Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: RbgeKR90MI6a70WTsPaa/svRQ3a5mKLfMNJjAv2M1lc=
Subject key identifier: 79:69:C2:52:4A:1C:7D:EA:E6:15:0A:39:38:EB:04:46:97:14:39:90
Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial: 1B5340431C056DD4DBE8C69971C6D9860DEE8B44
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa
Signing time: Tue 06 May 2025 08:50:51 +0000
ROA not before: Tue 06 May 2025 08:45:51 +0000
ROA not after: Tue 05 May 2026 08:50:51 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f70::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:53:40:43:1c:05:6d:d4:db:e8:c6:99:71:c6:d9:86:0d:ee:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Validity
Not Before: May 6 08:45:51 2025 GMT
Not After : May 5 08:50:51 2026 GMT
Subject: CN=7969C2524A1C7DEAE6150A3938EB044697143990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:64:e6:dc:20:c9:63:0f:5d:c3:93:29:a4:
1f:6b:65:63:9f:48:e7:a2:62:c9:f8:5a:a0:8c:e7:
1d:e2:f0:ec:44:81:58:12:06:c1:e6:52:69:46:d8:
61:fe:2e:25:61:a6:2b:b6:21:25:18:09:2f:19:76:
28:4d:d6:b8:08:8b:ac:23:d1:1d:44:52:ee:97:05:
bc:81:b6:84:a2:e6:ba:39:3a:8e:5a:0c:72:8d:cc:
b6:11:4d:0e:9d:33:72:8f:46:b4:f3:b8:58:4f:30:
d5:a6:b8:8c:44:52:08:26:f0:65:ba:5b:bd:5c:80:
a2:ff:5a:f2:f1:96:d9:62:02:d4:28:a6:0d:3d:7c:
15:d4:b5:06:ba:d9:6a:70:87:9c:70:a6:c2:32:92:
9c:56:5f:29:6c:5b:d6:20:68:a6:66:82:2d:18:6c:
7b:56:78:3f:60:89:3e:8d:f5:43:55:74:be:77:40:
f9:ac:cf:76:3d:c1:c2:91:55:24:ba:42:00:ef:8f:
aa:45:8f:a4:51:51:1e:38:c8:1d:c8:9a:c1:87:85:
78:3a:25:8f:f1:f6:2e:52:ce:ad:1a:0c:e9:b1:e8:
08:a5:93:4e:f8:f8:33:17:e0:71:e3:13:c4:36:e2:
1c:e0:4d:82:18:c4:42:50:39:c1:3b:62:df:be:03:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:C2:52:4A:1C:7D:EA:E6:15:0A:39:38:EB:04:46:97:14:39:90
X509v3 Authority Key Identifier:
keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f70::/44
Signature Algorithm: sha256WithRSAEncryption
21:a1:da:52:d4:7d:a6:bc:ad:e3:d2:ec:62:a9:29:51:1e:3a:
f9:aa:e5:2d:5e:66:30:1c:10:c6:b4:02:69:e1:7e:94:a9:ec:
9a:c3:98:43:24:43:52:be:6c:ad:15:87:9b:c9:fb:4d:11:e2:
d1:e4:86:de:53:59:b1:2a:4a:3d:fb:b7:2e:86:5b:33:e8:57:
8e:2a:eb:17:fa:be:b8:24:c4:9a:5b:6d:28:b8:95:a2:7b:0f:
6a:b1:f6:1e:47:a9:28:80:f4:e7:71:37:d4:4a:74:dd:05:cd:
47:17:57:11:ba:e7:a7:08:55:e5:8f:bb:b9:aa:e5:12:a4:27:
56:b4:de:d6:6c:90:67:45:97:b5:10:ef:fd:a8:d9:1f:01:2a:
13:dd:c6:c2:63:58:83:8a:d1:58:25:1c:e3:b9:a9:3f:22:c3:
70:51:93:99:35:f2:89:18:c3:9b:35:94:47:49:e8:57:c4:c2:
cd:25:64:4d:95:0b:00:cd:65:45:be:55:e1:1c:d0:ee:25:fd:
63:a0:22:7e:37:2c:65:6d:e3:e4:51:c7:4b:98:e3:cc:0f:cd:
4c:a6:7a:a1:9e:aa:7d:cf:eb:ef:52:d5:a4:29:a4:37:94:ce:
43:f7:a0:ff:83:aa:a6:c5:86:ee:06:b7:42:3a:57:20:97:24:
4d:86:4d:e9
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUG1NAQxwFbdTb6MaZccbZhg3ui0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1
NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTFaFw0yNjA1MDUwODUwNTFaMDMxMTAvBgNV
BAMTKDc5NjlDMjUyNEExQzdERUFFNjE1MEEzOTM4RUIwNDQ2OTcxNDM5OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTWTm3CDJYw9dw5MppB9rZWOf
SOeiYsn4WqCM5x3i8OxEgVgSBsHmUmlG2GH+LiVhpiu2ISUYCS8ZdihN1rgIi6wj
0R1EUu6XBbyBtoSi5ro5Oo5aDHKNzLYRTQ6dM3KPRrTzuFhPMNWmuIxEUggm8GW6
W71cgKL/WvLxltliAtQopg09fBXUtQa62Wpwh5xwpsIykpxWXylsW9YgaKZmgi0Y
bHtWeD9giT6N9UNVdL53QPmsz3Y9wcKRVSS6QgDvj6pFj6RRUR44yB3ImsGHhXg6
JY/x9i5Szq0aDOmx6Ailk074+DMX4HHjE8Q24hzgTYIYxEJQOcE7Yt++AwzBAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUeWnCUkocfermFQo5OOsERpcUOZAwHwYDVR0j
BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz
NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM3MzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwV9wMA0GCSqGSIb3DQEB
CwUAA4IBAQAhodpS1H2mvK3j0uxiqSlRHjr5quUtXmYwHBDGtAJp4X6Uqeyaw5hD
JENSvmytFYebyftNEeLR5IbeU1mxKko9+7cuhlsz6FeOKusX+r64JMSaW20ouJWi
ew9qsfYeR6kogPTncTfUSnTdBc1HF1cRuuenCFXlj7u5quUSpCdWtN7WbJBnRZe1
EO/9qNkfASoT3cbCY1iDitFYJRzjuak/IsNwUZOZNfKJGMObNZRHSehXxMLNJWRN
lQsAzWVFvlXhHNDuJf1joCJ+NyxlbePkUcdLmOPMD81Mpnqhnqp9z+vvUtWkKaQ3
lM5D96D/g6qmxYbuBrdCOlcglyRNhk3p
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:44:10 2025 by rpki-client