Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa
File: 326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa (raw, json)
Hash identifier: sEezMfwKcdRVMWm5rGQOtX90nZdu3XFLfdDxKwzHxSg=
Subject key identifier: 4E:62:9C:71:FE:26:7A:68:56:FF:07:4C:EC:FD:F5:60:DF:43:7D:3B
Certificate issuer: /CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Certificate serial: 5D1A1ACCE0522EDFC93EA99EAFEBEEBA9CE92D67
Authority key identifier: 8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa
Signing time: Tue 25 Feb 2025 03:57:01 +0000
ROA not before: Tue 25 Feb 2025 03:52:01 +0000
ROA not after: Tue 24 Feb 2026 03:57:01 +0000
asID: 50836
IP address blocks: 2a0a:6040:4401::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1a:1a:cc:e0:52:2e:df:c9:3e:a9:9e:af:eb:ee:ba:9c:e9:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Validity
Not Before: Feb 25 03:52:01 2025 GMT
Not After : Feb 24 03:57:01 2026 GMT
Subject: CN=4E629C71FE267A6856FF074CECFDF560DF437D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:c6:3f:46:bd:86:5d:72:38:48:a8:7d:7a:
fd:cf:e0:33:1a:a4:ef:e1:9a:5b:c4:e7:0d:b6:cd:
f1:bb:e2:bf:c1:63:e1:a7:ea:45:e9:98:2e:65:13:
73:90:b5:64:51:f8:d3:0e:f2:b3:c3:43:1f:85:0f:
a1:f6:7d:19:1a:ba:90:3e:e5:52:b9:b2:09:5f:13:
db:ec:56:27:af:69:95:81:97:7a:4b:79:9f:02:87:
04:20:e9:c3:e5:d9:9f:be:b2:86:a3:02:8a:d5:70:
0c:43:94:10:68:e1:9a:b2:90:f1:12:9d:e1:76:d0:
15:d2:4f:2a:7d:f1:48:3c:78:4a:32:65:92:ec:c8:
32:15:04:6f:e4:96:49:3b:34:2b:7f:c0:92:b8:1c:
3f:59:1f:72:6a:54:30:94:6f:d1:4a:dc:65:a5:b7:
5f:a7:0c:cf:d5:80:8e:be:0f:db:15:15:4a:4c:53:
c9:90:01:62:27:cc:4c:bf:fc:dd:71:f7:b2:a2:1f:
63:6e:99:d8:39:79:f9:76:9f:f7:a3:3b:51:5d:9d:
6f:cc:11:88:8f:a0:ba:cd:95:c0:12:d0:94:e7:82:
f2:8d:a6:ea:b8:a2:65:4f:eb:41:59:e9:34:d0:3c:
91:de:42:f6:53:6d:a9:bd:57:ca:36:c6:99:d5:95:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:62:9C:71:FE:26:7A:68:56:FF:07:4C:EC:FD:F5:60:DF:43:7D:3B
X509v3 Authority Key Identifier:
keyid:8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a343430313a3a2f34382d3438203d3e203530383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4401::/48
Signature Algorithm: sha256WithRSAEncryption
29:ab:df:1d:0f:55:6c:9d:f0:17:ba:1a:a3:f3:a2:0c:58:43:
a6:6c:71:8d:e4:37:a1:57:b8:64:68:57:ba:77:bf:dd:49:0b:
6d:6b:3f:04:42:30:39:28:89:c3:89:55:5b:ff:c7:5a:cc:7e:
d7:73:59:3a:b1:65:76:27:59:89:80:93:07:5b:2f:1d:d8:7d:
b7:61:37:bb:6b:ee:77:b5:b0:d5:83:ba:48:11:3d:28:8d:58:
09:ec:d1:ab:53:04:d6:13:4e:0f:36:85:d4:6f:23:23:4f:07:
6c:8e:d5:cc:23:dd:1d:00:da:64:59:d8:18:c1:7b:80:82:58:
c9:8b:3d:9e:b9:ea:ae:55:83:77:2e:a6:7a:e0:1e:7e:1b:17:
9a:b6:fb:72:75:d8:1f:76:9c:f1:01:d1:a7:3e:8f:7d:72:f0:
ca:ba:96:71:15:45:d7:9d:28:bd:0c:f7:23:dd:df:0e:95:a2:
a6:19:e7:c8:4e:e5:e5:4d:e8:f4:52:67:39:2d:e1:78:8b:72:
6a:6f:8e:b8:11:31:52:69:f4:6d:7b:ab:2c:18:e9:6b:25:dc:
9c:7d:d9:77:c8:d8:4c:90:38:3a:aa:77:a4:4f:3f:8b:ae:64:
f3:12:c5:15:f0:24:43:4a:eb:9c:d1:72:d8:79:99:c6:e9:9c:
be:d5:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:25:17 2025 by rpki-client