Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
File: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier: fviFJzVhAALb4hAFsCFCsIuGia7xdp2Gc2QoAJyCu1Q=
Subject key identifier: 3B:EC:F1:91:15:D1:AB:5F:55:3B:84:4E:4C:A9:53:C6:58:C3:05:70
Certificate issuer: /CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Certificate serial: 1D2EF69E2A74FE7CEAD2D0AE74D468C6AA7776A7
Authority key identifier: 8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
Signing time: Tue 25 Feb 2025 03:57:02 +0000
ROA not before: Tue 25 Feb 2025 03:52:02 +0000
ROA not after: Tue 24 Feb 2026 03:57:02 +0000
asID: 50104
IP address blocks: 2a0a:6040:4400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2e:f6:9e:2a:74:fe:7c:ea:d2:d0:ae:74:d4:68:c6:aa:77:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Validity
Not Before: Feb 25 03:52:02 2025 GMT
Not After : Feb 24 03:57:02 2026 GMT
Subject: CN=3BECF19115D1AB5F553B844E4CA953C658C30570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:da:4a:bb:f9:04:a5:6b:34:e9:2a:ee:92:
22:c7:85:ad:f4:de:83:f1:25:4c:89:c5:7f:55:2b:
fb:93:f0:8d:fe:dd:da:fb:d6:5d:b7:cf:17:d4:82:
a4:0f:10:eb:50:aa:74:24:1a:da:8d:dd:cb:5b:88:
8d:f2:bd:99:e7:4e:c1:60:b4:50:69:1e:c9:d8:d5:
f9:6d:61:ad:7e:6c:31:a1:86:1f:0b:e8:46:c1:49:
c5:22:46:e2:76:c9:b8:f8:bc:88:7a:3c:ad:29:bc:
60:87:36:0e:96:f1:cf:ef:18:65:17:b4:2a:61:c0:
c3:ce:76:42:5c:f0:62:af:0d:b0:96:2e:e4:6a:40:
b0:7b:0b:09:a6:ed:3e:97:c8:f4:56:2c:75:49:b4:
d5:5d:2a:36:e3:eb:47:00:6b:61:78:a1:69:a2:02:
bb:e1:6f:9e:34:d9:a8:7a:f4:37:6f:59:eb:4c:68:
b8:e1:75:c7:d4:57:11:e1:3e:d8:fe:ea:92:ae:02:
3f:ae:43:e7:ff:41:d5:4f:fb:b9:63:cc:b9:fa:fe:
7a:c5:e2:75:f7:23:39:b6:e7:5d:64:78:1f:92:50:
31:3a:9a:99:07:ca:fe:85:14:67:f9:43:3c:6d:15:
1e:bd:9d:be:d4:eb:ef:0b:b4:51:c2:be:5e:d6:ad:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:F1:91:15:D1:AB:5F:55:3B:84:4E:4C:A9:53:C6:58:C3:05:70
X509v3 Authority Key Identifier:
keyid:8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4400::/48
Signature Algorithm: sha256WithRSAEncryption
4d:f2:84:67:b6:62:b7:5f:51:f0:dc:a2:f7:cb:ba:eb:34:2a:
8e:4b:e2:f7:85:7c:d3:31:a1:28:fe:ec:71:1b:92:d9:28:f0:
17:c5:a1:cf:8b:96:ca:98:a3:cf:9c:dd:df:12:91:5c:03:54:
3f:24:e1:69:e4:43:e3:9f:a9:49:ab:47:aa:97:8f:a2:37:ba:
b3:ed:f5:ec:d8:7a:47:2c:b7:87:b5:be:f3:db:da:65:2a:a5:
0d:12:0c:da:43:cd:00:65:8b:97:26:7e:78:d5:3f:85:b4:8a:
fb:d2:7c:d8:ea:ee:12:43:62:e1:a4:29:bf:64:8c:56:c2:87:
ff:ad:bd:e6:1d:56:c1:5a:e4:b2:a4:74:f2:79:68:b5:15:4e:
2d:fa:66:f1:f0:11:5d:c8:03:6f:8e:7b:78:ee:fb:dd:6a:2f:
f4:94:0f:ba:89:2f:6a:24:fe:a8:54:5b:21:71:89:a3:d3:50:
c0:a7:04:bd:63:9b:ac:cc:77:0f:38:b1:06:9b:ba:ae:37:d8:
12:8b:c3:36:1e:6f:13:1a:eb:b1:fe:a8:4d:7c:f5:6e:d0:91:
07:dd:5b:2e:c5:a7:08:ec:3d:06:d9:2e:06:04:0d:aa:37:21:
be:64:11:0e:af:8b:7b:08:74:81:61:80:ad:e8:fe:43:78:60:
7a:d5:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:07:38 2025 by rpki-client