Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: vfdl9n8P5v7Mc9ur+wyRaR08tksVFPmC0cYStpvJaig=
Subject key identifier: 4B:0D:AB:45:D0:28:5E:00:6C:E9:0B:C7:F3:E1:58:67:20:3C:DA:B5
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 7148C09760B5C9C7E546482AF840B583FB9A571F
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa
Signing time: Sun 17 Nov 2024 03:38:55 +0000
ROA not before: Sun 17 Nov 2024 03:33:55 +0000
ROA not after: Sun 16 Nov 2025 03:38:55 +0000
asID: 58339
IP address blocks: 2a05:dfc1:8e30::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:48:c0:97:60:b5:c9:c7:e5:46:48:2a:f8:40:b5:83:fb:9a:57:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: Nov 17 03:33:55 2024 GMT
Not After : Nov 16 03:38:55 2025 GMT
Subject: CN=4B0DAB45D0285E006CE90BC7F3E15867203CDAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:2b:6d:e2:3e:9f:a4:bb:02:fc:16:49:51:
d3:cb:d0:e5:52:ea:a8:6c:bb:f0:17:6e:00:30:93:
a0:97:e9:39:4d:93:2d:8f:ee:a9:f3:13:31:32:f3:
1b:7c:94:e3:5a:a1:c6:ce:4c:71:18:1a:8d:5e:05:
6a:57:2d:2f:d5:6c:85:7c:a8:3d:19:bb:a3:8a:54:
4f:67:9a:48:c3:c0:d3:29:78:3e:78:25:36:4d:40:
f7:2e:75:bd:4f:69:f2:2c:ee:d8:63:e8:ac:08:6b:
0b:93:82:f8:da:17:4e:ac:0d:10:55:89:77:48:7d:
3f:1d:ad:30:a8:f6:2c:18:bd:32:f8:b2:a9:4c:53:
e0:d7:4e:7c:24:14:65:00:43:ea:77:0e:4e:db:43:
59:03:d3:44:24:63:ac:bf:70:c9:c1:0d:69:5d:ee:
a8:a3:b0:fb:4e:e0:58:b7:32:df:7b:3d:cf:46:8f:
1a:20:ab:d0:dc:59:e5:a0:9a:31:c3:8b:12:1c:86:
67:5a:e1:15:75:5a:8f:cd:aa:10:7a:ee:1b:72:03:
47:62:8d:49:0b:ed:49:13:45:6c:2e:f6:b2:50:b8:
7f:3b:57:dc:e6:47:70:47:bb:b3:84:aa:d3:15:17:
4c:56:7b:10:c5:01:3b:69:00:20:a4:4c:3f:b5:9d:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:AB:45:D0:28:5E:00:6C:E9:0B:C7:F3:E1:58:67:20:3C:DA:B5
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8e30::/44
Signature Algorithm: sha256WithRSAEncryption
a2:fe:86:94:0b:4f:ed:10:4f:b8:7d:e9:cc:92:0c:4d:9f:6f:
a6:89:35:60:40:04:e5:c3:12:82:49:e6:f4:8b:98:21:06:36:
e1:05:a3:62:2c:ca:98:47:8d:d4:05:c6:b4:de:d2:ee:57:dd:
e7:fa:dd:6f:3a:14:54:9f:cd:e9:6e:50:6e:85:ba:4d:bd:e7:
95:b1:8b:04:56:d5:14:af:35:e4:9f:8b:53:0f:57:71:21:eb:
a6:3b:81:2d:54:56:fd:0a:28:8e:67:ae:eb:c9:48:4d:c4:5d:
bd:9c:e8:e8:83:f5:5e:41:86:a5:16:55:91:8f:9c:36:14:a1:
13:d3:23:6e:79:fb:3b:13:c0:5f:3b:d5:1b:74:23:71:ab:a2:
89:0b:96:68:fa:95:6f:66:24:9d:1a:d6:ea:ca:30:3f:8b:a2:
46:d4:80:d4:82:49:2c:0b:65:f6:49:3b:ea:71:d6:58:69:66:
3d:a8:ef:9c:fb:a5:b2:47:39:2d:61:6f:86:c6:0e:b0:ed:d5:
9d:f8:24:68:5b:5b:75:82:e8:5a:b3:9e:8c:a3:60:d7:4b:28:
e8:97:7d:87:7a:c0:91:53:cf:7e:0e:89:50:47:23:49:d0:da:
3a:42:0f:52:a6:61:c2:ac:bd:31:8a:89:4d:4f:f6:dd:86:2c:
13:9c:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:25 2025 by rpki-client