Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203236353438.roa
File: 3231362e3134362e32372e302f32342d3234203d3e203236353438.roa (raw, json)
Hash identifier: Nd5Fbcmla6klJii/8qOmrgqXuhVqMXlYFS02CPSNkPg=
Subject key identifier: 46:EA:A0:EC:30:6B:37:89:41:E3:B5:67:60:5F:27:3F:62:6E:3D:0C
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 5B34A04B2458D20D7B2F8E3527B5EC759E8E491C
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203236353438.roa
Signing time: Wed 27 Aug 2025 00:08:50 +0000
ROA not before: Wed 27 Aug 2025 00:03:50 +0000
ROA not after: Wed 26 Aug 2026 00:08:50 +0000
asID: 26548
IP address blocks: 216.146.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:34:a0:4b:24:58:d2:0d:7b:2f:8e:35:27:b5:ec:75:9e:8e:49:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Aug 27 00:03:50 2025 GMT
Not After : Aug 26 00:08:50 2026 GMT
Subject: CN=46EAA0EC306B378941E3B567605F273F626E3D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:b9:c9:16:c3:f7:2a:08:4d:c2:30:07:e3:
d5:45:8e:3c:ee:e3:7e:5e:f8:75:5a:ca:be:1e:ec:
1a:43:35:e3:cd:de:e8:25:bd:2a:da:25:c6:e6:75:
be:c9:06:c3:50:24:ea:21:af:4f:3f:06:9c:c8:24:
0b:a4:6d:85:83:59:f8:cf:95:e0:af:fd:4f:6e:71:
57:fe:9c:f9:1c:1f:af:64:6a:50:67:4f:98:78:2f:
a4:31:bd:b8:7f:5b:13:b5:3a:f0:4d:4c:9b:80:be:
e2:58:74:13:d0:f4:b7:4b:9c:fb:f4:96:a1:09:34:
63:39:57:47:fa:a0:3a:06:78:c1:bf:53:4b:f6:2b:
4e:5c:19:98:20:c5:a0:7e:ab:19:32:c3:46:00:c6:
28:43:b2:bd:7b:6e:9e:c9:df:d5:f8:ed:db:9e:f2:
ff:6f:0d:76:23:4c:3a:90:67:ae:e5:fd:f7:00:ed:
65:02:24:f7:43:d3:a9:69:42:f5:86:53:48:ac:dc:
d7:3f:9e:67:96:f4:35:60:f1:b1:b4:35:ec:34:55:
59:70:fe:cc:19:02:0e:37:25:06:7d:b8:57:e6:4a:
95:13:fe:5e:0d:2c:5a:c6:33:3f:ed:a6:b4:56:1e:
f5:ad:ba:45:cb:e9:15:c5:09:f8:0f:40:52:35:86:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EA:A0:EC:30:6B:37:89:41:E3:B5:67:60:5F:27:3F:62:6E:3D:0C
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203236353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.27.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:27:55:ff:77:f0:8a:11:12:96:e3:90:6f:0d:44:1c:a9:c4:
d2:b2:25:85:d9:2c:57:31:f4:f4:55:55:05:78:2a:74:fe:17:
64:f5:94:a1:1d:19:24:12:2b:98:66:2f:a0:63:5b:f7:d6:73:
83:c8:b5:28:41:aa:b4:d3:fb:22:1b:c0:e3:9e:f7:06:aa:59:
c7:64:e9:57:b7:8a:ed:b7:71:11:b4:58:09:35:75:b6:97:06:
96:61:df:d4:fc:76:f1:66:91:52:a6:95:6a:c1:4a:f7:54:aa:
11:b0:34:f0:55:79:8f:e6:46:88:1f:07:3a:1b:7c:3d:e3:1b:
70:99:17:77:11:6e:58:c6:40:38:56:39:7c:e6:5f:e0:54:cd:
35:37:52:f6:88:3b:17:f2:fe:19:e4:44:f0:f6:31:fe:40:da:
97:f1:c6:4b:40:9e:51:03:c6:ac:06:c7:8a:38:a9:ea:c9:a2:
04:64:98:cb:b4:a2:bc:13:4c:5b:21:ef:20:0b:e7:43:28:62:
cb:59:15:22:07:de:ae:69:e7:5a:77:8b:fd:c4:0f:69:bd:7f:
f8:a4:3c:2a:23:10:b5:45:1a:06:23:f5:c1:b7:eb:c8:78:63:
63:51:09:67:67:bf:81:59:24:2a:d1:5c:90:44:2f:fb:9a:91:
81:8c:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:14:23 2025 by rpki-client