Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa
File: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (raw, json)
Hash identifier: Sug13/bOHzR/z7k2MN1/PwM1kjEU9a8FYYmcJgI2acw=
Subject key identifier: EF:2A:BE:7C:1F:25:51:A9:C9:66:AE:D2:B0:34:80:10:1F:BD:92:96
Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Certificate serial: 3C7049950DB35B87687AFD4C667CAEADBCA011F7
Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa
Signing time: Fri 04 Jul 2025 19:50:13 +0000
ROA not before: Fri 04 Jul 2025 19:45:13 +0000
ROA not after: Fri 03 Jul 2026 19:50:13 +0000
asID: 47496
IP address blocks: 2a05:dfc1:c410::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:70:49:95:0d:b3:5b:87:68:7a:fd:4c:66:7c:ae:ad:bc:a0:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Validity
Not Before: Jul 4 19:45:13 2025 GMT
Not After : Jul 3 19:50:13 2026 GMT
Subject: CN=EF2ABE7C1F2551A9C966AED2B03480101FBD9296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:dd:3c:df:64:f3:43:fd:70:bb:15:82:a1:
a6:f6:4e:79:c0:00:d9:5b:d5:34:f0:a2:25:e0:5b:
d5:fd:12:48:16:d3:87:ec:97:ef:57:f4:08:91:6a:
02:d9:0c:89:b9:c8:8f:c4:5f:fe:34:6d:52:0b:11:
1b:26:12:23:74:35:7b:0a:52:88:fd:15:84:bb:39:
b5:bc:52:c8:2c:b3:63:46:50:f7:06:a3:da:fe:f0:
87:06:14:d6:38:39:21:1a:48:f5:0a:c1:92:bb:0f:
f9:77:7d:a2:be:80:72:17:0b:10:78:f1:29:f5:c0:
8f:58:0c:71:6c:59:7f:19:7f:85:e9:07:79:fb:31:
68:72:71:15:9a:d4:4c:5c:82:62:98:8d:d2:74:54:
8a:62:86:2c:83:e1:ae:cb:ca:7a:c3:eb:f2:4c:ec:
91:63:48:a3:58:87:33:a3:18:a2:08:3f:a4:c4:0d:
a4:44:05:ab:cf:51:2e:04:6b:ed:7d:84:e4:df:a3:
c3:e2:00:db:c3:fb:fe:7a:68:86:af:a6:d4:a6:e1:
c5:57:cf:f6:a9:c0:53:d4:d1:fa:e5:6e:0c:28:3f:
e1:1f:b3:0f:84:56:59:74:95:4b:2a:ab:c0:35:b7:
fe:60:de:9d:12:7e:6a:81:2f:46:49:b3:ad:0e:fb:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2A:BE:7C:1F:25:51:A9:C9:66:AE:D2:B0:34:80:10:1F:BD:92:96
X509v3 Authority Key Identifier:
keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c410::/44
Signature Algorithm: sha256WithRSAEncryption
38:92:ab:62:c3:33:e0:c6:2e:26:17:69:a5:73:f1:6a:9f:b9:
cb:a0:e5:88:7d:b0:b3:5d:5a:c4:4e:4c:3b:d3:6a:a9:6a:13:
11:bb:6e:3e:c3:3b:d6:53:65:8f:2c:aa:f1:11:df:32:31:97:
10:2a:2e:dd:fe:2a:2b:22:21:07:ae:75:92:2a:5b:90:3b:a3:
0a:18:ae:f8:41:65:3f:bf:fb:0d:17:84:d2:b8:27:bc:cb:7e:
61:bf:01:39:77:ca:d1:5a:0c:f2:30:34:e3:4d:3b:08:df:88:
96:22:8a:4b:e8:4c:7f:d1:d8:9c:44:9b:1d:7e:5a:2e:98:44:
d9:7e:5a:e3:9e:2b:86:2c:7b:26:e2:46:a2:9e:9a:ad:d0:e4:
f3:bc:47:4f:e5:a0:af:20:6c:aa:29:2a:ca:0f:d8:8f:f0:36:
cb:d8:7a:8b:9e:3c:65:af:db:ae:27:4a:07:94:06:9b:bc:9d:
3c:4f:c7:0b:88:9d:08:b4:4c:02:3e:19:35:cb:d1:82:7d:1c:
53:ed:49:d9:ae:de:ce:3f:59:20:8c:af:47:bd:64:37:3d:e8:
6b:e6:70:cb:04:f3:62:9b:bf:c2:49:3b:61:f6:d4:27:cc:3c:
31:40:cd:99:c4:4f:ed:c5:6d:a9:c6:e9:28:38:ff:a8:27:5a:
de:72:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:31:46 2025 by rpki-client