Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
File: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier: YySW/sH/T85Frpxg/OMmZXTi+XJ9bd/e6vjVoNBVTfQ=
Subject key identifier: F8:0F:BB:46:47:8A:99:E6:68:C5:9A:85:15:24:7A:7E:FC:EC:61:70
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 278DA0224E59586AC789E47600E8B1DACEC6EEFD
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
Signing time: Tue 06 May 2025 08:50:51 +0000
ROA not before: Tue 06 May 2025 08:45:51 +0000
ROA not after: Tue 05 May 2026 08:50:51 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f15::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8d:a0:22:4e:59:58:6a:c7:89:e4:76:00:e8:b1:da:ce:c6:ee:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: May 6 08:45:51 2025 GMT
Not After : May 5 08:50:51 2026 GMT
Subject: CN=F80FBB46478A99E668C59A8515247A7EFCEC6170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:a9:dd:08:9b:93:2f:d4:13:d5:70:6f:3d:
a0:0f:4c:0b:64:eb:a6:08:9e:a9:9e:15:bc:2d:c3:
80:25:de:03:e7:34:76:39:6d:d6:15:26:7b:0e:02:
d8:68:c5:ed:09:84:04:9a:74:0c:f1:15:80:45:15:
0e:38:3b:fe:34:ee:9f:a6:d6:5e:d8:17:db:99:d0:
86:36:e5:2e:c5:7c:46:c2:14:f5:6a:7e:9f:57:ef:
d5:1f:78:6c:1e:b4:98:c1:f4:f3:95:2a:cf:8e:fd:
53:4b:52:cf:4b:58:18:fc:0b:88:7a:8e:7a:db:36:
47:9a:bf:0d:42:3d:f1:7a:bc:a4:71:37:b9:02:73:
1b:a1:03:3b:d8:c5:99:95:2e:8c:ee:68:24:c4:f3:
94:1e:6c:e5:db:93:ae:c5:8a:36:a4:b5:da:99:3a:
d4:4a:66:fb:74:4f:11:c1:04:12:f6:22:49:25:df:
cd:f2:65:c4:32:93:7f:97:6f:d4:04:fa:c1:a8:5a:
9e:c9:2a:89:76:ff:06:a7:f2:02:e3:c9:f0:48:d1:
d7:08:6c:50:98:0e:3a:6b:e6:42:0c:ea:cc:2a:05:
db:77:4c:1a:ec:c6:bf:ac:f6:49:d9:5e:ee:4c:19:
ce:ec:d5:ff:a0:ca:9e:d7:45:c6:70:24:c2:f4:9c:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:BB:46:47:8A:99:E6:68:C5:9A:85:15:24:7A:7E:FC:EC:61:70
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f15::/48
Signature Algorithm: sha256WithRSAEncryption
aa:c0:70:cb:fb:71:1c:3a:95:2c:4f:b1:30:8a:33:bf:c9:10:
bf:78:70:a0:ca:27:48:1a:52:a9:9c:56:b0:87:f3:9f:2e:42:
71:0e:56:93:f6:3a:7e:17:8b:b1:e0:42:e0:0e:9a:af:8f:c3:
ac:05:3e:9f:0f:27:36:ce:a8:04:a3:d5:da:f2:f6:1a:06:17:
83:a5:03:68:db:e9:2e:a8:a4:6c:30:fc:2a:db:cb:3c:f8:97:
a0:38:67:43:f5:cf:c7:2d:98:63:ef:a2:7d:33:44:ec:8e:a8:
59:06:ed:68:83:8c:97:72:9e:aa:80:bc:c9:31:46:fe:fd:92:
8a:a1:2c:11:f7:8a:77:cf:df:ae:33:dd:2e:3a:a4:5f:8f:e9:
1f:29:b4:d1:56:62:9c:36:b5:50:7f:e0:f4:e5:31:13:bd:db:
c4:84:12:6c:21:6c:b7:31:d7:0f:59:05:ad:25:31:e5:d4:ca:
b7:51:8b:43:78:8b:b9:c8:d8:39:f0:57:0c:51:93:db:d1:98:
95:0f:76:6b:3b:c0:c3:4c:f1:a5:c7:c7:56:a2:2c:ef:f7:4c:
8b:3d:47:f6:53:ec:91:41:4d:f9:43:86:c3:cb:fd:a7:0c:6f:
ac:f2:46:9b:89:e6:45:94:43:c6:85:11:0d:79:05:e0:39:d9:
8a:aa:df:95
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUJ42gIk5ZWGrHieR2AOix2s7G7v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1
NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTFaFw0yNjA1MDUwODUwNTFaMDMxMTAvBgNV
BAMTKEY4MEZCQjQ2NDc4QTk5RTY2OEM1OUE4NTE1MjQ3QTdFRkNFQzYxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMandCJuTL9QT1XBvPaAPTAtk
66YInqmeFbwtw4Al3gPnNHY5bdYVJnsOAthoxe0JhASadAzxFYBFFQ44O/407p+m
1l7YF9uZ0IY25S7FfEbCFPVqfp9X79UfeGwetJjB9POVKs+O/VNLUs9LWBj8C4h6
jnrbNkeavw1CPfF6vKRxN7kCcxuhAzvYxZmVLozuaCTE85QebOXbk67FijaktdqZ
OtRKZvt0TxHBBBL2Ikkl383yZcQyk3+Xb9QE+sGoWp7JKol2/wan8gLjyfBI0dcI
bFCYDjpr5kIM6swqBdt3TBrsxr+s9knZXu5MGc7s1f+gyp7XRcZwJML0nHa1AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU+A+7RkeKmeZoxZqFFSR6fvzsYXAwHwYDVR0j
BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz
NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMxMzUzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8VMA0GCSqGSIb3DQEB
CwUAA4IBAQCqwHDL+3EcOpUsT7EwijO/yRC/eHCgyidIGlKpnFawh/OfLkJxDlaT
9jp+F4ux4ELgDpqvj8OsBT6fDyc2zqgEo9Xa8vYaBheDpQNo2+kuqKRsMPwq28s8
+JegOGdD9c/HLZhj76J9M0TsjqhZBu1og4yXcp6qgLzJMUb+/ZKKoSwR94p3z9+u
M90uOqRfj+kfKbTRVmKcNrVQf+D05TETvdvEhBJsIWy3MdcPWQWtJTHl1Mq3UYtD
eIu5yNg58FcMUZPb0ZiVD3ZrO8DDTPGlx8dWoizv90yLPUf2U+yRQU35Q4bDy/2n
DG+s8kabieZFlEPGhRENeQXgOdmKqt+V
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:29:36 2025 by rpki-client