Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa
File: 326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa (raw, json)
Hash identifier: cgw7WRUmCsn5JNKJCwrsDsu0ryVdTm370RwU3kj3jdE=
Subject key identifier: CC:3F:85:86:C5:EF:B2:33:A9:AA:68:CE:D5:B3:D1:28:F8:1C:E6:CF
Certificate issuer: /CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Certificate serial: 30648CB98D8541D3112967DD4D5C569D076DF0F2
Authority key identifier: 8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa
Signing time: Tue 25 Feb 2025 03:57:01 +0000
ROA not before: Tue 25 Feb 2025 03:52:01 +0000
ROA not after: Tue 24 Feb 2026 03:57:01 +0000
asID: 200775
IP address blocks: 2a0a:6040:c200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:64:8c:b9:8d:85:41:d3:11:29:67:dd:4d:5c:56:9d:07:6d:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Validity
Not Before: Feb 25 03:52:01 2025 GMT
Not After : Feb 24 03:57:01 2026 GMT
Subject: CN=CC3F8586C5EFB233A9AA68CED5B3D128F81CE6CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:7c:c0:ef:9a:ef:e5:8d:01:ff:f9:95:01:
a3:48:e6:0a:4c:14:f2:44:bc:cb:0c:dc:de:e7:eb:
e8:30:12:75:83:f0:87:3a:bb:20:b9:12:cd:69:4d:
35:d9:66:c7:f0:bc:94:3b:50:94:23:59:9f:f3:d4:
d1:bd:8d:3b:48:17:b7:e3:87:4e:10:b4:40:fe:c8:
11:a9:26:b1:64:a4:35:e2:18:69:2d:3a:ff:f5:1c:
5c:0e:ad:75:61:ab:47:30:45:62:30:9b:7f:b6:de:
ed:43:da:69:22:e2:cc:85:a2:2d:52:0a:2c:ce:a9:
a6:f5:5b:c8:5b:21:1c:0d:ad:79:e7:df:6f:54:2b:
53:51:47:b7:82:cc:ee:47:3f:7c:34:0b:9f:b7:c5:
1a:e6:14:63:60:46:3a:99:db:21:79:cd:fc:61:b6:
fd:9f:19:d1:f0:67:99:aa:d6:df:d9:a9:fa:b9:01:
fb:72:66:98:25:c8:a0:32:9e:62:c5:a8:be:61:7e:
15:b3:dc:df:45:c8:ba:5c:b0:aa:6a:78:98:bf:4f:
48:af:98:9d:da:f0:1f:c8:24:a7:f5:b0:4e:20:c5:
63:84:39:83:f5:d8:63:e1:42:21:b8:5d:36:28:51:
46:10:68:c7:c9:e9:9d:9e:18:1a:15:d5:ff:7e:6e:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:85:86:C5:EF:B2:33:A9:AA:68:CE:D5:B3:D1:28:F8:1C:E6:CF
X509v3 Authority Key Identifier:
keyid:8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/326130613a363034303a633230303a3a2f34302d3430203d3e20323030373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:c200::/40
Signature Algorithm: sha256WithRSAEncryption
76:f6:e6:05:44:3d:03:28:ca:be:9a:f1:ba:7c:84:88:6c:f6:
d7:4f:eb:0b:94:fa:e7:e8:d8:00:f5:be:9b:9a:a1:79:20:d4:
aa:76:1c:c7:21:c5:90:e6:c8:56:06:ca:18:2c:24:d0:54:58:
23:b2:5f:d4:55:af:91:4b:7d:ed:52:04:e7:60:a1:93:19:80:
2c:b4:8d:82:41:14:39:86:4e:f4:1b:28:6b:5a:25:f0:75:f9:
e2:db:52:45:88:88:6e:a5:d6:b1:03:8d:00:cd:f7:c7:c7:4e:
81:5a:b6:c0:99:25:8f:48:57:96:82:a3:76:cb:6a:c6:69:4b:
b2:e7:29:c2:8a:20:0a:32:0b:03:e9:4b:12:dd:9a:37:a1:14:
7e:4f:a1:c2:38:5a:ea:91:88:cc:72:93:77:6b:64:6b:6f:09:
07:96:2b:01:2a:b9:01:90:71:47:f2:a4:f7:7b:3b:4b:d7:f4:
72:d1:d1:d8:b6:ab:f8:0d:d7:ff:3f:ec:b2:a8:b6:50:83:1b:
3f:5f:e1:29:68:ed:d4:d2:37:c0:8e:f5:9a:66:94:36:95:11:
d8:24:0e:9d:0c:01:21:6c:81:41:67:85:ba:3b:f1:61:08:6d:
3e:1f:cc:40:76:69:b3:d4:8a:0f:ba:b4:d1:cd:b9:18:85:96:
3b:22:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:06 2025 by rpki-client