Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa
File: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (raw, json)
Hash identifier: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=
Subject key identifier: B2:F2:A5:02:7B:08:21:FA:4B:07:FA:38:99:36:1E:F4:E2:E8:83:C4
Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Certificate serial: 092BE9D89AC696B2BF794D39AF76F33D6D2EC1C3
Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa
Signing time: Tue 20 Aug 2024 02:31:52 +0000
ROA not before: Tue 20 Aug 2024 02:26:52 +0000
ROA not after: Tue 19 Aug 2025 02:31:52 +0000
asID: 51019
IP address blocks: 2a0a:6040:9f00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2b:e9:d8:9a:c6:96:b2:bf:79:4d:39:af:76:f3:3d:6d:2e:c1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Validity
Not Before: Aug 20 02:26:52 2024 GMT
Not After : Aug 19 02:31:52 2025 GMT
Subject: CN=B2F2A5027B0821FA4B07FA3899361EF4E2E883C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:61:ac:77:81:f5:14:73:4b:4f:6e:a2:8f:
1f:36:e7:e9:c7:37:70:c5:a0:ed:d5:7f:48:b0:3d:
e3:6b:24:ed:80:21:b0:f6:1d:94:b1:e7:9f:2f:97:
c9:ff:6a:3a:38:ec:ea:3a:cc:3d:48:be:fd:51:c4:
4e:23:b2:d1:1b:cf:c9:d8:ae:fd:23:d9:d6:00:d7:
6a:38:7d:f6:09:63:e7:c0:3b:dc:61:8a:47:13:63:
b3:da:f6:52:50:fb:cf:18:48:ad:92:bd:a2:af:e7:
f3:78:24:e8:3c:70:08:3d:2a:04:09:b2:03:bb:a8:
86:7d:22:4c:1e:fd:2d:c5:4b:11:ad:ba:11:e7:94:
84:49:b9:98:89:f4:d5:fe:d7:28:6b:f0:da:17:19:
73:05:b0:ae:47:1d:15:80:6e:a8:29:16:89:ea:7b:
14:31:c3:e2:21:aa:b4:e4:67:29:fd:58:7a:c3:c9:
d8:9a:9e:13:e2:cc:97:4b:9d:7a:cc:3b:e9:16:81:
d8:3d:a1:54:e1:6c:2a:fd:8d:a0:f9:ff:ab:2f:c5:
3a:c7:1e:e1:7b:30:df:60:42:d3:31:f1:e2:ed:08:
eb:fe:93:5e:3e:99:a7:49:fc:13:f9:22:b3:51:4d:
2b:2c:78:fe:65:d0:ba:e2:af:63:71:37:9c:79:10:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:A5:02:7B:08:21:FA:4B:07:FA:38:99:36:1E:F4:E2:E8:83:C4
X509v3 Authority Key Identifier:
keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:9f00::/40
Signature Algorithm: sha256WithRSAEncryption
78:60:91:3d:8e:a3:06:e5:3e:a5:8f:55:50:22:d8:51:e5:5c:
c7:cf:2d:f1:50:68:83:59:53:8e:d4:e0:8d:04:59:57:ad:71:
e9:72:ac:59:17:7c:8e:77:7a:d1:95:fd:83:cc:47:05:99:3b:
96:1b:78:22:5a:95:9d:af:c4:01:58:5e:20:a6:52:89:dd:c4:
ac:6f:eb:89:17:88:2b:32:eb:78:47:88:05:4f:cc:42:00:49:
43:7d:0e:5a:15:a8:11:a5:6b:56:e6:10:b3:3f:95:77:a4:23:
30:01:b8:c7:a4:26:24:13:a3:dd:d1:19:76:d7:63:0f:db:e7:
a1:b9:a2:75:85:34:75:25:cd:48:45:c6:4c:e2:c4:3d:65:3f:
f6:8c:87:5c:ce:83:85:e5:80:3d:62:c1:1a:6d:1b:a2:f2:7c:
e2:1a:d5:90:55:df:da:ec:ac:af:83:6f:83:ac:30:ec:92:02:
21:6b:d3:f3:45:aa:46:30:27:76:88:f4:43:3f:73:08:8f:b8:
c0:ef:21:d6:26:18:56:32:41:bf:e6:18:05:bf:f9:37:ca:8b:
16:51:bb:f1:1b:34:22:bc:a3:be:d3:51:f0:be:aa:20:ab:30:
3c:8c:2e:65:a3:a7:83:27:3f:9f:35:31:a9:c7:f6:cc:1e:06:
ee:93:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:20:47 2025 by rpki-client