Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
File: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (raw, json)
Hash identifier: bhARrrMnEZMRU5RLO1PZJxWc+ACqtqAE3Q0vOJaR8lc=
Subject key identifier: 4C:F1:1F:AC:F1:F0:F2:87:73:6C:83:3C:4B:0C:76:FF:78:89:D3:1B
Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial: 0DEA420D0034AB428BA9FCE13F65395875892CAE
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
Signing time: Sun 11 Jun 2023 18:17:05 +0000
ROA not before: Sun 11 Jun 2023 18:12:05 +0000
ROA not after: Sun 09 Jun 2024 18:17:05 +0000
asID: 212154
IP address blocks: 2a05:dfc1:8010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ea:42:0d:00:34:ab:42:8b:a9:fc:e1:3f:65:39:58:75:89:2c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Validity
Not Before: Jun 11 18:12:05 2023 GMT
Not After : Jun 9 18:17:05 2024 GMT
Subject: CN=4CF11FACF1F0F287736C833C4B0C76FF7889D31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:38:3b:e7:db:c3:f8:df:33:ba:de:c1:cd:
47:2f:a6:ed:a1:be:96:b4:db:33:e4:25:3e:d4:54:
55:8c:c6:7a:f4:5e:7a:b5:6d:d4:3c:e6:3e:7c:3e:
63:96:7f:89:94:f8:75:e4:3f:c7:51:05:20:7f:3c:
f4:a3:1a:e9:f1:41:20:b3:b4:06:73:8f:5e:95:2c:
2a:6d:f9:26:23:f2:ec:e6:b5:57:3c:1a:94:a2:01:
b1:16:e5:39:24:12:86:17:a1:f1:6e:c8:cb:a3:ec:
b2:78:96:c6:f0:44:1d:c9:51:0a:9a:87:98:b5:3c:
bc:86:6f:0a:ba:3a:0e:e6:c3:bc:aa:45:2c:90:51:
48:0b:05:6c:3b:8a:93:c9:72:3b:e0:1a:bf:67:0c:
be:f1:10:dd:66:de:24:9b:43:27:3c:33:af:12:0e:
e8:40:7f:f9:5a:e1:a9:0a:db:f9:c6:e1:3b:12:79:
1f:c0:d7:ef:64:4b:97:c8:ae:1f:69:63:b3:64:75:
9f:34:88:78:e0:9b:99:6d:0e:74:19:bb:5b:4a:76:
1c:29:af:c9:24:6b:a8:00:dd:fb:90:a6:ca:ce:b3:
3c:db:b5:47:e7:70:4d:3b:3b:23:20:79:7c:78:2b:
ee:c6:75:18:2c:1b:c6:2f:6a:92:88:bc:b2:7c:35:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:1F:AC:F1:F0:F2:87:73:6C:83:3C:4B:0C:76:FF:78:89:D3:1B
X509v3 Authority Key Identifier:
keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8010::/44
Signature Algorithm: sha256WithRSAEncryption
83:80:22:e1:3c:e5:40:9a:6e:bd:64:48:ec:71:16:09:32:78:
f6:87:4b:48:b9:33:38:9b:c5:46:9a:60:22:1d:af:9d:5a:4a:
6c:70:21:cf:f6:b3:47:7b:fe:fb:0f:8f:b1:0a:cb:7b:97:9f:
9b:80:98:40:03:f9:40:76:67:e7:6f:6b:7d:01:c1:1a:4c:1f:
31:2f:97:86:c7:ca:2b:14:41:2d:b7:25:23:5e:61:c6:73:8c:
83:71:16:30:8f:24:86:06:71:5f:37:7d:c5:fa:33:33:85:fe:
53:8b:2a:73:4f:a6:de:9e:7e:1d:06:c6:83:d7:f7:47:9e:ed:
4b:11:32:93:16:5a:64:8d:9a:5c:be:82:a1:95:9d:83:27:cf:
59:6e:13:2c:5a:41:39:1b:91:bd:77:c2:01:39:43:ad:4c:29:
e9:ef:06:83:60:ae:c7:64:61:52:07:14:a0:fc:af:1d:9f:98:
97:46:db:97:b9:1d:6e:9e:56:0d:54:f1:92:9a:6f:bc:87:b6:
05:b0:b3:2b:1d:d0:df:0c:62:d4:7f:1a:27:d9:76:0b:0b:3c:
3e:e3:c5:b9:9d:27:01:4f:6a:6b:cb:98:cd:a9:85:16:96:9c:
97:3b:93:e0:4c:09:26:78:e0:9b:a1:a3:5a:b1:a7:4e:cd:d3:
25:78:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:34 2025 by rpki-client