Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Cube/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
File: 323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa (raw, json)
Hash identifier: ibYj6Mk9lkIUGgZBfUHha4duCTBH+XniGlMyLRfo8AA=
Subject key identifier: 29:69:D0:3B:82:3E:A6:A9:D6:FB:A0:67:ED:4E:2C:E6:51:5A:73:AB
Certificate issuer: /CN=6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0
Certificate serial: 377D70810E6CF90AF6986E58487AB39A10B49D59
Authority key identifier: 6D:D1:38:EB:B7:A6:BA:B2:C1:F4:E3:D7:16:70:11:D8:6A:C1:FC:F0
Authority info access: rsync://rpki.co/repo/AS945/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.cer
Subject info access: rsync://rpki.co/repo/Cube/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
Signing time: Thu 27 Apr 2023 14:03:43 +0000
ROA not before: Thu 27 Apr 2023 13:58:43 +0000
ROA not after: Thu 25 Apr 2024 14:03:43 +0000
asID: 151062
IP address blocks: 2602:fc23:160::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7d:70:81:0e:6c:f9:0a:f6:98:6e:58:48:7a:b3:9a:10:b4:9d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0
Validity
Not Before: Apr 27 13:58:43 2023 GMT
Not After : Apr 25 14:03:43 2024 GMT
Subject: CN=2969D03B823EA6A9D6FBA067ED4E2CE6515A73AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:50:99:dc:fa:d1:68:6a:5d:d1:e5:93:32:
d1:56:56:83:2c:f4:27:2b:33:bc:f8:90:e8:a7:d3:
3b:76:42:6f:e0:7b:33:db:3a:cd:2b:77:db:78:8c:
5c:a3:99:fc:0e:2c:90:02:37:fb:78:12:b8:56:c3:
f5:9f:31:3c:8f:54:3a:f4:f7:15:a5:e7:6d:ea:f6:
99:17:f6:c0:57:82:c6:76:77:84:2d:f0:00:70:a8:
40:42:00:69:53:b4:e8:1b:65:69:66:aa:16:52:1f:
a1:8b:86:8d:4c:f7:dc:86:46:73:be:8d:5f:cd:3b:
bf:92:d9:07:6a:0d:f4:21:83:30:10:af:0d:e0:6e:
2d:9f:e7:28:79:80:d9:eb:92:bc:04:77:62:be:e1:
d4:4b:e2:3a:93:c1:e5:51:22:98:73:a8:6e:38:fb:
98:90:8f:57:1c:43:58:0d:04:6d:d3:5c:14:c4:b6:
9b:a5:af:69:75:4f:99:b0:26:ca:3b:5e:6d:7b:f8:
6f:e2:a1:d4:f9:22:3a:67:b2:3c:10:fa:91:20:be:
0a:bc:81:a0:b5:9c:68:43:9e:1b:54:d3:0f:29:9e:
6a:0e:cd:a3:42:1a:1c:18:35:91:e3:a3:1d:62:6d:
69:e1:37:a7:b6:0f:ef:d2:95:03:37:16:cc:2c:9f:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:D0:3B:82:3E:A6:A9:D6:FB:A0:67:ED:4E:2C:E6:51:5A:73:AB
X509v3 Authority Key Identifier:
keyid:6D:D1:38:EB:B7:A6:BA:B2:C1:F4:E3:D7:16:70:11:D8:6A:C1:FC:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Cube/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Cube/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:160::/44
Signature Algorithm: sha256WithRSAEncryption
9d:f4:23:10:54:b4:a8:24:96:95:f3:9e:a9:55:37:fb:e8:39:
a3:e0:21:f6:0b:3e:1e:92:16:a9:c1:5a:b5:ac:2e:21:a9:2c:
fd:c5:20:a7:89:75:38:bd:cf:53:a9:b8:ea:73:78:58:84:55:
48:86:f8:a9:38:ce:e3:64:42:86:ca:8d:ff:d8:ce:1a:6b:6b:
0f:7f:a8:0e:fe:f8:1b:21:76:22:3b:62:9f:09:92:91:17:5f:
4d:7e:3d:36:ca:18:6b:a0:65:4a:65:b6:0d:aa:5f:cf:4d:a4:
2e:d2:d9:5a:8f:ba:34:d5:92:7a:cb:57:23:11:28:93:1b:a1:
ff:20:df:0c:26:fd:79:9b:76:9b:ba:a4:79:2c:8e:56:52:e2:
28:7e:4d:b9:0a:c4:19:8d:eb:12:ac:42:c4:fd:60:71:ef:e3:
30:16:ee:4a:33:f7:cf:6a:d7:ff:96:6e:53:52:cd:c8:55:9e:
62:fa:bc:5f:08:56:58:86:1b:30:b9:da:ac:40:c5:4e:bf:53:
8b:54:49:ea:39:79:4d:24:bd:62:d6:9f:2c:10:41:be:ea:2d:
7e:7a:c5:6c:41:aa:0b:ad:87:59:32:76:63:f1:bc:23:80:12:
78:89:31:a7:bb:e9:d2:e7:97:99:95:33:23:40:1b:74:e6:de:
88:db:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:46 2025 by rpki-client