0:d3:7d:d8:6a:88:cc:67:9d:b8:c5:35:
9f:a6:13:8b:7f:55:fb:be:4d:10:67:88:ed:65:82:
8b:f7:fa:05:e3:4d:9e:7b:ce:4d:55:bd:7f:fc:c1:
f7:4c:13:dc:c3:79:a5:c2:ad:64:9a:85:8f:3f:a3:
1f:dd:4c:2a:6f:7d:cc:0f:30:ae:b5:28:a5:88:56:
53:f1:28:12:c4:92:b3:42:71:92:51:1e:f3:c4:e2:
2e:e9:4f:e6:b0:d7:ae:73:ca:9b:12:e0:d5:5c:67:
20:5e:a2:67:92:09:52:e0:07:ce:8b:e9:0d:48:30:
00:8b:09:b0:a0:f1:db:b2:7b:e3:dc:42:8d:27:70:
d1:a8:c5:01:11:4c:c2:b1:ae:89:9e:04:85:37:00:
6d:ca:b8:06:ba:0a:e4:9e:34:e2:3c:e1:93:1b:93:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:B9:61:AB:F0:44:7E:4B:C3:59:24:FC:AD:3E:74:02:AB:1E:35
X509v3 Authority Key Identifier:
keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9600::/40
Signature Algorithm: sha256WithRSAEncryption
b6:70:b6:bd:55:ff:1c:4c:ad:e4:91:44:0d:34:fd:5d:d0:b6:
51:15:20:fe:7f:8b:51:77:09:ee:80:ea:46:83:e1:b3:b2:a5:
9e:fa:ab:46:cd:f3:56:de:4f:a6:f3:19:21:9f:7f:5c:40:d4:
9c:e7:85:3d:0d:4e:9a:99:1d:6d:18:95:c0:ec:98:b6:de:2f:
f5:60:f3:19:c2:47:d7:8e:88:dc:c0:35:00:0e:c1:30:42:7b:
27:f1:95:77:be:9e:52:10:54:cf:43:90:fe:81:c0:90:35:58:
e4:c3:31:5c:76:bd:6f:4c:15:d5:4f:45:7b:f9:f8:4d:5b:b3:
bd:14:5f:93:5c:ea:c5:65:25:aa:0a:cb:d2:0c:bd:7f:8d:89:
2f:74:54:20:bd:b6:59:5e:f2:c1:ee:be:44:b1:9c:44:a8:cc:
11:ec:89:27:db:0d:4e:57:e0:4e:d9:4e:4b:68:69:68:62:aa:
ca:c6:d5:b0:b7:cb:11:25:59:17:9d:c0:92:76:27:03:26:59:
c7:c8:88:c4:68:32:e5:cc:cf:ef:e6:0f:3b:cb:29:8a:20:46:
cf:e5:35:25:29:64:18:11:4e:11:4b:f7:46:ac:b5:82:fc:fb:
ef:39:37:bf:66:53:62:e0:b2:8d:37:b9:22:f7:06:74:dd:ff:
1d:d2:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:53 2025 by rpki-client