Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa
File: 3231362e3134362e32352e302f32342d3234203d3e203633303138.roa (raw, json)
Hash identifier: v8DLLmgn69Zptk/6kPg7RYJUGDVkn4CpJIJemYpAH3Q=
Subject key identifier: 2E:A5:73:2B:54:60:58:8A:ED:86:C2:BF:2E:3F:94:DA:E9:F7:0F:D4
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 2FE2C24B917E32E157F7555B7C3EE3C09F14AF24
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa
Signing time: Wed 24 Sep 2025 23:08:55 +0000
ROA not before: Wed 24 Sep 2025 23:03:55 +0000
ROA not after: Wed 23 Sep 2026 23:08:55 +0000
asID: 63018
IP address blocks: 216.146.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e2:c2:4b:91:7e:32:e1:57:f7:55:5b:7c:3e:e3:c0:9f:14:af:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Sep 24 23:03:55 2025 GMT
Not After : Sep 23 23:08:55 2026 GMT
Subject: CN=2EA5732B5460588AED86C2BF2E3F94DAE9F70FD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:2d:4d:8a:db:8e:ba:d6:73:de:78:f4:3e:
ec:1a:4b:2b:9a:b4:f1:b0:e3:fd:af:fd:b5:0a:21:
db:8b:f4:69:59:97:2b:f1:ab:2a:ac:34:b4:a7:2a:
23:86:3a:12:d1:fd:74:ee:78:fc:4a:68:b0:26:3f:
27:78:97:1a:35:d6:6a:96:6e:0e:f2:3e:38:67:ce:
bf:a4:80:37:82:e6:44:41:b0:ae:3d:0d:30:34:cf:
02:60:e9:a7:b5:c8:27:c6:e4:84:5a:76:43:cc:ca:
cb:65:b5:1e:f6:17:d6:6a:6d:c4:ee:d4:fe:24:7d:
b1:49:b8:fd:0d:79:32:7c:34:12:55:88:8f:58:4c:
f2:76:98:91:6c:7a:67:07:ae:5a:5c:2e:78:e6:f7:
40:b4:3d:03:b7:74:24:a2:5b:17:6e:32:87:c5:c2:
5f:3e:41:a1:5c:97:d4:87:44:29:94:28:78:20:eb:
0e:a0:4f:24:71:9e:c3:06:4c:0d:7f:48:ff:14:f6:
09:dc:66:d0:e1:d0:7c:5d:eb:41:37:9f:33:ab:df:
bb:15:8b:12:c4:a7:9c:36:33:7a:2e:c3:e4:22:bc:
ef:a5:56:0b:d6:80:3f:f9:14:e1:22:7b:e2:cb:6e:
1a:9a:c1:34:9b:a9:31:b3:95:1f:dc:2c:b0:44:d1:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:73:2B:54:60:58:8A:ED:86:C2:BF:2E:3F:94:DA:E9:F7:0F:D4
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.25.0/24
Signature Algorithm: sha256WithRSAEncryption
76:86:cf:bd:d3:f4:30:4e:e5:85:d9:bb:fe:da:b0:66:99:14:
7e:7d:07:74:e9:ec:85:34:e8:90:99:68:9c:fb:12:98:0e:2c:
7c:71:74:33:0f:3f:99:12:05:ee:73:99:68:d5:78:91:01:2a:
ca:08:23:e3:94:ab:f8:f4:9d:3b:97:43:ae:55:37:88:3a:b5:
a8:41:e8:10:31:07:0b:99:0a:5a:f9:2b:ec:a5:74:2d:5a:80:
3f:0f:c1:93:14:40:b6:d1:f7:fb:51:0e:41:a4:97:5b:17:a1:
32:60:87:2d:26:f6:1c:e1:38:81:0c:08:0f:87:e9:4f:8c:01:
54:c6:dd:d6:dc:95:90:cf:82:ed:30:e5:62:2f:c3:d9:bd:a2:
0d:ab:21:65:a9:2b:b7:ad:4f:cf:cf:2e:f6:dc:7e:77:8f:50:
8e:b7:14:a8:c7:88:26:e5:cb:1f:78:ad:d9:6b:02:e4:59:06:
04:33:70:0d:de:2a:0c:ac:c5:2c:01:d4:ce:56:b5:07:a6:7e:
5f:71:fc:a5:1b:03:5f:b4:49:42:72:c1:11:cf:d5:5c:39:f5:
95:a1:41:1b:bd:eb:15:3d:a2:0b:67:ab:26:f3:fe:bb:35:d2:
72:9a:9e:1e:74:4a:1f:04:c6:e0:17:07:c0:03:21:e9:ea:66:
66:dc:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:34 2025 by rpki-client