Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa
File: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (raw, json)
Hash identifier: Ajs11kbN11P2XWfoIJiRn6ZOdr7R8IeCxJs9fIcXO2M=
Subject key identifier: 38:C5:13:A7:E9:F3:21:2C:06:9D:19:51:C2:3D:AB:4E:81:E6:18:6F
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 7980AFCED9D6D8A3243223881741F18F575B026C
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa
Signing time: Thu 12 Sep 2024 16:46:54 +0000
ROA not before: Thu 12 Sep 2024 16:41:54 +0000
ROA not after: Thu 11 Sep 2025 16:46:54 +0000
asID: 23959
IP address blocks: 2403:fbc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:80:af:ce:d9:d6:d8:a3:24:32:23:88:17:41:f1:8f:57:5b:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000
Validity
Not Before: Sep 12 16:41:54 2024 GMT
Not After : Sep 11 16:46:54 2025 GMT
Subject: CN=38C513A7E9F3212C069D1951C23DAB4E81E6186F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:76:21:d5:7e:be:65:28:51:06:7b:35:c2:
1f:c8:eb:75:c9:9c:91:11:0e:e0:0b:31:80:ce:f7:
4e:d0:fe:f7:9c:ac:bd:24:16:92:65:bc:91:07:ab:
65:1c:fb:93:a8:ae:e3:6c:64:60:39:51:cc:cb:8a:
28:4a:a2:c2:65:b1:bb:ba:f4:9a:2b:6a:0e:55:30:
38:a5:32:40:10:0f:7f:00:6c:83:ce:e0:f4:b3:4e:
bb:e4:85:bd:68:ba:47:e5:0f:47:31:6d:63:24:d8:
71:e0:bf:87:9a:8e:ba:a5:9b:87:2b:82:50:b0:b0:
91:a4:ec:0e:b0:8b:00:62:dd:b9:db:a4:97:49:21:
53:57:94:40:48:ad:43:b9:00:11:22:99:40:52:82:
12:a5:6c:24:d0:95:c9:25:59:b0:5d:50:d6:d5:a7:
b2:37:12:dc:b9:ed:3d:98:71:87:4e:51:ef:af:53:
b8:a7:de:3a:dd:10:e5:c3:d7:24:36:84:99:41:9a:
d3:16:5d:e7:6c:fd:f2:c2:16:8d:a9:fc:f5:77:4f:
6b:24:a4:e1:e1:73:ab:e6:3e:75:77:5e:8c:be:de:
7f:98:f8:8b:30:4f:c9:ee:b7:9d:2c:92:ad:5f:61:
2e:36:ce:79:bf:34:76:39:61:fa:58:b9:24:73:1c:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:13:A7:E9:F3:21:2C:06:9D:19:51:C2:3D:AB:4E:81:E6:18:6F
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:ad:13:f3:6a:30:f8:69:4e:12:d3:d9:6a:4e:32:d3:7a:5b:
35:5b:40:17:cf:d5:20:dc:d5:f9:78:37:42:44:85:d3:40:60:
f6:a7:fc:cc:db:74:5c:b4:39:a7:55:97:52:d3:90:1d:70:c9:
1f:0d:e6:6e:9f:e1:b2:7f:ae:9a:74:cd:6a:ad:12:c2:84:1d:
2b:b1:6c:6c:f6:c2:67:13:44:b7:49:bc:73:a6:c6:8d:d5:30:
97:37:b6:ee:29:10:51:35:24:8f:bd:fc:3e:8d:65:e0:19:35:
f6:af:6c:a5:12:fd:35:df:3e:6f:4a:1c:83:81:a1:df:3a:1d:
00:00:d0:02:98:eb:ef:fc:e4:e4:6b:60:f4:b3:1d:b5:0d:d5:
42:18:d3:b4:2e:53:08:56:7d:2e:fe:77:29:d5:05:e9:36:79:
17:50:1e:53:59:69:a1:bb:42:e7:9d:ac:7b:3b:65:55:30:0d:
03:42:9a:36:6a:1c:7b:2a:c8:e3:11:75:d6:9a:45:80:8d:fc:
78:40:34:83:4d:6c:85:84:9e:63:59:c0:57:4b:b0:92:cd:20:
e8:22:fe:7b:f5:b9:3f:95:7e:be:be:c5:3e:58:ec:95:b8:ff:
7e:5f:ba:89:22:b2:61:5d:8a:04:8a:5a:cc:2f:47:62:1d:e7:
56:e0:00:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:30 2025 by rpki-client