Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353630343a3a2f34382d3438203d3e20313531333439.roa
File: 326130363a313238373a353630343a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier: ZgZqgChZNW88uc5hLkALpG71MwBPtotLRp7CNupUUM8=
Subject key identifier: 5A:3B:7C:91:9F:4F:2E:B6:12:F1:63:27:77:B9:61:C8:3E:D6:14:4B
Certificate issuer: /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial: 4934D61BA58BDCC76B00C8521C5DD10E24ECF3E6
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access: rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access: rsync://rpki.co/repo/yuki/0/326130363a313238373a353630343a3a2f34382d3438203d3e20313531333439.roa
Signing time: Wed 13 Sep 2023 07:20:08 +0000
ROA not before: Wed 13 Sep 2023 07:15:08 +0000
ROA not after: Wed 11 Sep 2024 07:20:08 +0000
asID: 151349
IP address blocks: 2a06:1287:5604::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:34:d6:1b:a5:8b:dc:c7:6b:00:c8:52:1c:5d:d1:0e:24:ec:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Validity
Not Before: Sep 13 07:15:08 2023 GMT
Not After : Sep 11 07:20:08 2024 GMT
Subject: CN=5A3B7C919F4F2EB612F1632777B961C83ED6144B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:03:6f:1a:6f:ef:28:c5:65:95:48:ba:75:
ad:0e:e7:d1:3e:c2:dc:77:86:98:52:90:d6:2d:a3:
bb:36:06:b3:b5:a4:a7:50:76:c4:81:31:05:e0:a4:
34:a1:0c:13:44:22:47:3d:64:00:33:fe:58:a2:c4:
0c:54:34:db:f2:cc:49:cf:42:01:45:be:72:8f:ba:
ab:6a:45:fa:88:96:fe:8a:b4:13:2c:a9:80:20:6e:
ef:61:7e:e4:b5:b7:e8:d3:b2:0b:df:be:70:8b:f1:
36:e4:46:4d:f0:0e:ee:77:a6:c8:d2:c5:64:46:78:
39:a5:f1:29:74:68:4a:43:89:f2:13:33:d5:04:7b:
10:ec:0d:27:49:21:0b:40:1d:5d:ae:30:8c:d6:06:
74:3c:de:7a:5f:dd:01:a6:f4:55:97:72:1f:57:d0:
4e:51:77:a9:40:05:9f:33:72:9e:fc:d9:35:e1:c3:
17:c7:16:1f:51:81:94:b8:a0:34:58:21:77:ad:e7:
38:6b:ef:1f:49:9c:df:84:9e:50:e9:1e:f3:71:21:
0e:96:c0:db:e7:9c:e4:9c:42:5d:da:cc:5b:e4:71:
83:f0:d6:a4:7e:59:f6:9c:8e:8f:cb:96:4b:64:1d:
81:fc:d2:da:dd:fa:1b:c5:dd:66:b6:95:a3:12:2f:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:7C:91:9F:4F:2E:B6:12:F1:63:27:77:B9:61:C8:3E:D6:14:4B
X509v3 Authority Key Identifier:
keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353630343a3a2f34382d3438203d3e20313531333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:5604::/48
Signature Algorithm: sha256WithRSAEncryption
1f:85:cb:fd:dd:ad:67:c6:e4:2f:06:a3:be:e9:95:8d:5c:0a:
04:7f:6f:13:de:f2:17:80:06:7a:9d:7f:d6:06:2e:a7:62:a9:
b5:8b:a5:8e:cc:25:01:fc:1d:2d:5a:49:63:65:e6:1c:dd:2b:
00:f2:47:17:6a:e4:bc:9c:ca:14:d7:d8:d8:05:e8:44:15:87:
ae:e6:42:58:dd:15:25:b6:b4:5e:f9:97:b6:d1:bf:13:41:c3:
60:9a:6a:48:97:32:40:c8:53:96:36:43:2e:57:9b:a5:d6:04:
74:7b:49:71:d3:b5:10:b5:ce:8a:84:72:3d:d3:76:51:91:28:
7d:fe:7c:b9:40:36:a4:e6:fb:ed:44:c8:7b:93:2d:04:3c:11:
14:00:a4:4d:79:05:38:83:89:bc:79:3f:ff:4d:66:ce:58:db:
a5:a1:f6:ef:8e:f4:90:80:3d:ef:23:69:5f:08:c8:d3:ed:e3:
f2:be:42:95:f5:fd:c6:8d:bf:8c:7b:f6:c6:63:23:43:8e:7a:
74:3a:bf:d9:90:9d:32:65:18:d7:7f:99:f5:12:ab:f5:f6:48:
89:fa:c5:6b:a5:8a:65:a9:33:d9:0d:d9:f0:39:5f:0d:7c:de:
27:85:34:3b:c7:2a:d2:67:0e:fa:99:c1:63:02:69:d8:b1:1c:
b9:60:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:52:26 2025 by rpki-client