Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa
File: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (raw, json)
Hash identifier: 9k7zVaT9hi5UwhaWx0X/s2XHgzuuikTp3rt7GihSddA=
Subject key identifier: 52:F3:47:64:10:F3:69:BC:11:8C:E7:AE:59:E0:AC:FD:A6:4F:61:C9
Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial: 618D88C2EE7C2A4E2578207CDED8AD0E19AC17F8
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa
Signing time: Sat 10 Jun 2023 13:28:11 +0000
ROA not before: Sat 10 Jun 2023 13:23:11 +0000
ROA not after: Sat 08 Jun 2024 13:28:11 +0000
asID: 211431
IP address blocks: 2a05:dfc1:8000::/40 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8d:88:c2:ee:7c:2a:4e:25:78:20:7c:de:d8:ad:0e:19:ac:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Validity
Not Before: Jun 10 13:23:11 2023 GMT
Not After : Jun 8 13:28:11 2024 GMT
Subject: CN=52F3476410F369BC118CE7AE59E0ACFDA64F61C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:ff:7e:92:78:ee:dc:ca:20:67:fc:ed:e2:
9a:61:73:58:3a:9f:a1:3e:ba:93:ff:4f:e5:b3:3f:
dc:19:30:98:06:42:8a:0d:35:de:85:c5:fa:e7:0e:
45:bd:ee:f1:b4:f1:8e:ea:a9:b4:84:9c:01:9f:03:
44:53:a7:fc:a3:33:c4:36:de:92:7f:33:3e:6e:ff:
5d:6f:72:74:95:a3:b7:d5:49:d0:ac:7c:fe:f6:a1:
5a:19:5d:43:0a:09:21:79:e1:fa:15:c5:96:2c:26:
30:68:ff:c0:80:39:0e:e6:26:2f:a6:5b:56:98:9c:
2e:90:f7:1d:69:b0:f9:29:38:f0:4c:ec:b7:9d:e3:
58:56:cb:59:02:75:9e:1e:c7:06:1d:b3:d7:ab:3e:
28:a0:85:77:e8:05:48:7d:e8:e8:57:3d:97:50:3e:
d8:86:de:3f:a7:5b:bc:cb:15:58:63:30:9d:19:c0:
01:f6:91:79:8a:f4:f5:10:bb:26:c2:40:21:6a:a5:
57:3e:eb:a3:b7:6e:a4:d1:a1:c7:9e:c2:6e:a3:bd:
61:c4:90:bb:42:43:e3:f3:6d:c9:b5:e9:ad:03:3e:
8f:0c:85:03:1a:6a:d3:31:8a:60:1b:e2:ec:f8:fb:
3d:c1:34:3e:2f:0a:36:be:86:f8:8b:dc:e1:56:d0:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:47:64:10:F3:69:BC:11:8C:E7:AE:59:E0:AC:FD:A6:4F:61:C9
X509v3 Authority Key Identifier:
keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8000::/40
Signature Algorithm: sha256WithRSAEncryption
76:fb:56:66:45:ee:e2:62:8a:50:1e:e4:2a:e3:28:00:79:e5:
04:13:ad:24:0c:12:46:5c:64:5a:5c:6b:b6:e4:e0:68:36:fd:
fd:93:cd:ef:c6:3c:16:9a:eb:c2:68:4d:e6:f8:05:26:95:20:
e9:91:b6:73:04:98:97:f2:4a:9e:ff:94:87:05:0b:c3:17:61:
92:f9:e1:91:68:40:70:76:50:b2:a7:78:e5:2f:f0:9c:97:09:
06:51:5a:e1:56:ef:67:93:d6:aa:1a:34:10:0b:f9:bc:bc:38:
02:2a:b5:6c:36:60:2d:c4:13:30:76:95:29:a8:e0:e7:90:96:
a9:fb:b3:26:9e:db:4d:77:09:d7:0f:fb:24:c0:29:c9:53:34:
21:a6:6f:00:47:eb:6a:e8:3a:f2:c5:02:36:53:ac:be:a6:ec:
e6:8d:37:77:11:3c:7b:89:3c:cc:db:86:c0:1d:8a:3c:49:8e:
9f:d8:c9:ec:07:36:0a:c0:3e:c2:80:54:60:14:be:4e:24:0a:
e5:a6:96:83:dd:97:be:1c:85:0e:65:c7:b0:79:a1:3c:3e:e0:
0e:02:43:39:4b:76:ff:d0:63:cb:65:3c:ab:bd:0f:a6:e2:99:
12:71:50:87:8b:48:41:20:1e:d0:2d:9e:6b:ae:20:81:e6:28:
5f:31:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:29 2025 by rpki-client