Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa
File: AS149020.roa (raw, json)
Hash identifier: 9mQA61+xrF+ZFJuGnZRe993KU9m/QYHkVvifPH/H7aY=
Subject key identifier: 17:97:0F:9D:FC:86:A9:F4:62:CF:A7:85:1F:47:A5:E5:6E:F2:D5:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 1C860AA8E0EA9DF78F83FBF7B6A235A1840CF600
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa
Signing time: Sun 06 Oct 2024 04:44:58 +0000
ROA not before: Sun 06 Oct 2024 04:39:58 +0000
ROA not after: Sun 05 Oct 2025 04:44:58 +0000
asID: 149020
IP address blocks: 2a05:dfc1:4000::/40 maxlen: 48
2a05:dfc1:4100::/40 maxlen: 40
2a05:dfc1:4200::/40 maxlen: 48
2a05:dfc1:4300::/40 maxlen: 48
2a05:dfc1:4400::/40 maxlen: 40
2a05:dfc1:4500::/40 maxlen: 48
2a0a:6040:9500::/40 maxlen: 48
2a0a:6040:9600::/40 maxlen: 48
2a0a:6040:9700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:86:0a:a8:e0:ea:9d:f7:8f:83:fb:f7:b6:a2:35:a1:84:0c:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Oct 6 04:39:58 2024 GMT
Not After : Oct 5 04:44:58 2025 GMT
Subject: CN=17970F9DFC86A9F462CFA7851F47A5E56EF2D5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:3f:0c:d7:b0:8f:29:8e:26:55:04:0f:d0:
14:f5:f0:d7:d7:9b:24:a1:6c:2d:95:79:7d:46:f0:
84:07:8a:db:06:6c:b0:83:4c:6d:80:85:2a:1c:63:
18:39:98:c0:23:7d:6f:82:65:bd:4c:43:75:26:e9:
27:d1:c7:1c:ee:8e:37:46:13:a7:29:ee:d4:8f:1f:
2c:c4:56:07:80:de:bf:28:b1:2f:b6:2a:58:c0:5e:
a2:41:d3:69:c8:b7:a1:40:10:d3:7f:bf:a7:b3:35:
b6:6c:32:ca:db:86:1a:dc:5b:87:8e:af:aa:f7:0d:
51:e8:a1:4d:11:03:ce:e4:1f:7b:32:33:ae:af:88:
d6:70:1a:5c:06:dc:45:a9:47:2b:64:d1:8d:6c:7a:
f9:70:9a:36:cd:c0:8c:69:e0:22:a1:ca:e5:ff:11:
fd:eb:98:7e:08:60:d9:57:48:a6:66:55:ee:a1:9f:
3d:fd:9c:31:32:7e:de:6e:03:8d:6e:b1:81:31:6c:
f3:51:bb:65:a1:26:a0:6e:1f:d3:aa:74:2f:ee:29:
63:d5:73:44:c3:7b:e4:60:9f:ee:dd:89:ae:7a:f3:
f4:eb:a2:92:12:c1:29:a0:34:93:cf:27:69:3d:ea:
03:90:64:79:93:07:18:44:5e:df:35:db:b8:b8:a1:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:0F:9D:FC:86:A9:F4:62:CF:A7:85:1F:47:A5:E5:6E:F2:D5:F9
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:4000::-2a05:dfc1:45ff:ffff:ffff:ffff:ffff:ffff
2a0a:6040:9500::-2a0a:6040:97ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:88:3a:ee:d5:29:77:63:06:4b:e2:46:53:76:6d:3c:f3:f1:
4a:19:13:c9:6b:3f:e3:85:7a:23:9e:2d:ee:56:9a:b0:c2:b2:
4b:42:44:14:f0:31:95:9f:25:e8:c6:9c:00:09:20:f6:1f:84:
e5:4a:76:b6:b9:48:c4:da:55:cb:56:61:e3:cd:a8:b6:e2:1f:
13:30:3f:a6:f6:65:00:07:ef:fb:64:f0:bd:b3:4b:c6:dd:ea:
5c:34:e8:56:d2:b9:e6:22:69:15:8b:eb:72:30:26:6a:89:cb:
2d:7b:71:87:d5:90:70:f5:62:9b:4f:1a:0d:01:f2:6a:16:8f:
80:59:ad:dd:48:f5:cf:bd:c4:7f:36:92:89:56:1f:24:b7:52:
48:38:aa:4d:87:c0:1d:9d:1f:2d:e2:53:24:0a:40:d7:df:60:
44:18:ae:c8:b1:97:73:b8:75:40:74:47:6d:45:bf:93:a4:d2:
12:3b:e0:b1:44:3b:91:61:e0:90:9a:df:91:e3:59:48:11:02:
89:d1:95:67:e9:0c:1a:31:26:1c:7e:01:78:b3:86:d2:c1:4b:
dc:a5:f8:6d:3d:b5:e2:9c:15:2b:16:18:d7:b5:3b:64:f8:b7:
1b:6a:96:a1:3e:fe:2d:c3:20:90:ea:d9:25:c2:a5:8a:3a:d9:
45:da:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:06 2025 by rpki-client on console.sobornost.net