Route Origin Authorization
$ rpki-client -vvf rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: JeCKzET+twdTutrlmRsl0OOaYxpit3D88yzGB2y0Rrk=
Subject key identifier: DD:33:43:CB:E7:89:C5:04:71:F9:63:75:17:9D:C2:BD:E7:40:C6:34
Certificate issuer: /CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
Certificate serial: 6060D2EB4886BB87E321687EBC7D57FCA88CFE2A
Authority key identifier: 48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
Authority info access: rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
Subject info access: rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa
Signing time: Sat 23 Jul 2022 18:26:07 +0000
ROA not before: Sat 23 Jul 2022 18:21:07 +0000
ROA not after: Sat 22 Jul 2023 18:26:07 +0000
asID: 50555
IP address blocks: 2a12:dd47:860c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:60:d2:eb:48:86:bb:87:e3:21:68:7e:bc:7d:57:fc:a8:8c:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
Validity
Not Before: Jul 23 18:21:07 2022 GMT
Not After : Jul 22 18:26:07 2023 GMT
Subject: CN=DD3343CBE789C50471F96375179DC2BDE740C634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:65:04:bb:55:e8:ca:f9:02:5b:1c:c9:74:
49:f2:8f:de:c2:11:eb:d5:c6:8a:ea:b9:3d:ce:28:
9c:f6:38:43:8b:14:71:f2:30:90:34:92:aa:dd:2d:
a7:70:c9:37:18:ce:63:60:12:95:f9:78:66:ea:72:
71:f8:0a:c1:a2:bd:1c:f6:36:7d:8e:97:48:eb:9e:
ce:c2:a9:0b:03:02:bf:30:96:2a:30:ed:2a:78:6c:
be:0f:ed:c0:38:8e:4f:c2:7d:1d:a1:a1:83:89:ff:
75:8d:9b:9b:fd:a8:bb:ee:0e:20:7b:09:7d:12:e8:
9b:29:a6:df:91:61:96:9e:9d:f7:3c:fd:04:29:01:
b3:1a:56:6b:0d:b0:90:38:12:db:d9:14:fe:35:d3:
97:d7:3f:03:43:65:63:55:f8:b0:f1:fc:ee:f3:d4:
16:9c:c6:74:b8:e0:e4:8e:cd:04:5d:18:29:4a:20:
9f:7b:89:64:cd:06:dd:2c:74:7c:97:fd:28:a3:0f:
1a:c1:8e:02:4d:11:fc:3f:a3:76:f4:a9:0d:a0:3d:
7a:54:80:9b:45:49:e5:c5:29:dc:0b:89:f2:93:0e:
bb:df:64:56:49:c3:d3:d1:71:15:6a:06:04:b2:e1:
f2:04:66:e8:5b:70:c6:14:84:d1:10:c7:e2:79:6c:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:43:CB:E7:89:C5:04:71:F9:63:75:17:9D:C2:BD:E7:40:C6:34
X509v3 Authority Key Identifier:
keyid:48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:860c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a2:ae:3b:71:0d:e2:fd:9b:85:13:6e:b5:34:ee:74:49:44:
a9:26:c8:bf:1f:b4:59:52:3c:1f:1c:94:23:9a:21:a3:53:85:
0e:a5:77:06:bb:de:a5:88:20:ee:bb:cd:6c:18:cb:6c:22:64:
26:be:50:54:74:c1:59:c7:10:0a:54:37:f4:02:cc:3d:d1:58:
8c:ce:b3:e9:93:d8:35:98:fa:a3:a4:54:a6:0d:96:91:b3:f4:
72:30:86:8a:9b:60:34:8e:68:b5:2e:6a:6b:91:f5:a4:8b:0d:
6b:b0:9f:fd:7a:f2:3d:b2:23:fe:eb:6c:81:5a:5d:39:7a:18:
76:f9:4b:79:b8:1e:6e:13:53:cf:bb:a4:34:f3:b2:ed:bd:a3:
fa:46:00:c8:2e:7e:c6:da:af:69:12:fd:67:3e:91:10:d2:ef:
f5:3d:59:7c:33:62:91:60:7f:47:3c:70:ec:5e:8a:18:62:0b:
bb:c9:d8:94:09:1e:9f:43:cc:56:e3:e8:12:64:45:98:3b:b9:
cf:aa:f5:9e:69:1f:00:67:55:c6:fe:64:ec:78:40:6f:43:8e:
ee:64:17:1e:ce:6e:d8:fb:b6:65:92:7c:4b:7c:86:91:36:86:
dc:36:6a:6d:3a:36:15:b4:d8:0b:75:ff:d7:4d:ac:da:a1:88:
c7:8e:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:13:24 2025 by rpki-client