Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: X9QPgd1Wsk3PXdq6j2W8oESVVTwYX7/iM34VCrJd78E=
Subject key identifier: 5A:76:03:DA:B7:AF:42:52:63:F9:4E:8A:17:D8:46:0C:3B:41:57:83
Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial: 2D430FF476783DCC8B50165711BA5E4B91C68496
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
Signing time: Thu 18 Apr 2024 23:17:37 +0000
ROA not before: Thu 18 Apr 2024 23:12:37 +0000
ROA not after: Thu 17 Apr 2025 23:17:37 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba55::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:43:0f:f4:76:78:3d:cc:8b:50:16:57:11:ba:5e:4b:91:c6:84:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
Validity
Not Before: Apr 18 23:12:37 2024 GMT
Not After : Apr 17 23:17:37 2025 GMT
Subject: CN=5A7603DAB7AF425263F94E8A17D8460C3B415783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:92:19:be:9e:b4:19:d7:b0:ed:c8:b4:ab:
b8:4a:ee:37:b0:40:f2:80:f6:80:a8:a0:71:8c:24:
a9:ee:23:f2:80:f9:6d:62:6e:09:f9:17:f9:02:d9:
34:c3:cc:f6:a4:77:73:cd:f5:0f:5c:68:2d:93:28:
83:78:e6:40:50:10:25:74:a3:19:01:a9:ee:24:d1:
7c:4a:47:fe:73:27:29:94:c3:9e:4e:15:f3:c4:bb:
96:34:56:39:6a:61:2c:92:ea:81:5e:20:94:7c:06:
1d:eb:eb:79:9d:07:fa:99:50:40:5c:a3:f1:5c:68:
ae:5b:e2:3f:1f:c5:15:30:2b:26:7c:b9:9d:0e:f5:
58:11:46:33:3e:ed:47:47:ff:e5:ca:c9:a7:34:17:
cc:a8:02:50:b4:fd:33:13:d3:77:c9:77:ee:6e:72:
a7:ca:4d:6d:1f:f5:ba:75:f5:3a:4c:b4:4d:2e:8b:
95:03:88:60:d9:62:c3:46:6c:59:69:aa:a7:2c:61:
0c:52:7c:5d:3b:42:6e:46:c0:dc:18:d9:0a:45:17:
ae:60:cd:41:ba:d4:00:14:25:70:00:9d:fc:a4:41:
16:21:b3:d1:49:bb:0d:42:df:b7:dd:7b:b3:0e:e6:
e1:d7:74:64:4a:54:31:f7:17:ec:da:e3:fe:ec:7e:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:03:DA:B7:AF:42:52:63:F9:4E:8A:17:D8:46:0C:3B:41:57:83
X509v3 Authority Key Identifier:
keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba55::/48
Signature Algorithm: sha256WithRSAEncryption
88:0a:0c:57:2b:90:6b:55:c0:4c:9b:3e:01:84:b5:a6:7b:68:
b5:ce:1e:32:80:d0:7e:16:1b:5e:4b:d6:a3:d2:e2:6d:a3:7d:
aa:14:4e:f6:73:10:d9:0a:48:5b:2a:b1:a3:08:58:eb:d6:bf:
58:e4:28:c5:c4:20:72:fd:1b:9e:be:c0:c6:f6:f6:c5:d3:49:
fd:87:a4:ce:6a:08:63:ff:ac:da:e0:a1:01:d7:20:a3:bc:46:
d5:23:fc:cc:57:6b:1a:79:ec:ef:90:6b:d6:7a:c5:2a:ae:1d:
99:15:5d:0e:bc:4b:9c:0e:68:64:42:52:f9:b4:40:52:17:ac:
47:2c:eb:e1:3a:6b:97:be:92:26:3f:19:34:bf:20:42:bb:0e:
e2:3c:7a:62:79:6d:9d:54:85:b3:b5:a3:6c:ad:6c:73:c5:4b:
ba:0f:af:c1:cf:35:5d:10:a4:73:4b:42:1a:33:f9:45:0e:90:
b7:2b:03:a9:cf:54:92:ee:ba:94:e3:43:13:19:6c:be:db:23:
b5:1c:85:ca:a2:84:e4:20:dd:95:41:0f:59:d6:7d:4b:37:69:
a1:ad:96:bc:a6:cc:99:8d:c1:2a:36:18:2d:cb:27:ff:b8:78:
05:ff:ce:9f:1e:91:36:80:b5:5d:72:56:77:8b:85:2e:d8:0e:
9d:3f:7f:0b
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIULUMP9HZ4PcyLUBZXEbpeS5HGhJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0
MTQ2MUU3RjAeFw0yNDA0MTgyMzEyMzdaFw0yNTA0MTcyMzE3MzdaMDMxMTAvBgNV
BAMTKDVBNzYwM0RBQjdBRjQyNTI2M0Y5NEU4QTE3RDg0NjBDM0I0MTU3ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSJIZvp60Gdew7ci0q7hK7jew
QPKA9oCooHGMJKnuI/KA+W1ibgn5F/kC2TTDzPakd3PN9Q9caC2TKIN45kBQECV0
oxkBqe4k0XxKR/5zJymUw55OFfPEu5Y0VjlqYSyS6oFeIJR8Bh3r63mdB/qZUEBc
o/FcaK5b4j8fxRUwKyZ8uZ0O9VgRRjM+7UdH/+XKyac0F8yoAlC0/TMT03fJd+5u
cqfKTW0f9bp19TpMtE0ui5UDiGDZYsNGbFlpqqcsYQxSfF07Qm5GwNwY2QpFF65g
zUG61AAUJXAAnfykQRYhs9FJuw1C37fde7MO5uHXdGRKVDH3F+za4/7sfgJNAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUWnYD2revQlJj+U6KF9hGDDtBV4MwHwYDVR0j
BBgwFoAUdWVgxblgIizoGvR6i3WOF0FGHn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzEvNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0MTQ2MUU3Ri5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzc1NjU2MEM1Qjk2MDIy
MkNFODFBRjQ3QThCNzU4RTE3NDE0NjFFN0YuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl
OC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTM1MzUzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAulUwDQYJKoZIhvcN
AQELBQADggEBAIgKDFcrkGtVwEybPgGEtaZ7aLXOHjKA0H4WG15L1qPS4m2jfaoU
TvZzENkKSFsqsaMIWOvWv1jkKMXEIHL9G56+wMb29sXTSf2HpM5qCGP/rNrgoQHX
IKO8RtUj/MxXaxp57O+Qa9Z6xSquHZkVXQ68S5wOaGRCUvm0QFIXrEcs6+E6a5e+
kiY/GTS/IEK7DuI8emJ5bZ1UhbO1o2ytbHPFS7oPr8HPNV0QpHNLQhoz+UUOkLcr
A6nPVJLuupTjQxMZbL7bI7UchcqihOQg3ZVBD1nWfUs3aaGtlrymzJmNwSo2GC3L
J/+4eAX/zp8ekTaAtV1yVneLhS7YDp0/fws=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:27 2025 by rpki-client