Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383232303a3a2f34342d3434203d3e20323035343231.roa
File: 326131323a646434373a383232303a3a2f34342d3434203d3e20323035343231.roa (raw, json)
Hash identifier: tvTQ1PreGb7d6Y4lN/C6Gzh7/xEyFu1DPGevk3BIkLg=
Subject key identifier: AB:F5:95:25:5A:57:7D:04:76:33:A3:1A:10:A2:EA:92:EC:BD:38:9C
Certificate issuer: /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial: 18AE5B7137278E81D300CEC53BA552A9F37F7F3D
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access: rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access: rsync://rpki.co/repo/August/2/326131323a646434373a383232303a3a2f34342d3434203d3e20323035343231.roa
Signing time: Sat 08 Apr 2023 05:22:38 +0000
ROA not before: Sat 08 Apr 2023 05:17:38 +0000
ROA not after: Sat 06 Apr 2024 05:22:38 +0000
asID: 205421
IP address blocks: 2a12:dd47:8220::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ae:5b:71:37:27:8e:81:d3:00:ce:c5:3b:a5:52:a9:f3:7f:7f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Validity
Not Before: Apr 8 05:17:38 2023 GMT
Not After : Apr 6 05:22:38 2024 GMT
Subject: CN=ABF595255A577D047633A31A10A2EA92ECBD389C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:26:ca:9f:8a:1a:47:da:12:29:b0:00:0b:
36:c3:17:c9:05:7b:ce:84:a6:19:f9:88:95:54:69:
9c:48:1e:26:ff:cc:f6:f2:ac:a5:e3:bf:bb:d1:1a:
8b:2c:d2:55:5a:67:55:b5:9e:9a:fe:b1:b5:61:2d:
ef:90:72:37:6f:a2:0e:c0:8c:da:71:89:60:d5:04:
7c:9f:0b:52:a9:9f:a7:ff:dc:46:b2:f9:a6:cb:ba:
6b:31:2f:2d:a0:01:0a:5c:20:50:d1:99:2a:16:2c:
4b:cb:c1:08:6d:01:10:0d:50:64:5b:3c:5f:b7:0e:
29:47:0a:8e:f9:e0:97:e0:30:08:93:04:62:68:b3:
b0:59:55:34:59:2a:ed:0a:38:dc:36:54:92:9b:dc:
78:77:d2:b6:a3:8d:58:d6:f9:fa:dd:a6:c8:80:d1:
a4:bd:a8:b6:f3:bc:dc:c5:a9:eb:be:19:4f:6b:ef:
de:12:a4:f4:5a:99:91:74:30:9a:9d:08:38:73:69:
f9:bf:5c:fe:94:cc:1a:9d:c3:3a:68:ae:46:02:75:
3e:cc:b9:33:5f:fc:a2:0c:d7:cc:2a:83:df:35:c2:
3d:11:04:a6:bb:63:30:74:64:70:d3:41:b3:6b:fd:
b0:d3:03:5d:80:3a:52:d1:25:5e:6f:00:c2:c7:b3:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:95:25:5A:57:7D:04:76:33:A3:1A:10:A2:EA:92:EC:BD:38:9C
X509v3 Authority Key Identifier:
keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383232303a3a2f34342d3434203d3e20323035343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8220::/44
Signature Algorithm: sha256WithRSAEncryption
c6:1a:a2:11:44:0b:4f:a2:56:dd:20:f5:73:d6:25:f2:09:02:
bb:53:0a:8f:cd:c5:78:6f:9d:2d:70:44:c6:11:f4:cd:7b:f6:
1d:95:ac:da:e4:04:78:62:7a:70:e4:05:3c:d7:fb:13:12:42:
4c:f9:ef:19:f5:e3:a4:95:9c:10:52:41:dc:3c:54:82:d3:1f:
52:e2:da:69:f3:3d:48:3c:1c:fa:a0:46:17:07:96:dc:a9:2f:
30:28:3c:40:f7:ff:22:f4:00:ee:45:3f:83:f1:30:3b:09:ec:
55:9c:96:33:1c:20:30:70:7c:32:5b:93:28:55:81:59:17:ac:
3e:2d:52:a1:74:27:12:25:c4:1c:1e:c7:f5:47:ed:62:33:2d:
ee:9e:18:e2:51:f4:94:c6:93:a2:a8:fc:a6:06:63:40:d8:28:
2a:c3:ab:d3:fd:c0:b2:dc:b2:e2:b0:d1:9d:b2:73:2f:72:78:
42:4b:81:bb:d9:a2:55:45:b8:e5:c6:d0:6d:25:46:73:36:60:
b3:7a:b5:db:c5:54:a7:e6:85:c4:6d:07:ee:19:cb:40:35:2d:
0a:a0:c9:c9:a2:28:fd:1e:2b:01:e4:be:80:e4:48:8b:de:69:
bd:d1:d1:8c:40:94:ea:40:f2:ed:86:2d:25:70:7f:dc:91:b0:
78:69:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:29 2025 by rpki-client