Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e203630343338.roa
File: 32332e3133342e38382e302f32342d3234203d3e203630343338.roa (raw, json)
Hash identifier: IV6ekwgfqJfQfI9Bcv3IPkT5Bri3xsYK4ydfgvO88ec=
Subject key identifier: 1C:C4:BA:B1:13:1F:25:12:3B:A8:02:01:01:2D:AA:0A:5B:C5:D7:0F
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 48854FAE92EE9EBDFB267F620315BB726A2483CE
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e203630343338.roa
Signing time: Wed 24 Sep 2025 23:08:55 +0000
ROA not before: Wed 24 Sep 2025 23:03:55 +0000
ROA not after: Wed 23 Sep 2026 23:08:55 +0000
asID: 60438
IP address blocks: 23.134.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:85:4f:ae:92:ee:9e:bd:fb:26:7f:62:03:15:bb:72:6a:24:83:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Sep 24 23:03:55 2025 GMT
Not After : Sep 23 23:08:55 2026 GMT
Subject: CN=1CC4BAB1131F25123BA80201012DAA0A5BC5D70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:58:be:8a:bf:80:7e:2b:c4:2d:a0:09:aa:
02:73:13:1a:d6:4f:2f:3c:7f:f1:a6:ef:e9:0a:d8:
53:df:58:5e:ea:45:df:02:f6:99:f6:c9:c9:77:6c:
7d:2f:79:12:89:37:08:02:c4:14:7c:ed:f6:23:97:
3a:cc:48:10:2f:14:69:b2:04:12:79:34:31:4d:3b:
35:33:74:0f:28:33:86:66:58:87:c5:f9:69:e7:d0:
88:a4:0a:85:aa:31:8e:d7:f7:eb:7f:64:31:62:25:
04:4d:06:c7:2f:73:bc:e6:c6:da:7e:43:0c:1d:88:
fb:67:6c:52:97:f6:ae:5b:c8:22:a5:fb:0f:36:54:
ca:03:8b:eb:13:6d:77:17:cc:c3:94:b2:7c:37:49:
13:3e:30:2d:a6:12:e9:fb:04:dd:6b:b8:b8:44:2d:
b7:6a:b6:fc:cc:0c:15:3d:21:39:aa:34:b6:47:18:
15:1a:67:01:3e:e4:48:5e:c2:2a:c8:44:4c:c9:5c:
f1:dd:d5:37:f0:4c:91:3f:44:2e:1d:7a:e6:a1:c3:
a0:e3:cc:1d:9e:99:99:f0:49:20:c8:f4:d3:3b:68:
46:15:71:52:57:85:fd:c6:48:89:3f:28:35:78:10:
e3:b6:02:50:6b:7a:da:d5:81:cf:ad:b5:8c:05:6f:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:BA:B1:13:1F:25:12:3B:A8:02:01:01:2D:AA:0A:5B:C5:D7:0F
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e203630343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.134.88.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2e:4d:d6:4a:62:a8:63:fc:8b:a4:3d:06:c1:fe:1b:36:b1:
38:fa:46:af:91:ac:ae:88:81:bb:85:61:ba:97:91:6e:e8:5b:
71:fc:b5:de:d1:e5:35:30:58:6e:4c:6b:c3:98:c5:16:8f:9f:
b4:d0:ef:06:51:b6:cd:f0:97:56:d1:dd:a0:97:7a:e3:d9:fd:
a3:7d:f3:61:8a:51:17:e3:c3:6b:5b:0a:e0:6b:2a:1a:d7:16:
02:04:e4:54:96:49:06:1c:9b:05:a8:db:93:7c:e3:d4:5a:97:
8e:99:2a:26:a5:b6:a3:51:7b:64:48:5b:5a:1b:c5:0a:57:1d:
d0:a9:f3:6c:c0:70:dc:6b:1a:37:48:7e:57:51:8a:1d:c0:27:
d3:55:42:78:a1:45:75:73:84:de:ba:cd:6d:c0:7c:a8:25:2a:
32:e5:b3:ca:e9:d9:0f:79:e6:bb:d1:d2:eb:54:87:0c:87:40:
d1:1f:09:a5:22:42:28:20:6f:ed:eb:03:25:8b:13:e4:c2:ea:
79:01:21:67:37:e4:d1:f7:41:02:d6:eb:6a:fd:22:17:88:86:
b5:11:f9:bd:10:b7:4e:ee:8a:12:2d:89:b2:91:45:0a:78:63:
0c:29:60:c3:a8:e3:99:1b:d0:1e:67:0d:03:c3:90:1d:45:d7:
fe:a5:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:25 2025 by rpki-client