Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
File: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier: thFnk4C7YNNOw9pEgVCvgM9yMtDAoLqkJFRnhL3gOog=
Subject key identifier: 7E:A1:83:5E:EF:95:4E:5B:C6:13:D6:40:4C:FB:53:55:2B:20:E9:24
Certificate issuer: /CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Certificate serial: 438E2C180F0350FED1FB0D82858DB38D63D5E63B
Authority key identifier: 8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
Signing time: Tue 25 Feb 2025 03:57:01 +0000
ROA not before: Tue 25 Feb 2025 03:52:01 +0000
ROA not after: Tue 24 Feb 2026 03:57:01 +0000
asID: 152368
IP address blocks: 2a0a:6040:4400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8e:2c:18:0f:03:50:fe:d1:fb:0d:82:85:8d:b3:8d:63:d5:e6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Validity
Not Before: Feb 25 03:52:01 2025 GMT
Not After : Feb 24 03:57:01 2026 GMT
Subject: CN=7EA1835EEF954E5BC613D6404CFB53552B20E924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:5a:9f:da:c0:c2:7b:6a:06:5f:eb:05:2a:
6d:33:19:cf:8a:27:a4:e1:9f:50:41:3b:b1:ff:aa:
15:e8:6a:b4:ed:33:7c:71:8f:5b:c4:14:bd:34:34:
95:b4:5b:44:c8:68:72:ec:44:6e:65:82:0e:38:9a:
64:49:a9:0a:9a:eb:69:db:4a:24:5f:aa:97:fd:b7:
74:0e:3f:25:b1:62:15:42:c7:68:1c:cc:69:9e:95:
74:2f:0c:c5:79:6f:e1:68:85:a3:79:e3:9a:ce:04:
c5:ea:b4:32:10:8a:7c:fe:04:eb:54:bc:89:88:23:
fb:70:70:8f:4c:10:0e:5b:31:7f:80:dc:26:91:f0:
e5:80:fd:6d:cf:8d:7b:0a:5d:aa:f8:c5:bf:c6:9e:
ff:30:77:84:77:cc:ee:96:ce:e1:e2:ff:ea:98:3d:
47:53:8b:ed:96:1a:83:3c:62:39:d4:b5:11:d9:fb:
1e:75:8f:8c:68:15:c5:3e:25:7f:e8:dd:15:8e:ba:
58:33:ab:e1:e9:54:fa:55:2f:2b:c9:5c:9e:43:99:
bb:f1:d9:fd:44:5f:fb:46:fd:02:26:66:ac:a9:7f:
c1:09:ab:a8:e7:3b:bd:94:76:42:85:c4:b4:4a:3d:
c6:5b:e7:50:1e:9d:0c:9f:9a:86:48:7c:1b:cc:2a:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:83:5E:EF:95:4E:5B:C6:13:D6:40:4C:FB:53:55:2B:20:E9:24
X509v3 Authority Key Identifier:
keyid:8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4400::/48
Signature Algorithm: sha256WithRSAEncryption
95:c7:ec:27:a6:8f:6d:c7:22:e4:8d:24:46:09:b2:f9:7f:30:
05:3a:d0:1a:98:90:55:bf:9d:c8:37:9b:18:17:5a:6f:ac:7c:
83:6a:02:7b:ed:e6:8f:b5:d0:b8:6e:e1:e9:be:95:89:49:f6:
11:de:c5:bf:72:13:91:72:17:4c:11:80:6c:21:9a:cd:f5:21:
3c:8e:16:1e:8a:fb:be:a0:96:3d:56:2c:82:bf:a3:e0:51:3e:
8f:54:1c:54:5a:3f:b1:9a:71:16:51:1f:56:b7:07:32:81:f9:
13:0e:5f:aa:55:f1:6a:57:48:6f:40:ff:a9:e0:3e:e5:2e:d9:
1b:e3:49:31:d3:0d:65:b3:5e:5c:1b:07:51:30:8d:91:91:82:
04:5d:96:42:24:4e:b3:0a:34:9d:11:a3:64:aa:89:68:04:72:
bf:22:6e:de:61:97:d4:7c:f7:bf:e9:44:31:58:33:90:bc:c3:
fd:99:23:19:0f:9a:4e:b3:9e:2b:80:30:d4:30:8d:0a:9b:32:
5a:d8:1f:72:da:29:2f:15:58:1d:76:1b:ae:5a:4c:fd:d0:b9:
49:bf:7f:41:4f:52:d1:57:13:9c:5d:56:a8:f8:54:be:c5:1a:
00:fe:8a:eb:49:cd:cc:ac:a6:57:30:c5:0d:68:2c:c4:43:58:
e4:f4:5b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:21:05 2025 by rpki-client