Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353766653a3a2f34372d3438203d3e20323136323738.roa
File: 326130363a313238373a353766653a3a2f34372d3438203d3e20323136323738.roa (raw, json)
Hash identifier: kB2TMRAlXhPKwlzExP4uBp7+nCWYDSwC311bm7Gy8So=
Subject key identifier: 15:CE:1D:1C:E8:B4:B4:B9:3E:F0:49:5A:5A:FD:7A:D3:57:DA:E3:07
Certificate issuer: /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial: 60E64E7241085236FF2D7BA86F39B97A9472C40B
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access: rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access: rsync://rpki.co/repo/yuki/0/326130363a313238373a353766653a3a2f34372d3438203d3e20323136323738.roa
Signing time: Thu 21 Sep 2023 05:16:20 +0000
ROA not before: Thu 21 Sep 2023 05:11:20 +0000
ROA not after: Thu 19 Sep 2024 05:16:20 +0000
asID: 216278
IP address blocks: 2a06:1287:57fe::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e6:4e:72:41:08:52:36:ff:2d:7b:a8:6f:39:b9:7a:94:72:c4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Validity
Not Before: Sep 21 05:11:20 2023 GMT
Not After : Sep 19 05:16:20 2024 GMT
Subject: CN=15CE1D1CE8B4B4B93EF0495A5AFD7AD357DAE307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:85:3a:dc:4c:66:cb:dd:fd:e3:52:89:92:
e7:ca:b1:ae:73:f1:7b:00:0e:84:27:e9:60:7b:0d:
11:02:28:70:0d:bb:c8:37:8d:1b:ee:0b:74:53:0f:
dc:5a:68:71:ec:96:6a:c4:e1:46:c1:9c:38:42:a2:
bf:99:4b:e2:64:15:fb:f6:93:26:6c:1d:1c:fd:fd:
63:ac:c5:62:b3:e1:44:54:01:83:f0:2b:b7:8f:db:
ec:52:a0:39:83:56:3e:3d:70:c5:e5:04:92:7f:a7:
2a:ec:5f:9a:14:70:05:c4:80:d0:93:5c:b1:24:f5:
4e:4b:a0:8b:51:b0:92:2d:6f:e0:cf:91:79:98:ed:
f6:da:3a:8e:3f:a5:08:fd:e0:26:ff:04:7f:4d:fd:
29:c7:0e:01:b0:dd:5c:9d:56:df:f9:3a:9e:fc:9b:
a3:06:9a:25:e6:05:09:dc:23:bb:ab:37:5f:dd:25:
4e:71:e3:c6:63:b2:aa:95:e9:51:91:a5:77:59:d6:
1c:16:24:e9:9c:26:b4:f6:51:13:9b:63:e1:f5:c4:
35:9a:fb:15:db:79:d2:93:83:00:b3:63:fd:e6:e4:
45:a8:84:0b:68:da:be:1a:29:e7:78:d5:a1:c0:24:
48:8a:08:30:ef:7d:32:a8:2a:d1:c4:b9:89:1e:8d:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:1D:1C:E8:B4:B4:B9:3E:F0:49:5A:5A:FD:7A:D3:57:DA:E3:07
X509v3 Authority Key Identifier:
keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353766653a3a2f34372d3438203d3e20323136323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:57fe::/47
Signature Algorithm: sha256WithRSAEncryption
1f:f7:fe:fb:a2:09:3a:bf:c2:2f:26:be:6a:9f:41:49:bd:e0:
b7:8f:14:35:8a:89:84:2a:04:03:a4:2b:9b:02:da:1a:4f:71:
aa:83:03:92:05:ad:b1:07:f2:6c:ef:bd:cd:b6:a7:bc:3d:39:
d9:ee:58:9b:f9:b1:67:0a:f7:22:98:88:81:32:a8:05:2d:d1:
7a:b9:43:5a:ed:4d:b0:66:d3:a6:a8:d0:1e:d3:e0:78:28:73:
75:45:42:62:95:fb:8e:8e:77:b2:fb:84:3f:41:a6:58:eb:66:
f8:21:d8:77:b5:97:54:17:2f:2b:8c:0d:8b:e6:ab:65:cf:05:
da:d5:76:52:6c:0b:f3:09:a6:57:51:35:f9:01:4e:ae:db:44:
22:84:d3:34:ba:5d:2f:b9:9e:dd:77:29:ee:5d:c7:21:56:17:
c9:3f:8d:df:ae:3c:bb:f0:84:eb:7f:7b:c0:0d:83:b3:a7:80:
05:ce:8b:16:c9:71:a8:01:74:7b:ee:bc:d5:b4:b7:03:1c:cd:
c5:7e:82:92:cf:4d:d6:27:61:14:bd:14:a2:3f:3d:3e:9c:8d:
03:d5:d9:f7:dc:81:11:24:b9:5a:22:57:22:61:ec:b8:58:ce:
93:da:6d:f2:77:1f:a5:15:ea:a2:90:f3:5d:4f:c0:64:2f:10:
02:46:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:25:11 2025 by rpki-client