Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa
File: 326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa (raw, json)
Hash identifier: gfGOB6bAUQBFCOaJpa/o2KxY7wQQAWZnj3BQozfUWkk=
Subject key identifier: 4F:2F:EF:6F:19:AB:5F:C6:57:66:0F:30:E3:33:2B:01:C3:6B:60:2D
Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial: 7DF4A958D60AE539831A4F10D5D60EA0952AD9A0
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa
Signing time: Sun 11 Jun 2023 02:33:06 +0000
ROA not before: Sun 11 Jun 2023 02:28:06 +0000
ROA not after: Sun 09 Jun 2024 02:33:06 +0000
asID: 212276
IP address blocks: 2a05:dfc1:8100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f4:a9:58:d6:0a:e5:39:83:1a:4f:10:d5:d6:0e:a0:95:2a:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Validity
Not Before: Jun 11 02:28:06 2023 GMT
Not After : Jun 9 02:33:06 2024 GMT
Subject: CN=4F2FEF6F19AB5FC657660F30E3332B01C36B602D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:1d:6b:cc:83:eb:c5:e9:4e:9e:47:36:53:
e2:9d:0f:fa:39:74:5c:8e:5a:82:3f:b1:9c:67:4f:
73:d8:90:f8:4a:d8:8c:01:0f:94:09:48:fa:b9:b0:
a9:b5:62:4b:e5:b6:72:fe:d6:6b:38:c1:81:8c:af:
e4:c3:c2:9a:85:1e:a7:71:d5:30:ad:39:21:03:68:
ed:43:cb:b1:68:8d:81:93:e9:52:72:23:df:8d:23:
8d:a4:9d:ba:40:c0:8d:15:03:0a:95:5b:bf:ff:35:
cb:b9:1e:92:9c:53:b7:df:f3:db:36:ef:f5:94:c1:
bf:f6:ba:5d:36:cb:c3:c1:9f:f2:d1:b8:da:8d:c3:
3e:2a:15:f5:f9:3c:db:fc:f8:df:9e:ea:d5:31:cd:
03:c1:c8:4a:e2:8a:ad:f9:e0:f8:18:55:d3:70:35:
52:ea:fd:14:dc:46:7f:fc:26:9b:18:50:d2:74:4b:
79:4e:58:64:3e:75:73:23:23:b6:ac:90:8c:1f:0c:
38:c0:24:27:95:3a:2a:6f:c8:e1:22:b2:2a:d4:ef:
fb:d3:f4:d6:5f:df:45:1e:46:6f:f5:55:2e:72:71:
d5:db:ae:12:d4:3f:52:78:e6:21:48:a7:3b:f7:a0:
97:3a:79:dc:da:ac:17:a9:e3:b1:8e:fc:54:b4:b8:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:EF:6F:19:AB:5F:C6:57:66:0F:30:E3:33:2B:01:C3:6B:60:2D
X509v3 Authority Key Identifier:
keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8100::/44
Signature Algorithm: sha256WithRSAEncryption
11:c6:3c:e8:a0:60:94:f1:57:fa:ef:98:23:da:39:38:f1:ed:
32:0b:16:3a:97:a0:5b:35:e6:23:92:f0:cd:2f:83:7f:a4:da:
b3:f5:fd:aa:95:08:79:fc:f8:d9:cd:6b:33:04:86:7b:fb:6e:
a0:7b:b4:b3:9c:14:61:f3:a4:8d:9f:77:21:5a:15:cb:40:a1:
74:f8:9f:36:a6:48:0d:c6:71:5f:97:a8:ee:fa:58:62:fd:7b:
88:2d:23:62:1a:8d:84:48:f5:cc:3e:fa:e9:0a:56:8f:c0:56:
87:40:ad:b4:50:9f:7a:16:9d:73:99:25:40:40:46:64:70:87:
11:7c:ea:54:06:01:c6:2d:41:28:f9:1f:91:6b:06:9c:63:4e:
35:cf:0b:0a:70:db:0f:01:0f:f2:18:d5:53:9a:2c:b0:c6:50:
d0:e5:6d:1d:ca:68:b3:a7:49:8b:c0:1d:4b:9c:00:1b:da:b7:
81:65:a7:a1:18:6d:84:8d:19:e2:dd:e4:9c:84:fb:10:ab:7f:
6c:da:12:f6:f0:88:62:d3:c5:db:70:30:91:83:0c:23:d4:e5:
2a:fe:7f:3f:9e:00:e0:db:9c:c0:6d:a8:07:6c:aa:2b:2e:b3:
ee:87:c3:91:a7:50:d0:b4:6c:e6:d4:ba:2e:23:66:bb:f9:f8:
38:86:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:37 2025 by rpki-client